Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/93F7317E1CBE11ED97666764C4F9AE02.roa
File: 93F7317E1CBE11ED97666764C4F9AE02.roa (raw, json)
Hash identifier: W8z1eU8qf+KjZLGbNhut92Uxwl1c/t3XHPTlZUMaVbw=
Subject key identifier: EB:04:0F:B4:E1:4E:1B:BD:96:63:5D:FC:8C:DD:F7:C0:97:86:D7:18
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 04B3
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/93F7317E1CBE11ED97666764C4F9AE02.roa
Signing time: Mon 15 Aug 2022 17:20:37 +0000
ROA not before: Mon 15 Aug 2022 17:20:37 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 49999
IP address blocks: 103.110.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Aug 15 17:20:37 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62fa8065-36c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:bf:a4:58:86:70:80:cf:48:0f:9e:df:2e:
e2:07:e3:fb:34:8a:9e:df:f1:18:0e:3e:28:32:df:
d0:34:a4:c4:30:8f:3e:4a:3d:d6:fd:43:67:93:ff:
a2:16:5a:7b:12:2b:eb:4f:e3:e8:e3:4f:dd:94:2d:
05:d1:70:60:bd:ab:87:58:63:f6:11:c4:bf:83:4e:
58:4f:29:9e:7b:73:56:e1:ab:4e:2f:31:5f:dd:d1:
73:98:e0:18:b3:03:42:bf:8e:f4:49:09:41:23:63:
9c:aa:5d:8c:8d:26:55:bd:44:12:c5:2d:e3:ec:c1:
f4:e3:70:e2:7b:81:8c:0d:fd:54:a4:47:cc:3a:e6:
dc:8e:23:9f:0e:58:05:1b:5c:af:70:db:ce:31:31:
32:2c:bd:f2:b7:d3:9e:6e:a2:22:6b:91:ac:ea:c2:
bc:28:74:ce:85:21:b3:65:5e:01:72:bc:f8:34:f1:
e0:89:6c:a3:da:a5:29:f4:fe:95:b1:bd:94:16:3d:
91:82:61:d2:28:2f:e4:fa:39:bf:0b:1f:fb:dc:7f:
ca:d8:a5:d5:aa:a6:7c:7f:3e:97:44:e4:5c:fb:3a:
48:2a:d9:61:71:7f:3c:fa:23:05:b0:76:49:4c:c1:
a7:ab:cc:d3:3e:25:60:85:99:fb:f9:ba:40:3b:f1:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:0F:B4:E1:4E:1B:BD:96:63:5D:FC:8C:DD:F7:C0:97:86:D7:18
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/93F7317E1CBE11ED97666764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.105.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cf:2d:cf:c9:3e:b7:db:21:6a:ec:e1:30:ea:bb:8a:4c:94:
dc:c6:dd:3c:f0:57:99:7d:62:09:92:43:8c:eb:92:20:b1:f7:
35:a6:dc:ea:69:49:9d:49:a3:1f:64:85:98:66:3b:ea:37:f7:
b6:2a:56:6d:c3:df:02:f1:fc:27:27:07:e8:0c:46:50:df:3f:
78:e7:03:53:99:a7:f7:fa:07:6e:6a:d9:47:4f:3c:8f:6a:41:
08:ad:07:50:76:2b:ae:97:45:98:c3:88:9d:ec:76:f6:45:c1:
30:6c:7d:02:71:aa:c3:85:d8:71:5a:ad:8a:fd:8f:15:2b:cd:
84:d9:a0:28:79:1b:a1:4d:ac:cc:cf:64:ec:79:14:22:0d:73:
9e:9f:04:10:28:3f:2b:49:a6:ff:f9:37:1b:52:c2:df:fc:50:
cf:1f:1e:cc:11:ac:5b:c6:fe:1e:e7:33:8d:9e:6e:7e:73:f0:
e3:6e:1a:6d:fb:d7:cd:6a:36:88:9c:b7:41:1a:b8:af:9e:05:
0d:6b:d5:ac:80:af:3f:de:c3:65:f6:60:9e:44:ba:69:11:03:
d6:a6:6b:a8:c2:a3:69:0f:cb:92:6c:9a:28:0f:0b:31:c1:65:
ce:34:e9:1f:26:54:a8:a0:cf:3a:c0:8a:94:18:d6:bf:4b:1f:
32:ac:15:56
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3
RDdGODc4RjIwHhcNMjIwODE1MTcyMDM3WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZhODA2NS0zNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwe/pFiGcIDPSA+e3y7iB+P7NIqe3/EYDj4oMt/QNKTEMI8+Sj3W/UNnk/+i
Flp7EivrT+Po40/dlC0F0XBgvauHWGP2EcS/g05YTymee3NW4atOLzFf3dFzmOAY
swNCv470SQlBI2Ocql2MjSZVvUQSxS3j7MH043Die4GMDf1UpEfMOubcjiOfDlgF
G1yvcNvOMTEyLL3yt9OebqIia5Gs6sK8KHTOhSGzZV4Bcrz4NPHgiWyj2qUp9P6V
sb2UFj2RgmHSKC/k+jm/Cx/73H/K2KXVqqZ8fz6XRORc+zpIKtlhcX88+iMFsHZJ
TMGnq8zTPiVghZn7+bpAO/HSTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOsED7Th
Thu9lmNd/Izd98CXhtcYMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5
NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MxREMvQjJEMURFMjA1OTRGMTFFQjg4RjdBNzNFQzRGOUFFMDIvOTNGNzMxN0Ux
Q0JFMTFFRDk3NjY2NzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnbmkwDQYJKoZIhvcNAQELBQADggEBADPPLc/JPrfbIWrs
4TDqu4pMlNzG3TzwV5l9YgmSQ4zrkiCx9zWm3OppSZ1Jox9khZhmO+o397YqVm3D
3wLx/CcnB+gMRlDfP3jnA1OZp/f6B25q2UdPPI9qQQitB1B2K66XRZjDiJ3sdvZF
wTBsfQJxqsOF2HFarYr9jxUrzYTZoCh5G6FNrMzPZOx5FCINc56fBBAoPytJpv/5
NxtSwt/8UM8fHswRrFvG/h7nM42ebn5z8ONuGm37181qNoict0EauK+eBQ1r1ayA
rz/ew2X2YJ5EumkRA9ama6jCo2kPy5JsmigPCzHBZc406R8mVKigzzrAipQY1r9L
HzKsFVY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org