Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/555D53C6362D11EC96016F6AC4F9AE02.roa
File: 555D53C6362D11EC96016F6AC4F9AE02.roa (raw, json)
Hash identifier: 64/ZjjqD+CnVzVlDOViDFgiUeXauEXnUzeCGXKEtfNI=
Subject key identifier: 7A:3C:F0:63:33:30:5E:45:60:5B:A2:81:1F:E3:63:02:DE:F4:B4:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 51C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/555D53C6362D11EC96016F6AC4F9AE02.roa
Signing time: Mon 16 May 2022 04:17:27 +0000
ROA not before: Mon 16 May 2022 04:17:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138264
IP address blocks: 103.132.28.0/24 maxlen: 24
103.132.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20934 (0x51c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:17:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d057-ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:a5:d1:ed:c4:82:b0:15:cf:d3:e7:df:d2:
cb:65:e2:c7:8f:25:51:0d:76:5d:70:4e:c1:be:82:
cf:a3:95:2f:da:ae:28:bf:49:73:5e:c4:fe:81:d6:
dd:62:ce:14:43:bb:09:b3:99:a4:f7:c9:d8:32:d9:
f5:dd:78:3d:a8:72:86:e4:c7:da:b3:86:2c:d6:b2:
49:6e:0c:60:0c:b7:00:e1:43:00:d7:92:1a:b0:de:
36:3c:a1:6b:72:33:ff:5f:35:82:c4:5d:e2:8a:59:
07:ac:71:e1:b5:f3:24:f2:94:de:4a:6d:83:30:8d:
57:e7:9c:ee:e0:50:b0:d6:a5:a9:13:5d:11:25:e1:
06:7c:38:27:db:a6:f8:2b:10:6d:b3:4d:09:78:3e:
8c:4f:2d:fd:0d:37:2f:c7:1a:b6:cf:94:12:b6:e2:
c7:9b:77:b6:7b:9a:64:07:8e:c0:8e:32:2b:be:8b:
39:71:25:f4:37:5f:0d:d4:0e:92:20:47:bc:13:1f:
4d:69:af:c3:58:c0:16:02:bf:26:e9:00:3c:17:24:
37:c9:d4:b3:56:1c:ac:e7:a7:ab:ff:cd:fc:e5:3d:
a2:62:ea:7c:4f:d6:db:48:8d:8b:e2:ef:96:e3:67:
ae:3b:12:7c:30:3a:71:85:18:75:2c:c8:a8:30:ba:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:F0:63:33:30:5E:45:60:5B:A2:81:1F:E3:63:02:DE:F4:B4:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/555D53C6362D11EC96016F6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.28.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:f8:cc:1f:38:82:f4:93:bb:d7:76:25:f9:29:e5:f0:9a:3f:
f8:a1:b3:0b:e1:d1:8e:3c:ed:89:d1:22:aa:06:24:07:48:60:
20:09:c3:5c:98:2a:d3:a5:a2:07:4e:84:39:fe:23:81:e3:28:
e0:00:c9:e1:03:38:79:af:9a:28:b8:63:19:9a:35:70:ed:2d:
10:20:76:3d:98:60:5f:5f:1e:74:d7:fb:b5:6f:cb:8c:00:84:
c0:04:ce:cd:ec:29:7c:26:86:83:6b:74:14:35:a6:ec:6b:7c:
6a:c3:8e:87:ce:ed:4d:19:76:b9:bc:40:5f:16:89:ce:64:db:
78:71:23:98:16:de:1a:d8:cb:77:00:a2:5a:6c:77:f9:00:1e:
9f:c2:db:60:2a:a6:0c:6d:5e:cc:d5:3b:df:84:c8:7b:15:37:
c8:c2:72:1b:3a:9d:91:fe:af:2d:d2:a7:08:08:bf:10:be:4f:
e7:4b:13:23:22:ba:48:b1:d1:90:20:03:46:5d:cc:d7:59:33:
b8:4c:a3:7d:17:e4:dd:4a:af:88:75:5e:a3:8a:21:df:6e:2b:
1a:7c:51:9e:1d:e2:61:3c:a8:fd:06:7e:96:82:fe:53:40:f0:
a1:6a:c6:8b:ec:46:f5:3b:b6:b0:37:6a:90:12:b3:fb:61:75:
90:4d:e0:e0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICUcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNTE2MDQxNzI3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjgxZDA1Ny1jZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7ml0e3EgrAVz9Pn39LLZeLHjyVRDXZdcE7BvoLPo5Uv2q4ov0lzXsT+gdbd
Ys4UQ7sJs5mk98nYMtn13Xg9qHKG5Mfas4Ys1rJJbgxgDLcA4UMA15IasN42PKFr
cjP/XzWCxF3iilkHrHHhtfMk8pTeSm2DMI1X55zu4FCw1qWpE10RJeEGfDgn26b4
KxBts00JeD6MTy39DTcvxxq2z5QStuLHm3e2e5pkB47AjjIrvos5cSX0N18N1A6S
IEe8Ex9Naa/DWMAWAr8m6QA8FyQ3ydSzVhys56er/8385T2iYup8T9bbSI2L4u+W
42euOxJ8MDpxhRh1LMioMLo2/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHo88GMz
MF5FYFuigR/jYwLe9LTGMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTU1RDUzQzYz
NjJEMTFFQzk2MDE2RjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnhBwwDQYJKoZIhvcNAQELBQADggEBACr4zB84gvSTu9d2
Jfkp5fCaP/ihswvh0Y487YnRIqoGJAdIYCAJw1yYKtOlogdOhDn+I4HjKOAAyeED
OHmvmii4YxmaNXDtLRAgdj2YYF9fHnTX+7Vvy4wAhMAEzs3sKXwmhoNrdBQ1puxr
fGrDjofO7U0Zdrm8QF8Wic5k23hxI5gW3hrYy3cAolpsd/kAHp/C22AqpgxtXszV
O9+EyHsVN8jCchs6nZH+ry3SpwgIvxC+T+dLEyMiukix0ZAgA0ZdzNdZM7hMo30X
5N1Kr4h1XqOKId9uKxp8UZ4d4mE8qP0GfpaC/lNA8KFqxovsRvU7trA3apASs/th
dZBN4OA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org