Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D3AD22E54E11EB976F6C32C4F9AE02.roa
File: 09D3AD22E54E11EB976F6C32C4F9AE02.roa (raw, json)
Hash identifier: lpdINJEK/Eif7lGGYI4ejH1/z3teq90gxpSQHZJneGc=
Subject key identifier: 25:6A:7A:41:E8:68:D3:B1:ED:04:41:5E:D7:59:F9:69:5E:6B:82:76
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5A48
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D3AD22E54E11EB976F6C32C4F9AE02.roa
Signing time: Thu 28 Jul 2022 16:01:36 +0000
ROA not before: Thu 28 Jul 2022 16:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142510
IP address blocks: 103.12.85.0/24 maxlen: 24
103.169.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23112 (0x5a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 28 16:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e2b2df-6783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:db:e9:fe:21:31:39:6e:1f:12:f0:d9:b5:
70:26:6b:8e:b0:8a:26:53:33:19:16:ba:3d:63:d6:
75:8b:9d:40:41:da:d2:c1:00:e5:5a:ff:f9:e3:73:
0f:91:e8:61:62:4b:f2:b1:28:5f:4a:4a:d4:bb:58:
1b:6c:9c:65:1d:27:b4:b7:13:a8:18:7c:73:78:c2:
5e:8f:b6:73:c4:87:e7:a9:a7:f9:5f:a6:dd:22:b7:
cc:7c:3b:b1:84:6e:43:8f:bb:3b:2c:64:78:fb:5c:
fb:16:84:1b:fb:2e:87:3a:b2:34:7d:6f:08:d9:ed:
a7:f3:17:c8:53:31:52:e7:4a:48:08:04:c0:a7:08:
77:75:ef:09:9d:00:62:b3:58:55:9c:af:3e:cc:37:
3d:38:8e:42:d2:f7:b7:04:b6:b0:73:ff:da:e6:9e:
2f:68:c0:f0:29:88:c1:95:9b:ad:58:4d:14:8b:a8:
59:1b:f5:68:40:9a:1e:df:72:34:5e:fb:4d:86:df:
79:c5:0b:de:ae:e1:69:1d:70:9b:4c:66:7e:da:98:
e1:2b:12:8b:6c:32:26:84:14:99:01:d0:fc:57:61:
bb:43:43:b0:14:9e:58:98:28:56:00:38:b5:2a:06:
8a:68:4a:a6:84:ce:cc:6a:9c:86:9e:b7:12:06:14:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:7A:41:E8:68:D3:B1:ED:04:41:5E:D7:59:F9:69:5E:6B:82:76
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D3AD22E54E11EB976F6C32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.85.0/24
103.169.166.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c6:e8:12:be:67:ed:c4:22:3c:94:1a:5f:63:3e:af:c1:a5:
19:47:7e:f5:5d:66:07:df:91:91:35:8c:a7:18:7b:00:b7:25:
6e:ef:5f:b9:c1:4d:18:3a:ff:2b:f7:e3:6a:11:7c:b6:e1:11:
15:13:aa:72:35:cf:51:86:e1:5a:0c:93:e6:c5:96:bf:d0:a4:
61:c5:e4:88:54:68:8c:00:9c:a6:3e:5f:31:f5:a3:af:cd:7d:
ed:1f:01:33:4a:e8:6e:90:60:ab:25:c5:5d:b6:72:81:14:e6:
dc:13:3e:39:8a:79:9e:95:21:ab:5c:ed:d8:d0:3b:2c:1f:8d:
5e:b5:9d:e8:8b:f9:81:9d:8a:b4:5b:98:51:c1:bd:3c:bd:2a:
8e:84:ea:f5:24:1e:31:7a:6b:eb:45:48:28:94:59:41:d3:4a:
77:e9:06:9d:87:c4:1f:41:62:d5:d5:a0:56:72:d2:02:c3:d0:
e3:49:1b:b4:8f:f7:88:5e:d1:aa:de:cd:9d:84:52:f7:cc:98:
d7:0c:ef:b5:d3:2f:64:0d:f4:5c:5c:5c:5b:15:63:56:77:34:
a5:5c:b6:99:76:8d:1b:90:0c:6c:72:e5:43:29:4d:c0:96:7a:
25:47:8c:7a:d0:e4:98:f8:71:bf:8c:ee:b4:c5:a1:bd:6e:25:
b6:19:84:e4
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICWkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNzI4MTYwMTM2WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmUyYjJkZi02NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomvb6f4hMTluHxLw2bVwJmuOsIomUzMZFro9Y9Z1i51AQdrSwQDlWv/543MP
kehhYkvysShfSkrUu1gbbJxlHSe0txOoGHxzeMJej7ZzxIfnqaf5X6bdIrfMfDux
hG5Dj7s7LGR4+1z7FoQb+y6HOrI0fW8I2e2n8xfIUzFS50pICATApwh3de8JnQBi
s1hVnK8+zDc9OI5C0ve3BLawc//a5p4vaMDwKYjBlZutWE0Ui6hZG/VoQJoe33I0
XvtNht95xQveruFpHXCbTGZ+2pjhKxKLbDImhBSZAdD8V2G7Q0OwFJ5YmChWADi1
KgaKaEqmhM7MapyGnrcSBhTNRwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCVqekHo
aNOx7QRBXtdZ+Wlea4J2MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDlEM0FEMjJF
NTRFMTFFQjk3NkY2QzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnDFUDBABnqaYwDQYJKoZIhvcNAQELBQADggEBADHG6BK+
Z+3EIjyUGl9jPq/BpRlHfvVdZgffkZE1jKcYewC3JW7vX7nBTRg6/yv342oRfLbh
ERUTqnI1z1GG4VoMk+bFlr/QpGHF5IhUaIwAnKY+XzH1o6/Nfe0fATNK6G6QYKsl
xV22coEU5twTPjmKeZ6VIatc7djQOywfjV61neiL+YGdirRbmFHBvTy9Ko6E6vUk
HjF6a+tFSCiUWUHTSnfpBp2HxB9BYtXVoFZy0gLD0ONJG7SP94he0arezZ2EUvfM
mNcM77XTL2QN9FxcXFsVY1Z3NKVctpl2jRuQDGxy5UMpTcCWeiVHjHrQ5Jj4cb+M
7rTFob1uJbYZhOQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org