Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A2972046EF211ECB1401E0EC4F9AE02.roa
File: 2A2972046EF211ECB1401E0EC4F9AE02.roa (raw, json)
Hash identifier: 8SJRc+PSkJFpRxxh9nWw1QmeQlnvsDKvFZXleH3BmP8=
Subject key identifier: 69:51:F8:59:45:09:28:6A:18:5D:99:70:D1:10:E1:0B:E8:7D:44:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 507A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A2972046EF211ECB1401E0EC4F9AE02.roa
Signing time: Mon 16 May 2022 04:11:09 +0000
ROA not before: Mon 16 May 2022 04:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135759
IP address blocks: 103.75.124.0/22 maxlen: 24
103.181.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20602 (0x507a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cedd-ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:fd:92:da:52:35:e8:b1:c0:d7:52:ff:8c:
6b:9e:dd:e2:70:57:7c:76:2b:82:e7:73:5c:50:4d:
73:80:5e:2d:e3:e7:f3:90:16:04:9e:26:b5:42:7d:
2e:39:dc:d1:9d:c5:1f:9c:a7:de:46:a7:b6:ae:b4:
39:f1:94:3c:f7:29:89:b7:0e:8e:6d:c3:7e:22:bb:
8b:31:ad:55:d4:12:52:28:2a:fc:12:c6:d8:3f:b1:
13:dd:1e:fb:c3:68:0c:ad:ab:d7:b5:7a:5a:9f:cb:
e8:53:fe:e3:97:f3:a5:6d:ea:d2:6e:64:86:4f:84:
b1:6a:3c:0d:ea:d1:d1:bc:53:b0:b3:61:4a:70:ca:
10:ba:32:56:4c:42:66:8f:4a:9b:df:19:02:ce:dd:
cd:c6:24:c0:4d:f2:bd:c9:29:8c:67:3c:b6:1d:9f:
af:05:af:2e:7d:57:6d:2b:20:26:c8:d1:15:41:3d:
c6:a7:a9:28:3f:14:b9:d3:85:99:82:50:c0:84:16:
fa:69:b8:d3:70:b8:e7:ba:e1:7e:88:2e:b9:9e:e2:
c3:16:6a:b9:27:ed:ac:94:e6:f9:2b:fb:c9:f4:6f:
a9:1f:af:cf:bf:22:93:3e:2c:d7:4a:05:df:bb:f2:
62:43:32:b7:d2:37:d0:ee:32:f3:a3:5e:2b:0a:cc:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:F8:59:45:09:28:6A:18:5D:99:70:D1:10:E1:0B:E8:7D:44:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A2972046EF211ECB1401E0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.124.0/22
103.181.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:60:fb:f2:09:9b:5d:a0:77:d9:0f:54:6d:4e:65:ef:b4:04:
dd:8d:03:17:3e:5d:eb:ce:11:e2:fe:79:30:b7:c0:70:75:c1:
4e:cd:5e:01:85:5e:f1:22:78:59:2a:8b:32:43:52:5c:2a:cd:
b0:aa:48:8e:42:c4:c9:9d:04:44:08:9c:43:59:2c:82:69:d7:
2d:d4:d9:a2:fd:62:b9:63:05:f4:e6:cc:28:9a:4e:5b:79:a3:
8c:e7:7c:77:18:62:90:4e:0e:48:d6:d4:2c:53:b1:9a:1f:00:
ca:47:d6:2d:d5:d2:e4:ac:54:9d:3f:5f:e4:4b:d6:b8:3e:c1:
a1:9e:cd:1f:f4:e6:17:19:68:42:35:a0:15:8c:6e:19:67:03:
9a:ce:4d:1f:51:d4:f5:ab:60:a2:a9:a1:67:92:9f:88:51:f9:
c0:8b:16:3b:4c:e3:0c:be:81:bf:40:85:76:70:f2:59:6a:e5:
4b:eb:76:32:84:db:a1:a0:80:d1:77:66:cb:76:d4:c1:72:8d:
6a:3a:61:0c:f4:df:30:f8:17:84:fd:ea:a3:bd:88:be:94:b4:
26:dd:95:73:59:7d:82:c7:ef:af:10:cf:93:d9:2b:95:ac:9a:
9e:eb:e9:1f:92:3f:4b:0f:56:45:68:6d:a0:80:c5:43:a7:f3:
fa:e7:f9:19
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICUHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNTE2MDQxMTA5WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjgxY2VkZC1lZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykj9ktpSNeixwNdS/4xrnt3icFd8diuC53NcUE1zgF4t4+fzkBYEnia1Qn0u
OdzRncUfnKfeRqe2rrQ58ZQ89ymJtw6ObcN+IruLMa1V1BJSKCr8EsbYP7ET3R77
w2gMravXtXpan8voU/7jl/OlberSbmSGT4SxajwN6tHRvFOws2FKcMoQujJWTEJm
j0qb3xkCzt3NxiTATfK9ySmMZzy2HZ+vBa8ufVdtKyAmyNEVQT3Gp6koPxS504WZ
glDAhBb6abjTcLjnuuF+iC65nuLDFmq5J+2slOb5K/vJ9G+pH6/PvyKTPizXSgXf
u/JiQzK30jfQ7jLzo14rCswJ4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGlR+FlF
CShqGF2ZcNEQ4QvofUQNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkEyOTcyMDQ2
RUYyMTFFQ0IxNDAxRTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnS3wDBABntXgwDQYJKoZIhvcNAQELBQADggEBAGxg+/IJ
m12gd9kPVG1OZe+0BN2NAxc+XevOEeL+eTC3wHB1wU7NXgGFXvEieFkqizJDUlwq
zbCqSI5CxMmdBEQInENZLIJp1y3U2aL9YrljBfTmzCiaTlt5o4znfHcYYpBODkjW
1CxTsZofAMpH1i3V0uSsVJ0/X+RL1rg+waGezR/05hcZaEI1oBWMbhlnA5rOTR9R
1PWrYKKpoWeSn4hR+cCLFjtM4wy+gb9AhXZw8llq5UvrdjKE26GggNF3Zst21MFy
jWo6YQz03zD4F4T96qO9iL6UtCbdlXNZfYLH768Qz5PZK5Wsmp7r6R+SP0sPVkVo
baCAxUOn8/rn+Rk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org