Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/7641C04E96F411ED98E26732C4F9AE02.roa
File: 7641C04E96F411ED98E26732C4F9AE02.roa (raw, json)
Hash identifier: pMVOWXHwJpDMdOtG5SPgl/b5UTE3Z4brFz3IssOA0OA=
Subject key identifier: EE:87:26:FE:84:64:E7:E2:0C:3F:F1:82:28:F0:2E:1A:56:4B:B3:08
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 02E8
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/7641C04E96F411ED98E26732C4F9AE02.roa
Signing time: Wed 18 Jan 2023 05:53:42 +0000
ROA not before: Wed 18 Jan 2023 05:53:42 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150671
IP address blocks: 103.174.194.0/24 maxlen: 24
103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Jan 18 05:53:42 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63c78966-4965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:3b:7d:69:b0:68:c6:f3:d0:60:10:28:73:
61:31:dc:72:33:41:7f:ad:06:b5:9f:34:10:c1:df:
42:a2:6e:d7:e8:f7:42:88:23:3f:86:5e:3c:4f:23:
cf:90:38:ae:f3:06:32:9b:63:2c:a0:d0:ce:ae:7e:
3b:f0:6d:cf:cb:c5:f1:dc:6e:ef:fd:22:9e:a2:e9:
56:6c:aa:54:b5:b8:8a:37:09:e3:f1:c2:26:33:a4:
50:5b:89:93:da:e3:41:97:22:4a:69:f4:2d:70:2a:
2e:9c:1f:a6:12:3a:25:03:9e:42:2d:f7:45:b4:6f:
18:68:03:e0:da:bd:fc:f1:82:9a:b5:bf:98:39:d2:
68:94:07:e7:9a:07:8d:3c:34:b5:ab:dd:63:13:e3:
23:6f:cb:4d:7e:84:5d:8c:52:af:8d:79:e1:0d:69:
aa:67:f9:27:02:3e:58:4d:9e:49:aa:40:9c:f0:28:
cf:19:c3:48:f0:86:96:ab:41:03:82:60:b1:b3:d4:
13:80:95:57:fe:c4:10:f7:42:b7:1c:f2:95:18:08:
5b:19:e8:43:17:dc:d5:02:06:db:98:d1:51:3a:9a:
9b:b9:fc:3d:0d:9f:02:49:c2:ef:54:64:09:df:95:
e9:19:1f:de:17:5f:ba:dd:2b:09:73:53:5b:e6:72:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:26:FE:84:64:E7:E2:0C:3F:F1:82:28:F0:2E:1A:56:4B:B3:08
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/7641C04E96F411ED98E26732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:36:c0:89:f8:2d:41:63:d5:5b:13:f3:da:3b:df:21:7e:3b:
53:9a:54:40:aa:99:68:60:96:4b:46:32:86:bb:83:e0:48:a7:
0c:45:ea:d9:bf:af:09:82:34:17:ef:f9:cc:b9:f3:a9:b2:6d:
e0:40:8d:8d:a7:6f:c9:2c:87:10:e1:fb:dd:15:c1:42:d8:a0:
aa:d0:fe:d1:22:fb:e0:7c:fc:a1:15:92:c8:b6:0a:2e:af:c2:
cb:ce:1b:64:ce:85:03:c0:fe:69:b7:9d:27:a7:e1:80:b0:b1:
63:fe:3f:bd:30:cc:81:cd:fe:15:c0:89:74:eb:f9:1d:cd:d5:
d6:35:27:83:0c:a7:a1:35:f5:2c:21:8e:b7:3e:81:02:48:50:
4f:f6:ff:06:39:68:43:a7:df:da:e5:27:6e:57:e9:1f:30:1b:
49:f2:49:da:c9:fe:9d:2c:23:1a:bd:12:19:d0:d0:b2:df:03:
51:e3:9b:71:48:cb:b1:3c:8d:42:f4:de:a8:58:2b:ba:46:f5:
2a:de:9e:08:de:d7:c1:ab:a9:c9:85:ee:20:c6:db:a2:06:f8:
92:fd:7f:85:b6:36:47:50:17:d1:77:32:21:61:86:9e:58:a1:
2e:10:ae:c4:7f:bc:9c:60:a8:22:2d:40:a2:40:4c:b1:1b:6b:
7e:fd:4b:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD
NDFDNzE2REUwHhcNMjMwMTE4MDU1MzQyWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2M3ODk2Ni00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6b87fWmwaMbz0GAQKHNhMdxyM0F/rQa1nzQQwd9Com7X6PdCiCM/hl48TyPP
kDiu8wYym2MsoNDOrn478G3Py8Xx3G7v/SKeoulWbKpUtbiKNwnj8cImM6RQW4mT
2uNBlyJKafQtcCounB+mEjolA55CLfdFtG8YaAPg2r388YKatb+YOdJolAfnmgeN
PDS1q91jE+Mjb8tNfoRdjFKvjXnhDWmqZ/knAj5YTZ5JqkCc8CjPGcNI8IaWq0ED
gmCxs9QTgJVX/sQQ90K3HPKVGAhbGehDF9zVAgbbmNFROpqbufw9DZ8CScLvVGQJ
35XpGR/eF1+63SsJc1Nb5nKXhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO6HJv6E
ZOfiDD/xgijwLhpWS7MIMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy
MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI0NDMvOTI0MjZGODY0MjBBMTFFQzk0QzRGMTVBQzRGOUFFMDIvNzY0MUMwNEU5
NkY0MTFFRDk4RTI2NzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrsIwDQYJKoZIhvcNAQELBQADggEBAH02wIn4LUFj1VsT
89o73yF+O1OaVECqmWhglktGMoa7g+BIpwxF6tm/rwmCNBfv+cy586mybeBAjY2n
b8kshxDh+90VwULYoKrQ/tEi++B8/KEVksi2Ci6vwsvOG2TOhQPA/mm3nSen4YCw
sWP+P70wzIHN/hXAiXTr+R3N1dY1J4MMp6E19Swhjrc+gQJIUE/2/wY5aEOn39rl
J25X6R8wG0nySdrJ/p0sIxq9EhnQ0LLfA1Hjm3FIy7E8jUL03qhYK7pG9Srengje
18GrqcmF7iDG26IG+JL9f4W2NkdQF9F3MiFhhp5YoS4QrsR/vJxgqCItQKJATLEb
a379S8M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org