Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/07E3DA56C4FE11ECBD72527AC4F9AE02.roa
File: 07E3DA56C4FE11ECBD72527AC4F9AE02.roa (raw, json)
Hash identifier: DaeKb+kkfByfd1GmQmgmulUui+kjNruFONy1iWIRdZE=
Subject key identifier: AC:67:99:C8:11:4F:6F:28:86:97:78:D4:11:A5:1E:3C:96:8D:50:B4
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 01EE
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/07E3DA56C4FE11ECBD72527AC4F9AE02.roa
Signing time: Tue 26 Apr 2022 01:13:07 +0000
ROA not before: Tue 26 Apr 2022 01:13:07 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 139043
IP address blocks: 103.123.112.0/24 maxlen: 24
103.123.113.0/24 maxlen: 24
103.123.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Apr 26 01:13:07 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62674723-c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:95:60:01:7d:e0:6a:08:dc:f8:b5:ce:f2:
5c:73:fa:4a:aa:f6:eb:a2:b3:7f:af:1d:f7:63:a8:
e7:bb:98:a9:d6:30:95:28:f1:24:5c:0a:2d:0b:b6:
5f:b8:f3:bf:00:64:ef:20:f9:65:e2:43:47:95:e3:
78:95:2f:bc:29:06:1f:59:4b:15:38:0c:c4:f1:4a:
5d:14:ba:7f:9b:9e:c0:c6:4b:d3:a5:d5:b9:54:4d:
70:71:d5:f3:d9:8b:36:a1:0b:aa:c4:90:00:23:eb:
25:65:de:b3:8f:b9:6d:99:13:ba:44:a3:8a:5f:3a:
2d:8a:d4:5b:0e:68:91:ad:af:78:66:a0:e8:5a:81:
f7:0f:a5:25:e5:40:da:3e:0c:0d:b2:01:7a:60:6f:
4f:c4:34:8b:6d:6b:f1:b1:6c:20:ab:24:76:a7:df:
03:12:2f:36:67:1d:fb:34:a5:bf:10:29:0d:ab:43:
91:c6:c7:b4:10:ab:87:bd:cf:98:15:d2:5c:eb:9a:
4e:cf:b3:f4:03:73:73:34:41:96:ba:31:b6:24:fe:
2a:49:e4:6e:5c:41:4d:92:b6:0f:61:36:0b:70:45:
3f:c4:54:83:19:d5:2f:31:1a:96:d9:33:a0:6b:b8:
37:bc:80:82:44:cf:45:c2:f2:a9:3f:92:66:51:b9:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:99:C8:11:4F:6F:28:86:97:78:D4:11:A5:1E:3C:96:8D:50:B4
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/07E3DA56C4FE11ECBD72527AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.112.0/23
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
71:80:44:43:ce:9f:86:14:4f:cc:d6:1e:7f:b6:29:18:76:bf:
fd:d8:9b:59:7a:9f:1c:fe:8a:c9:ac:c1:a9:78:1a:02:c1:cd:
88:8d:8d:bf:98:f3:36:65:7b:b8:15:34:19:c9:a2:67:49:85:
c4:99:34:1f:69:75:9d:22:d0:1a:2d:57:99:9b:53:fa:8a:4f:
71:88:3c:db:62:ec:74:69:60:e8:f2:25:1b:7b:9c:ea:12:f3:
60:b8:82:0d:c7:49:1f:5a:f6:df:df:52:ef:81:45:e8:38:3b:
8e:19:48:7f:84:30:89:f3:36:c4:7e:b0:1f:7d:83:04:aa:61:
a3:92:65:85:f6:d2:6b:0e:66:c1:aa:91:7e:86:e1:6b:cc:b3:
8c:d4:84:a1:e6:06:4d:74:97:74:8f:b6:b9:7d:c6:1d:e8:bb:
99:8d:d9:d2:3d:ab:df:8c:0a:c9:c1:af:51:95:49:9c:12:46:
53:cd:e7:b0:dc:3a:3a:e7:e3:a3:d4:54:7b:0f:39:3f:3a:2f:
27:fc:dd:2b:ae:fb:ee:7a:27:64:ae:73:ce:3d:d2:20:58:53:
bd:6a:b5:2b:71:cc:21:b7:d6:0f:82:ed:9b:2b:6b:6f:eb:f0:
72:51:fc:9c:1e:ef:b6:d9:51:59:b5:20:c2:49:0b:9e:56:5e:
80:22:4a:2f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF
ODg1RDdDNTAwHhcNMjIwNDI2MDExMzA3WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjY3NDcyMy1jOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25GVYAF94GoI3Pi1zvJcc/pKqvbrorN/rx33Y6jnu5ip1jCVKPEkXAotC7Zf
uPO/AGTvIPll4kNHleN4lS+8KQYfWUsVOAzE8UpdFLp/m57AxkvTpdW5VE1wcdXz
2Ys2oQuqxJAAI+slZd6zj7ltmRO6RKOKXzotitRbDmiRra94ZqDoWoH3D6Ul5UDa
PgwNsgF6YG9PxDSLbWvxsWwgqyR2p98DEi82Zx37NKW/ECkNq0ORxse0EKuHvc+Y
FdJc65pOz7P0A3NzNEGWujG2JP4qSeRuXEFNkrYPYTYLcEU/xFSDGdUvMRqW2TOg
a7g3vICCRM9FwvKpP5JmUbn7JwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKxnmcgR
T28ohpd41BGlHjyWjVC0MB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1
OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NFRTMvOUE3N0FBMkEwNTk0MTFFQzlGNjQ2ODU0QzRGOUFFMDIvMDdFM0RBNTZD
NEZFMTFFQ0JENzI1MjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFne3ADBABne3MwDQYJKoZIhvcNAQELBQADggEBAHGAREPO
n4YUT8zWHn+2KRh2v/3Ym1l6nxz+ismswal4GgLBzYiNjb+Y8zZle7gVNBnJomdJ
hcSZNB9pdZ0i0BotV5mbU/qKT3GIPNti7HRpYOjyJRt7nOoS82C4gg3HSR9a9t/f
Uu+BReg4O44ZSH+EMInzNsR+sB99gwSqYaOSZYX20msOZsGqkX6G4WvMs4zUhKHm
Bk10l3SPtrl9xh3ou5mN2dI9q9+MCsnBr1GVSZwSRlPN57DcOjrn46PUVHsPOT86
Lyf83Suu++56J2Suc8490iBYU71qtStxzCG31g+C7Zsra2/r8HJR/Jwe77bZUVm1
IMJJC55WXoAiSi8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org