Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/0E8352C6E9BF11EB9287F045C4F9AE02.roa
File: 0E8352C6E9BF11EB9287F045C4F9AE02.roa (raw, json)
Hash identifier: OVGL5+ZWAsFwgAmhP3vm2auS/0Z7DvFtKVUFwli482w=
Subject key identifier: AB:4B:DB:BA:FC:C8:3D:45:E3:18:F1:06:7C:B9:34:D0:D4:0B:04:CA
Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial: 02CE
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/0E8352C6E9BF11EB9287F045C4F9AE02.roa
Signing time: Mon 21 Mar 2022 13:51:00 +0000
ROA not before: Mon 21 Mar 2022 13:51:00 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 9408
IP address blocks: 203.0.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Validity
Not Before: Mar 21 13:51:00 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623882c4-6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:1a:71:cc:1a:eb:46:d6:77:67:8c:29:13:
60:a7:4a:d4:ff:11:f1:89:f7:3f:07:8e:b0:32:50:
21:65:41:02:b8:0e:79:01:d2:4d:af:49:5b:22:3a:
09:73:4a:8a:d7:03:c0:a9:e1:87:a3:b6:9d:23:44:
62:2c:44:e8:13:01:09:29:88:ab:2e:de:62:c2:92:
10:e5:09:f6:01:9a:e2:59:31:65:85:2c:3e:dd:50:
d4:a9:b5:d0:24:33:91:04:b0:97:15:fe:3a:5c:da:
f5:c7:16:5b:1e:44:c4:78:51:b7:03:63:a6:55:53:
a5:32:b4:39:91:98:4a:64:aa:ac:4a:0a:10:8b:dd:
c1:2b:5f:2c:e0:6f:1e:8f:ab:a7:b3:68:04:79:27:
43:de:47:b6:0b:56:d1:9a:75:63:66:6b:b7:75:1e:
3a:c0:8e:56:a8:a0:cd:e9:fe:05:9c:5a:f8:af:80:
ea:59:fc:52:fe:a5:a8:d0:c0:11:01:04:58:66:b7:
e4:1b:c4:ee:ce:7c:d6:6d:e2:6f:b3:7f:c9:bb:21:
d0:ce:90:4e:60:4a:0c:18:ba:d2:85:39:49:27:a2:
e6:1a:74:40:39:93:39:0c:9a:a7:ca:5f:f5:ae:18:
8b:64:0c:81:30:b6:6c:45:81:4b:13:83:26:ec:47:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:DB:BA:FC:C8:3D:45:E3:18:F1:06:7C:B9:34:D0:D4:0B:04:CA
X509v3 Authority Key Identifier:
keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/0E8352C6E9BF11EB9287F045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.0.156.0/22
Signature Algorithm: sha256WithRSAEncryption
29:e3:39:92:f0:14:82:5f:a7:57:17:f5:75:e2:2c:ac:67:dc:
5e:dc:45:ca:d1:61:2f:da:a0:8b:ea:6c:2d:96:4a:8a:db:07:
77:ca:ee:f7:43:8f:37:2e:eb:79:df:3e:9d:38:82:68:f0:b6:
f3:8a:bb:0c:21:5f:79:e8:4d:a4:e4:29:14:73:25:73:c0:c2:
65:76:ca:49:39:4d:9e:33:11:38:e0:d5:eb:93:77:40:2a:f9:
7a:24:c3:7d:e2:1c:ed:f5:32:49:ed:6b:ee:68:c0:99:09:80:
43:84:a3:03:41:cc:59:de:2d:d6:8c:23:68:db:5a:ca:46:ea:
3e:18:47:20:81:78:77:2b:18:d6:ac:94:68:c9:7d:30:6a:1a:
98:cb:6b:94:a9:8c:8d:7a:15:47:bb:03:eb:80:60:8b:65:d6:
ad:58:93:08:3f:cd:98:e9:85:5d:cb:81:26:ee:b7:e6:b0:46:
36:69:10:de:50:8f:9c:63:0a:43:85:46:85:0b:19:db:f0:50:
25:9a:1a:86:ca:cf:ac:c1:c5:59:3c:c7:08:b6:d1:b3:39:73:
ff:58:6f:c0:a6:eb:7a:12:d6:f5:2f:e9:7e:c3:a6:ec:98:13:
b8:99:65:44:a4:65:5e:ed:81:d1:5e:2b:6f:9f:ec:75:7a:ec:
7c:e5:16:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz
NDczRjE3OTgwHhcNMjIwMzIxMTM1MTAwWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjM4ODJjNC02YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ8accwa60bWd2eMKRNgp0rU/xHxifc/B46wMlAhZUECuA55AdJNr0lbIjoJ
c0qK1wPAqeGHo7adI0RiLEToEwEJKYirLt5iwpIQ5Qn2AZriWTFlhSw+3VDUqbXQ
JDORBLCXFf46XNr1xxZbHkTEeFG3A2OmVVOlMrQ5kZhKZKqsSgoQi93BK18s4G8e
j6uns2gEeSdD3ke2C1bRmnVjZmu3dR46wI5WqKDN6f4FnFr4r4DqWfxS/qWo0MAR
AQRYZrfkG8TuznzWbeJvs3/JuyHQzpBOYEoMGLrShTlJJ6LmGnRAOZM5DJqnyl/1
rhiLZAyBMLZsRYFLE4Mm7EdZEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKtL27r8
yD1F4xjxBny5NNDUCwTKMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx
MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCMzMvQ0QzNURCMUE5MTI0MTFFQjlCNzI5MDNBQzRGOUFFMDIvMEU4MzUyQzZF
OUJGMTFFQjkyODdGMDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLAJwwDQYJKoZIhvcNAQELBQADggEBACnjOZLwFIJfp1cX
9XXiLKxn3F7cRcrRYS/aoIvqbC2WSorbB3fK7vdDjzcu63nfPp04gmjwtvOKuwwh
X3noTaTkKRRzJXPAwmV2ykk5TZ4zETjg1euTd0Aq+Xokw33iHO31Mknta+5owJkJ
gEOEowNBzFneLdaMI2jbWspG6j4YRyCBeHcrGNaslGjJfTBqGpjLa5SpjI16FUe7
A+uAYItl1q1Ykwg/zZjphV3LgSbut+awRjZpEN5Qj5xjCkOFRoULGdvwUCWaGobK
z6zBxVk8xwi20bM5c/9Yb8Cm63oS1vUv6X7DpuyYE7iZZUSkZV7tgdFeK2+f7HV6
7HzlFgc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org