Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/C622873EBC1711EAB3017713C4F9AE02.roa
File: C622873EBC1711EAB3017713C4F9AE02.roa (raw, json)
Hash identifier: bZKnuY83Td6ttOORGZybsXiS7TZxKwSiS2IgKQYbiW4=
Subject key identifier: C8:5A:0F:2F:65:38:24:B7:2C:8A:4A:FD:01:A9:FE:23:F4:35:5A:2F
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 0471
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/C622873EBC1711EAB3017713C4F9AE02.roa
Signing time: Fri 24 Dec 2021 10:58:56 +0000
ROA not before: Fri 24 Dec 2021 10:58:56 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139851
IP address blocks: 103.146.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Validity
Not Before: Dec 24 10:58:56 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61c5a7ef-c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:9d:c7:e2:91:f8:6c:7d:82:34:f3:aa:aa:
11:58:05:90:2a:07:dc:ab:90:08:b1:b6:46:d5:dc:
9d:d3:70:54:81:72:f0:ac:43:95:28:3c:0c:8f:3c:
ef:83:25:03:f0:9f:2a:57:44:6b:1a:08:c1:dd:b1:
55:fc:4f:2b:59:65:5e:15:05:6c:63:c5:e6:de:a1:
81:70:69:ea:a6:4d:03:32:94:44:f4:6e:ec:ef:06:
83:a0:96:88:3a:27:8a:08:24:8b:29:ca:8b:b4:3a:
9c:f9:8f:c8:54:07:0a:05:45:a9:cd:fa:6a:1a:82:
60:99:a8:e9:06:c0:e0:d9:8a:3c:92:34:ab:0b:f5:
02:32:c6:62:25:9c:44:aa:28:ee:61:88:88:f2:cd:
c5:5f:35:12:6c:e4:41:7a:47:c7:99:c5:68:45:18:
33:69:b5:bc:c8:97:22:24:80:b0:5e:12:b8:f7:bd:
b5:da:c5:81:f0:cd:8e:49:5e:c6:dc:1c:69:0a:1f:
2d:ae:58:73:62:6f:84:8d:26:62:bb:dc:42:79:6c:
4d:07:70:13:4e:c9:d4:3b:11:7d:f9:50:c5:bd:18:
e7:3f:88:8c:97:c0:b6:eb:92:4a:1f:cf:6a:d9:c2:
12:9a:03:e7:87:55:ca:93:2a:7e:d5:62:b5:68:64:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:0F:2F:65:38:24:B7:2C:8A:4A:FD:01:A9:FE:23:F4:35:5A:2F
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/C622873EBC1711EAB3017713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f8:a2:0e:cc:ea:9d:06:b8:e8:3a:54:02:99:db:31:cf:66:
54:d7:0f:10:41:a5:9f:bd:64:c8:73:41:42:dc:87:c8:3a:af:
23:47:b7:05:ac:fe:7a:6b:ed:9d:61:98:a0:06:bc:21:21:e2:
6f:bd:be:28:06:a1:eb:38:c5:2f:b9:dc:e1:38:b4:df:d3:af:
10:2c:3b:e6:61:56:6a:28:ef:36:7a:2d:a6:34:c9:d1:eb:94:
8f:96:eb:70:79:8f:fb:2d:49:1d:23:58:4f:76:2f:91:2b:f7:
2b:be:e4:f2:66:9f:1b:77:bf:bf:b1:09:bd:d1:f0:15:f0:c8:
a2:60:de:9d:3f:35:2d:dc:5f:8e:fb:21:64:96:66:99:83:ae:
18:a6:06:0d:b6:f8:09:84:4d:80:01:4c:d6:47:ee:44:e7:f8:
b5:62:64:e7:41:75:73:8c:48:e7:39:52:44:a2:b1:a3:7f:a5:
6b:30:52:35:a4:6f:c2:b7:d6:b1:08:ad:54:cf:49:70:70:29:
f6:ba:29:ba:3f:9a:31:77:a4:19:b9:5f:d0:20:ba:a6:02:b2:
b8:db:07:81:6b:e0:63:e1:dd:81:a4:30:fe:e9:73:78:bc:b5:
51:f4:ac:48:fc:85:bf:ab:a5:e0:4e:14:5e:88:46:b9:a5:2a:
77:f6:48:3b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0
QUFFNDNDNkQwHhcNMjExMjI0MTA1ODU2WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWM1YTdlZi1jNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgKdx+KR+Gx9gjTzqqoRWAWQKgfcq5AIsbZG1dyd03BUgXLwrEOVKDwMjzzv
gyUD8J8qV0RrGgjB3bFV/E8rWWVeFQVsY8Xm3qGBcGnqpk0DMpRE9G7s7waDoJaI
OieKCCSLKcqLtDqc+Y/IVAcKBUWpzfpqGoJgmajpBsDg2Yo8kjSrC/UCMsZiJZxE
qijuYYiI8s3FXzUSbORBekfHmcVoRRgzabW8yJciJICwXhK497212sWB8M2OSV7G
3BxpCh8trlhzYm+EjSZiu9xCeWxNB3ATTsnUOxF9+VDFvRjnP4iMl8C265JKH89q
2cISmgPnh1XKkyp+1WK1aGTFewIDAQABo4IClTCCApEwHQYDVR0OBBYEFMhaDy9l
OCS3LIpK/QGp/iP0NVovMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD
MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc1M0YvQkRBNTdGRkVCQzE2MTFFQTlGMkI3NDEyQzRGOUFFMDIvQzYyMjg3M0VC
QzE3MTFFQUIzMDE3NzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnklIwDQYJKoZIhvcNAQELBQADggEBAEv4og7M6p0GuOg6
VAKZ2zHPZlTXDxBBpZ+9ZMhzQULch8g6ryNHtwWs/npr7Z1hmKAGvCEh4m+9vigG
oes4xS+53OE4tN/TrxAsO+ZhVmoo7zZ6LaY0ydHrlI+W63B5j/stSR0jWE92L5Er
9yu+5PJmnxt3v7+xCb3R8BXwyKJg3p0/NS3cX477IWSWZpmDrhimBg22+AmETYAB
TNZH7kTn+LViZOdBdXOMSOc5UkSisaN/pWswUjWkb8K31rEIrVTPSXBwKfa6Kbo/
mjF3pBm5X9AguqYCsrjbB4Fr4GPh3YGkMP7pc3i8tVH0rEj8hb+rpeBOFF6IRrml
Knf2SDs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org