Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/9519C1B4A1A911EDB793D876C4F9AE02.roa
File: 9519C1B4A1A911EDB793D876C4F9AE02.roa (raw, json)
Hash identifier: Yn+eYEdTiItplIzbCtSLnPSW9+Rj9xH+FAwxZHTdRCk=
Subject key identifier: 06:B7:B6:5A:88:21:90:A6:92:36:48:5A:28:32:7A:F2:B2:C3:E1:D8
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 02
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/9519C1B4A1A911EDB793D876C4F9AE02.roa
Signing time: Tue 31 Jan 2023 20:55:24 +0000
ROA not before: Tue 31 Jan 2023 20:55:24 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150324
IP address blocks: 103.12.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Jan 31 20:55:24 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63d9803c-82a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:18:77:3c:db:83:99:6f:e7:f6:85:f9:40:
35:85:71:46:94:27:e4:ad:85:5b:f6:60:d0:16:56:
5e:5d:37:0f:9a:de:7d:18:8f:dc:a5:8f:96:fb:4a:
10:4f:dc:19:1a:6b:48:92:70:68:e9:e3:02:d4:7e:
79:a0:b8:2c:47:b8:15:a8:3b:3e:4d:63:82:3f:c2:
48:30:bd:93:30:3d:0f:9b:92:3f:ab:f9:dd:51:7a:
78:90:35:dd:d7:f7:64:ef:3f:c0:55:91:18:cd:63:
0f:60:88:78:ab:35:6c:99:e9:81:26:8d:f7:38:9c:
71:f0:5f:c5:0f:64:77:bc:e8:49:da:2c:91:b9:62:
a3:76:20:3e:00:3f:b5:bb:27:22:df:0a:fc:0b:61:
3a:4f:92:b1:9a:98:18:14:b4:3f:7c:65:be:5e:27:
e1:0e:03:91:29:90:c8:b6:d3:05:b1:29:88:b5:0e:
f6:b0:0a:52:6a:cf:23:ad:79:b1:c0:70:f6:9e:a4:
8b:18:83:70:13:2b:d1:af:49:98:c4:1d:c0:1a:fd:
5e:d0:a1:8d:89:64:c8:4c:19:af:22:c0:22:cc:33:
53:59:aa:f0:db:58:a0:50:71:b7:af:2c:9c:78:52:
71:b8:28:17:ac:23:22:b2:f3:83:90:d7:4f:df:95:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B7:B6:5A:88:21:90:A6:92:36:48:5A:28:32:7A:F2:B2:C3:E1:D8
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/9519C1B4A1A911EDB793D876C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.78.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3f:45:c9:fc:31:d7:27:23:fc:a3:72:d0:7c:31:03:72:87:
3e:ee:9c:7c:38:93:e0:f3:17:4a:ee:b8:1b:06:58:19:3d:1f:
46:98:be:a2:ee:3e:d8:87:9c:4c:df:6b:d7:ab:53:45:84:db:
f3:04:08:d7:7b:8b:0b:95:80:ff:4a:0b:55:e7:a5:33:52:23:
8f:66:47:09:ef:b8:91:a0:8f:0c:a6:35:18:f3:8d:5d:41:c0:
1a:70:32:bb:8e:c7:26:a7:48:b7:5a:56:fb:7f:ff:ee:b0:13:
b4:d0:17:61:17:b8:9f:87:3f:cf:be:23:15:b5:84:3b:87:83:
de:22:1c:1f:51:82:90:93:4d:7e:cb:b4:05:c0:f8:12:f7:d7:
b8:81:3b:be:19:0b:35:3f:fe:6b:9b:8f:02:4a:60:99:35:70:
41:a0:5b:ee:0f:39:1a:10:71:ba:94:b7:4a:05:e4:a4:1d:c2:
84:ad:6d:f9:7e:7e:04:96:ff:69:c3:d8:87:a4:d4:22:a2:0d:
c7:66:d6:e9:4e:b5:1c:0b:24:8a:34:e9:b3:1a:e9:dc:b3:de:
09:40:d5:4b:81:46:ae:33:d7:a5:c0:5b:0b:3d:9b:e1:6d:fe:
94:06:79:2f:57:c9:bd:cf:c0:b0:54:64:50:70:de:80:2b:e7:
ad:e8:d6:a3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTUxQjExMC8GA1UEBRMoNUZFMDRDOTU3QTZDQkM1NDBBMzRGNDUzRDEzRTNGODA1
MEM4RjRFRTAeFw0yMzAxMzEyMDU1MjRaFw0yMzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZDk4MDNjLTgyYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDV6xh3PNuDmW/n9oX5QDWFcUaUJ+SthVv2YNAWVl5dNw+a3n0Yj9ylj5b7ShBP
3Bkaa0iScGjp4wLUfnmguCxHuBWoOz5NY4I/wkgwvZMwPQ+bkj+r+d1ReniQNd3X
92TvP8BVkRjNYw9giHirNWyZ6YEmjfc4nHHwX8UPZHe86EnaLJG5YqN2ID4AP7W7
JyLfCvwLYTpPkrGamBgUtD98Zb5eJ+EOA5EpkMi20wWxKYi1DvawClJqzyOtebHA
cPaepIsYg3ATK9GvSZjEHcAa/V7QoY2JZMhMGa8iwCLMM1NZqvDbWKBQcbevLJx4
UnG4KBesIyKy84OQ10/flctJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBre2Wogh
kKaSNkhaKDJ68rLD4dgwHwYDVR0jBBgwFoAUX+BMlXpsvFQKNPRT0T4/gFDI9O4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNTFCLzAwQ0E5OEYyQTFB
NTExRUQ5MTIzMjI1NEM0RjlBRTAyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlP
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWC1CTWxYcHN2RlFLTlBSVDBUNF9nRkRJOU80LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi85NTE5QzFCNEEx
QTkxMUVEQjc5M0Q4NzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcMTjANBgkqhkiG9w0BAQsFAAOCAQEAcz9Fyfwx1ycj/KNy
0HwxA3KHPu6cfDiT4PMXSu64GwZYGT0fRpi+ou4+2IecTN9r16tTRYTb8wQI13uL
C5WA/0oLVeelM1Ijj2ZHCe+4kaCPDKY1GPONXUHAGnAyu47HJqdIt1pW+3//7rAT
tNAXYRe4n4c/z74jFbWEO4eD3iIcH1GCkJNNfsu0BcD4EvfXuIE7vhkLNT/+a5uP
AkpgmTVwQaBb7g85GhBxupS3SgXkpB3ChK1t+X5+BJb/acPYh6TUIqINx2bW6U61
HAskijTpsxrp3LPeCUDVS4FGrjPXpcBbCz2b4W3+lAZ5L1fJvc/AsFRkUHDegCvn
rejWow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org