Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55FCFDDABA4A11EC90B53115C4F9AE02.roa
File: 55FCFDDABA4A11EC90B53115C4F9AE02.roa (raw, json)
Hash identifier: sxUlsljxXGfcYhsOHfZ3y8FXgbZ9JHSGP6oNdWd4is4=
Subject key identifier: A6:5C:42:DB:81:11:18:B3:AC:AB:0E:B7:AE:04:D9:EF:51:BC:09:46
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 57D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55FCFDDABA4A11EC90B53115C4F9AE02.roa
Signing time: Wed 22 Jun 2022 10:51:45 +0000
ROA not before: Wed 22 Jun 2022 10:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149555
IP address blocks: 103.170.150.0/24 maxlen: 24
103.184.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22486 (0x57d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 22 10:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b2f441-a70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:f5:96:d7:02:10:c9:cd:15:a4:e0:8c:f4:
75:6b:4d:4c:5d:2b:9f:b4:c7:ae:1b:9e:62:47:0c:
f3:8f:91:c1:11:16:76:a0:46:23:c4:76:fd:88:b1:
38:2f:59:55:2f:7f:6d:f9:36:e5:05:4d:eb:0d:60:
c0:23:3c:ab:7d:43:2b:7f:e7:77:a7:80:ec:d0:4e:
dd:aa:51:97:f3:cf:e8:e1:d7:db:9b:06:31:a5:00:
6b:ce:3b:c6:3a:7e:8f:d8:9a:72:80:69:a4:8f:24:
ed:0a:95:dd:15:90:b4:75:cd:3b:50:ea:c0:26:f4:
f0:9e:4c:f7:c8:07:3b:9e:ca:b3:ae:c0:63:3c:8b:
e1:09:3d:74:2a:0a:f4:f9:42:c0:9c:b3:d9:8b:14:
37:cc:f1:ca:62:a7:86:0a:2e:0c:dd:e0:56:d1:48:
a4:9e:3f:62:96:d3:36:a6:a5:22:3e:6f:65:76:4c:
69:0f:e3:be:48:b4:c4:53:27:e7:aa:bd:c1:ff:ac:
b1:88:1b:3b:06:af:0a:4e:09:4d:9d:56:be:65:af:
63:61:b0:0d:c3:9a:70:ec:cd:1f:72:9a:34:19:5d:
7f:a6:1f:8f:8e:ed:09:f4:20:d3:67:69:eb:c8:eb:
55:d8:f6:be:3c:1e:91:31:a6:22:21:6c:5e:88:5f:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:42:DB:81:11:18:B3:AC:AB:0E:B7:AE:04:D9:EF:51:BC:09:46
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55FCFDDABA4A11EC90B53115C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.150.0/24
103.184.206.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ff:ba:1e:43:96:7f:d2:cd:a6:f6:5f:1b:cb:f1:b0:d4:7f:
81:1e:bf:ed:f1:38:d9:fb:11:0f:96:2c:79:40:97:b1:fb:10:
84:a8:ab:60:f4:d1:fb:de:bb:8e:41:48:ec:57:0f:42:39:39:
c4:b3:b6:3e:bb:e9:d8:a9:55:50:c1:84:23:1c:50:4b:de:bc:
82:25:13:33:3d:df:45:c5:f5:ec:3c:0d:1b:ce:67:1a:f4:47:
36:3a:db:b0:3d:08:50:e3:94:55:f2:ad:35:2f:31:c4:99:c9:
69:9a:f8:bd:96:03:62:24:9e:6d:0f:f9:95:7a:01:fa:e7:09:
b2:80:d2:d4:a7:96:7c:2d:15:bf:9d:1f:c8:64:6d:83:1c:e6:
b0:05:80:cd:76:2d:f9:a3:db:37:c4:29:72:2e:c4:b5:ea:39:
a8:1c:76:d5:37:48:b1:f3:75:7b:be:54:dc:94:98:fb:48:af:
e0:88:58:c2:77:16:50:bf:d9:00:ca:d4:c9:ad:50:d6:0d:93:
27:0f:6e:a9:15:fb:b2:5b:7c:2e:18:71:60:b1:be:33:f9:7f:
2c:6a:e4:37:59:2d:11:85:c3:17:6b:2b:f8:94:38:1d:b8:59:
b4:f2:59:10:18:da:2e:69:f7:1e:4e:65:97:02:7c:a8:ae:e3:
df:5a:01:75
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICV9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjIyMTA1MTQ1WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmIyZjQ0MS1hNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvn31ltcCEMnNFaTgjPR1a01MXSuftMeuG55iRwzzj5HBERZ2oEYjxHb9iLE4
L1lVL39t+TblBU3rDWDAIzyrfUMrf+d3p4Ds0E7dqlGX88/o4dfbmwYxpQBrzjvG
On6P2JpygGmkjyTtCpXdFZC0dc07UOrAJvTwnkz3yAc7nsqzrsBjPIvhCT10Kgr0
+ULAnLPZixQ3zPHKYqeGCi4M3eBW0Uiknj9iltM2pqUiPm9ldkxpD+O+SLTEUyfn
qr3B/6yxiBs7Bq8KTglNnVa+Za9jYbANw5pw7M0fcpo0GV1/ph+Pju0J9CDTZ2nr
yOtV2Pa+PB6RMaYiIWxeiF8E7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKZcQtuB
ERizrKsOt64E2e9RvAlGMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTVGQ0ZEREFC
QTRBMTFFQzkwQjUzMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnqpYDBAFnuM4wDQYJKoZIhvcNAQELBQADggEBAG3/uh5D
ln/Szab2XxvL8bDUf4Eev+3xONn7EQ+WLHlAl7H7EISoq2D00fveu45BSOxXD0I5
OcSztj676dipVVDBhCMcUEvevIIlEzM930XF9ew8DRvOZxr0RzY627A9CFDjlFXy
rTUvMcSZyWma+L2WA2Iknm0P+ZV6AfrnCbKA0tSnlnwtFb+dH8hkbYMc5rAFgM12
Lfmj2zfEKXIuxLXqOagcdtU3SLHzdXu+VNyUmPtIr+CIWMJ3FlC/2QDK1MmtUNYN
kycPbqkV+7JbfC4YcWCxvjP5fyxq5DdZLRGFwxdrK/iUOB24WbTyWRAY2i5p9x5O
ZZcCfKiu499aAXU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org