Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6826424420E11EC89D7C163C4F9AE02.roa
File: B6826424420E11EC89D7C163C4F9AE02.roa (raw, json)
Hash identifier: N0QtFkYdv2CejjMckE/6IKpMfgEjQ6FvO1usFnlb2b4=
Subject key identifier: 38:F6:6C:B3:ED:0E:5A:0B:1A:D5:0B:C5:A9:42:31:81:43:BF:62:37
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 02
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6826424420E11EC89D7C163C4F9AE02.roa
Signing time: Wed 10 Nov 2021 10:12:30 +0000
ROA not before: Wed 10 Nov 2021 10:12:30 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 38264
IP address blocks: 103.174.194.0/24 maxlen: 24
103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Nov 10 10:12:30 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=618b9b0e-e848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:04:3a:46:d3:fd:7e:72:90:16:e0:69:00:
94:1c:7a:b8:c1:6f:e5:53:c2:52:c8:9b:9d:61:05:
1b:ad:97:92:90:ad:81:0a:1e:e1:77:9a:c5:74:31:
d7:80:3b:cb:1d:60:32:1f:a1:f6:7f:93:5e:10:d4:
3a:ba:12:20:d4:b0:90:a3:19:1c:b2:bc:17:f4:79:
64:37:2e:12:66:d7:ce:42:5d:d2:47:b3:7a:2c:e2:
27:a6:78:ed:46:ea:99:39:50:59:c7:02:8c:bb:e7:
4c:ae:56:9c:6a:fb:9b:24:35:73:b7:93:7d:52:05:
e1:9b:25:6c:55:91:bd:49:7c:0a:b1:58:44:86:b6:
10:46:21:8f:24:e8:e1:37:7e:d3:e8:ab:6c:74:4b:
be:b5:45:cb:e7:b9:96:22:cb:28:f0:10:ce:22:6e:
72:57:c4:ae:57:37:47:d2:8f:83:4f:64:0a:04:f7:
1d:0d:68:07:13:5f:dc:9a:21:98:c1:d9:88:37:7e:
37:25:f0:a6:8e:64:ed:c1:0f:4c:9b:60:07:1d:f7:
8c:90:b5:be:46:f1:f7:90:cd:22:9b:84:1d:ec:3c:
b7:51:6d:70:5c:a8:c1:83:89:40:92:f9:ad:43:db:
fc:60:42:12:77:fb:1a:26:fd:3f:7f:97:82:e0:68:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:6C:B3:ED:0E:5A:0B:1A:D5:0B:C5:A9:42:31:81:43:BF:62:37
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6826424420E11EC89D7C163C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/23
Signature Algorithm: sha256WithRSAEncryption
99:92:c8:cc:43:da:d5:8b:f2:60:7e:4f:c4:18:6a:6c:01:9a:
67:09:ce:5e:be:4f:bd:cb:ca:57:8e:f7:f0:30:30:d8:5d:60:
3b:35:6e:dd:47:46:9e:34:fa:ca:04:5c:de:40:f9:4b:e3:38:
69:a9:a0:95:30:cd:f1:ce:6d:0e:7f:2b:f5:dc:c1:99:77:32:
97:db:7f:3a:45:02:d8:8b:d3:4b:aa:13:c9:b4:5c:40:0c:09:
3d:63:28:ff:84:f6:92:88:a8:59:17:6e:21:22:0c:bb:da:ed:
2d:7d:d0:64:1a:df:fb:b6:16:9b:60:67:b8:47:e9:14:19:e8:
15:ba:e2:f9:e9:f3:e2:44:51:53:89:e8:e1:92:b4:3a:da:8a:
8c:b9:65:0c:8c:36:0d:73:13:71:ff:88:a1:fa:de:3d:bc:bd:
b0:78:bb:a9:e1:6a:ad:9d:e0:db:d5:a2:49:5b:76:bd:5f:da:
41:b1:50:89:70:01:11:ae:93:83:aa:57:0a:83:8b:c0:d6:fa:
fa:21:49:85:94:91:c2:c6:4f:e1:4f:79:8f:4d:36:56:ad:c1:
14:5c:36:2a:5c:f1:d8:7f:8c:86:50:e3:6e:a6:48:03:98:e2:
14:84:3f:d6:4e:12:8d:b3:84:c0:af:7a:4d:7e:d2:09:55:1f:
d6:02:1f:55
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QjQ0MzExMC8GA1UEBRMoMDdBQTczQTdFRDY3NDExODkxQkQ4RjcyNzI2MTk1MUM0
MUM3MTZERTAeFw0yMTExMTAxMDEyMzBaFw0yMzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxOGI5YjBlLWU4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClLwQ6RtP9fnKQFuBpAJQcerjBb+VTwlLIm51hBRutl5KQrYEKHuF3msV0MdeA
O8sdYDIfofZ/k14Q1Dq6EiDUsJCjGRyyvBf0eWQ3LhJm185CXdJHs3os4iemeO1G
6pk5UFnHAoy750yuVpxq+5skNXO3k31SBeGbJWxVkb1JfAqxWESGthBGIY8k6OE3
ftPoq2x0S761RcvnuZYiyyjwEM4ibnJXxK5XN0fSj4NPZAoE9x0NaAcTX9yaIZjB
2Yg3fjcl8KaOZO3BD0ybYAcd94yQtb5G8feQzSKbhB3sPLdRbXBcqMGDiUCS+a1D
2/xgQhJ3+xom/T9/l4LgaBWtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOPZss+0O
Wgsa1QvFqUIxgUO/YjcwHwYDVR0jBBgwFoAUB6pzp+1nQRiRvY9ycmGVHEHHFt4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNDQzLzkyNDI2Rjg2NDIw
QTExRUM5NEM0RjE1QUM0RjlBRTAyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQjZwenAtMW5RUmlSdlk5eWNtR1ZIRUhIRnQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNjgyNjQyNDQy
MEUxMUVDODlEN0MxNjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeuwjANBgkqhkiG9w0BAQsFAAOCAQEAmZLIzEPa1YvyYH5P
xBhqbAGaZwnOXr5PvcvKV4738DAw2F1gOzVu3UdGnjT6ygRc3kD5S+M4aamglTDN
8c5tDn8r9dzBmXcyl9t/OkUC2IvTS6oTybRcQAwJPWMo/4T2koioWRduISIMu9rt
LX3QZBrf+7YWm2BnuEfpFBnoFbri+enz4kRRU4no4ZK0OtqKjLllDIw2DXMTcf+I
ofrePby9sHi7qeFqrZ3g29WiSVt2vV/aQbFQiXABEa6Tg6pXCoOLwNb6+iFJhZSR
wsZP4U95j002Vq3BFFw2Klzx2H+MhlDjbqZIA5jiFIQ/1k4SjbOEwK96TX7SCVUf
1gIfVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org