Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
File: 511EE9A639FE11E982779C51C4F9AE02.roa (raw, json)
Hash identifier: BqYgLiq6rsZhYqbi2iHpYE4mjT9zkyMDzhF8SCMtuFo=
Subject key identifier: 61:85:FE:4D:EB:57:52:F0:A6:44:04:BA:BA:00:97:48:8F:14:3F:A1
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 3340
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
Signing time: Mon 30 Jan 2023 14:20:09 +0000
ROA not before: Mon 30 Jan 2023 14:20:09 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 132040
IP address blocks: 103.23.16.0/22 maxlen: 24
110.173.160.0/20 maxlen: 20
202.8.44.0/22 maxlen: 24
218.100.21.0/24 maxlen: 24
218.100.23.0/24 maxlen: 24
2001:4410::/32 maxlen: 40
2001:4410:1000::/45 maxlen: 48
2001:4410:2000::/43 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13120 (0x3340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Jan 30 14:20:09 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d7d218-0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:c7:30:54:2e:85:5e:21:9c:ba:5a:3c:e6:
b9:84:4a:3b:19:cd:42:3c:d8:26:c4:fc:c2:84:df:
84:67:ae:24:65:52:18:33:37:04:56:1c:74:86:f4:
ca:d6:43:03:ce:91:75:8c:a0:7a:76:e2:0b:fc:3f:
fc:a4:d4:b9:7d:1d:1f:83:fc:35:04:29:e3:92:ab:
8f:28:86:e4:9f:88:45:53:c2:03:7f:70:fe:e0:bb:
e5:3e:1c:46:90:19:b6:69:cd:e1:1c:b0:8e:88:15:
c5:d1:5d:1d:1e:97:11:59:6e:f5:34:2d:a8:75:4f:
70:68:7e:b4:54:3a:2e:65:5e:09:20:98:bb:69:4b:
d4:d6:03:5b:15:ce:3a:be:a3:42:a9:bf:be:d8:d4:
6f:8d:a7:90:d7:bf:99:ba:a7:73:8f:a6:71:e1:5a:
74:7c:0d:55:97:8c:f3:7f:a9:d1:cc:8b:3e:d4:6b:
39:a8:96:ec:83:97:b3:60:93:61:59:d7:95:3a:97:
1e:09:e6:c4:d2:f3:41:d8:f5:29:19:40:31:c8:c1:
ef:f1:61:72:b1:8c:c0:ae:47:0d:36:c9:3f:45:75:
7c:2f:90:c6:bd:52:24:e1:0f:19:68:0d:a9:46:a0:
8a:d9:14:18:1d:65:70:35:b5:1f:01:5b:ba:fa:6c:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:FE:4D:EB:57:52:F0:A6:44:04:BA:BA:00:97:48:8F:14:3F:A1
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.16.0/22
110.173.160.0/20
202.8.44.0/22
218.100.21.0/24
218.100.23.0/24
IPv6:
2001:4410::/32
Signature Algorithm: sha256WithRSAEncryption
4a:80:3a:5d:8a:2e:f5:53:a9:0d:e4:93:29:58:74:1e:48:87:
6d:50:3e:04:d0:b1:bf:e1:4d:21:3f:96:6c:de:af:c8:86:b0:
ed:1d:40:bf:ba:73:bb:ac:8c:a7:22:7d:e5:a8:2a:79:38:47:
b4:90:73:4f:8a:95:b0:cb:e8:64:7a:02:41:04:45:32:56:cd:
06:17:e8:f6:db:63:ce:e9:98:92:d2:6e:0a:f2:eb:8c:46:06:
2d:de:04:4b:92:7b:29:57:56:ed:1c:d4:0e:2d:45:ff:af:b6:
12:c9:20:f9:97:fa:7f:e1:0d:cf:26:43:d1:bd:d4:bb:2e:27:
57:50:63:53:43:45:cf:5e:39:0e:98:62:56:b7:9d:57:b0:19:
85:d6:1e:35:1a:2f:fd:78:48:30:ee:0e:37:82:8f:a6:19:83:
d5:2d:14:45:f8:bf:2a:cc:5c:a3:0b:24:79:05:02:85:87:90:
12:ca:0d:5d:b3:d8:87:1c:a1:d3:ad:a2:ff:f3:8d:aa:ba:e5:
03:25:a2:ac:69:9d:6e:46:94:0f:c7:7d:ef:99:a3:eb:ae:11:
bb:ef:d1:a2:91:4d:3e:3e:ae:8c:83:a3:38:70:2a:df:07:71:
50:2e:34:71:a7:e2:cb:72:c1:29:38:d7:0e:d4:7a:14:41:2c:
79:31:80:32
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICM0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy
MEFDMDM1MjcwHhcNMjMwMTMwMTQyMDA5WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Q3ZDIxOC0wYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaTHMFQuhV4hnLpaPOa5hEo7Gc1CPNgmxPzChN+EZ64kZVIYMzcEVhx0hvTK
1kMDzpF1jKB6duIL/D/8pNS5fR0fg/w1BCnjkquPKIbkn4hFU8IDf3D+4LvlPhxG
kBm2ac3hHLCOiBXF0V0dHpcRWW71NC2odU9waH60VDouZV4JIJi7aUvU1gNbFc46
vqNCqb++2NRvjaeQ17+Zuqdzj6Zx4Vp0fA1Vl4zzf6nRzIs+1Gs5qJbsg5ezYJNh
WdeVOpceCebE0vNB2PUpGUAxyMHv8WFysYzArkcNNsk/RXV8L5DGvVIk4Q8ZaA2p
RqCK2RQYHWVwNbUfAVu6+mygXwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGGF/k3r
V1LwpkQEuroAl0iPFD+hMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQ4ODAvNjlGMDRCQTgxRDZBMTFFMkJCNzAxNEE4MDhCMDJDRDIvNTExRUU5QTYz
OUZFMTFFOTgyNzc5QzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAJnFxADBARuraADBALKCCwDBADaZBUDBADaZBcwDQQCAAIw
BwMFACABRBAwDQYJKoZIhvcNAQELBQADggEBAEqAOl2KLvVTqQ3kkylYdB5Ih21Q
PgTQsb/hTSE/lmzer8iGsO0dQL+6c7usjKcifeWoKnk4R7SQc0+KlbDL6GR6AkEE
RTJWzQYX6PbbY87pmJLSbgry64xGBi3eBEuSeylXVu0c1A4tRf+vthLJIPmX+n/h
Dc8mQ9G91LsuJ1dQY1NDRc9eOQ6YYla3nVewGYXWHjUaL/14SDDuDjeCj6YZg9Ut
FEX4vyrMXKMLJHkFAoWHkBLKDV2z2IccodOtov/zjaq65QMloqxpnW5GlA/Hfe+Z
o+uuEbvv0aKRTT4+royDozhwKt8HcVAuNHGn4stywSk41w7UehRBLHkxgDI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org