Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4150F532A50D11ECBE72B965C4F9AE02.roa
File: 4150F532A50D11ECBE72B965C4F9AE02.roa (raw, json)
Hash identifier: G8erYsKom6WOJIB9GCLo/vEM71N/7zGiZIWY5o3YP8g=
Subject key identifier: BF:EE:40:C6:BD:4D:50:7C:8A:30:1F:3C:AF:9B:24:13:F5:CE:0D:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4A53
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4150F532A50D11ECBE72B965C4F9AE02.roa
Signing time: Wed 16 Mar 2022 09:41:29 +0000
ROA not before: Wed 16 Mar 2022 09:41:29 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135848
IP address blocks: 103.81.156.0/22 maxlen: 24
103.158.148.0/23 maxlen: 24
103.160.72.0/23 maxlen: 24
103.174.33.0/24 maxlen: 24
103.176.232.0/24 maxlen: 24
103.176.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19027 (0x4a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 16 09:41:29 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6231b0c9-641d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:bc:a2:ea:fc:c3:b3:74:82:2c:cc:b6:9b:
7b:79:be:36:ab:45:4e:3e:f5:ee:85:b2:d0:42:52:
c9:3d:f7:a1:1d:f5:b9:71:9b:d8:c6:81:69:3f:f1:
fd:e0:5e:20:33:b1:20:a6:56:00:e2:59:c4:be:95:
d3:df:61:75:53:b0:47:21:58:b7:39:6c:e2:45:1d:
21:bc:81:cc:87:e3:dc:f9:15:af:02:c9:26:0c:cf:
17:3e:86:b3:a9:a3:66:b4:a9:f9:48:6d:69:90:39:
ae:83:d1:f1:67:82:f5:88:a6:11:80:45:f6:5e:25:
67:e7:2e:6a:ca:37:58:08:f2:30:ca:9c:47:d4:d1:
34:a5:a4:28:d5:68:4f:a8:c7:67:05:4c:d9:e2:ac:
fe:6f:37:fd:9f:ef:1e:cb:92:3d:d3:a5:ee:24:b4:
0d:d9:d5:78:1b:f4:19:82:7d:51:d9:22:11:f7:1c:
4f:77:4f:e1:81:0a:1b:21:39:ad:42:2a:0a:7a:9f:
c1:fc:31:9d:f5:05:c8:ab:4e:cc:a2:ab:70:13:82:
42:ab:13:9e:21:38:ff:4c:33:7f:1f:17:ac:15:00:
d8:23:72:f1:59:38:72:bc:65:33:a9:d8:e1:5f:05:
f1:97:fd:24:28:1d:7e:d2:13:90:c3:28:27:ee:2b:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:40:C6:BD:4D:50:7C:8A:30:1F:3C:AF:9B:24:13:F5:CE:0D:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4150F532A50D11ECBE72B965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.156.0/22
103.158.148.0/23
103.160.72.0/23
103.174.33.0/24
103.176.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:0f:86:63:64:46:f3:58:7c:49:3f:1a:f9:df:c0:51:33:1f:
e9:89:ef:c4:8b:1f:90:da:7d:3a:eb:35:9d:63:53:b6:f1:36:
c8:2a:29:ce:5f:a6:da:65:39:1b:a9:eb:42:57:10:6a:49:8a:
3f:ac:92:63:a3:0a:96:8e:68:e2:93:99:bc:75:f7:83:60:84:
89:bd:06:fd:9c:8c:aa:d1:90:da:a4:ea:da:23:f8:1a:af:36:
c2:91:e1:62:a5:58:95:ec:64:07:a7:96:29:e1:3f:3e:83:1a:
0e:5b:50:ca:5d:ab:5e:e8:61:6e:13:cd:35:59:03:75:79:8e:
74:fd:1f:76:8e:60:1f:b8:46:3c:ea:ec:77:01:40:0f:db:45:
79:d0:dd:94:de:d2:df:e1:72:3f:a8:82:d7:e7:d2:bd:ab:a2:
c8:2f:00:a9:fe:75:1a:48:de:da:45:e2:56:7f:7f:96:7c:e7:
94:ae:a7:99:14:95:e1:6e:5c:c0:e8:27:2d:5a:9a:4a:b5:9a:
f8:8f:4a:e3:0f:4e:28:83:1b:bc:cf:3f:0a:d1:a6:97:28:da:
26:74:08:dd:e6:9c:1d:a0:b5:ad:4c:a8:f2:28:e4:4b:0e:a5:
02:28:e3:a7:3d:a4:b5:c4:83:6c:23:af:dc:4f:18:0b:b8:c1:
84:ef:02:b0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICSlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwMzE2MDk0MTI5WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjMxYjBjOS02NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjS8our8w7N0gizMtpt7eb42q0VOPvXuhbLQQlLJPfehHfW5cZvYxoFpP/H9
4F4gM7EgplYA4lnEvpXT32F1U7BHIVi3OWziRR0hvIHMh+Pc+RWvAskmDM8XPoaz
qaNmtKn5SG1pkDmug9HxZ4L1iKYRgEX2XiVn5y5qyjdYCPIwypxH1NE0paQo1WhP
qMdnBUzZ4qz+bzf9n+8ey5I906XuJLQN2dV4G/QZgn1R2SIR9xxPd0/hgQobITmt
QioKep/B/DGd9QXIq07MoqtwE4JCqxOeITj/TDN/HxesFQDYI3LxWThyvGUzqdjh
XwXxl/0kKB1+0hOQwygn7iuZ0wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFL/uQMa9
TVB8ijAfPK+bJBP1zg2sMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDE1MEY1MzJB
NTBEMTFFQ0JFNzJCOTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJnUZwDBAFnnpQDBAFnoEgDBABnriEDBAFnsOgwDQYJKoZI
hvcNAQELBQADggEBAF0PhmNkRvNYfEk/GvnfwFEzH+mJ78SLH5DafTrrNZ1jU7bx
NsgqKc5fptplORup60JXEGpJij+skmOjCpaOaOKTmbx194NghIm9Bv2cjKrRkNqk
6toj+BqvNsKR4WKlWJXsZAenlinhPz6DGg5bUMpdq17oYW4TzTVZA3V5jnT9H3aO
YB+4Rjzq7HcBQA/bRXnQ3ZTe0t/hcj+ogtfn0r2rosgvAKn+dRpI3tpF4lZ/f5Z8
55Sup5kUleFuXMDoJy1amkq1mviPSuMPTiiDG7zPPwrRppco2iZ0CN3mnB2gta1M
qPIo5EsOpQIo46c9pLXEg2wjr9xPGAu4wYTvArA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org