Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E20994039F711EBB5B0AD4BC4F9AE02.roa
File: 7E20994039F711EBB5B0AD4BC4F9AE02.roa (raw, json)
Hash identifier: X4f/m2UYVFwyR1sZVpuQTXD+xmrrXMvz1gAtPQfwEI4=
Subject key identifier: 8D:F8:0D:EE:96:EB:FB:52:72:B6:7D:42:3C:4A:FF:B9:37:8A:BB:84
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 525D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E20994039F711EBB5B0AD4BC4F9AE02.roa
Signing time: Mon 16 May 2022 04:20:12 +0000
ROA not before: Mon 16 May 2022 04:20:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139565
IP address blocks: 103.147.112.0/24 maxlen: 24
103.147.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21085 (0x525d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:20:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d0fc-ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:d4:10:9e:dd:1d:20:ad:f3:75:76:2a:ee:
5c:b9:b1:29:39:20:d0:2d:61:38:4c:9c:8c:dc:1a:
27:17:5e:e2:7c:d2:52:c3:47:94:84:af:a4:e4:50:
b7:45:c6:8f:d6:af:23:94:3d:94:eb:7a:f4:74:0e:
bc:63:f8:9f:fc:68:d2:65:dc:bc:67:b2:da:e9:13:
a3:74:9b:5e:8b:c4:86:85:39:f9:c7:40:73:f6:f4:
b5:64:7b:ad:a1:fa:70:0f:a0:fa:b6:29:42:0e:d5:
df:fd:37:93:c0:4a:15:e4:26:08:3b:64:79:57:fa:
65:31:9d:a6:00:5e:e0:de:50:5a:88:86:1a:f6:53:
37:24:38:a0:aa:c0:4b:29:32:8d:c6:92:0b:86:3d:
7b:9f:d3:4d:26:8e:7a:46:db:a2:e8:e2:53:2f:af:
50:36:c1:a9:5f:c4:14:3f:20:c1:0c:fd:6d:d2:a5:
7b:83:66:6f:5f:ec:9d:25:4a:7a:26:10:12:38:db:
1c:90:57:24:31:8c:ca:17:4b:8b:ca:9f:7a:96:02:
bf:b1:2b:c6:24:82:4b:e8:96:bc:dc:86:71:28:f9:
ef:5d:8b:64:38:57:65:ea:7f:57:9f:9a:4d:72:6c:
ef:48:6e:dd:51:b1:3e:ab:3f:bc:0c:4a:3f:e7:23:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:0D:EE:96:EB:FB:52:72:B6:7D:42:3C:4A:FF:B9:37:8A:BB:84
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E20994039F711EBB5B0AD4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.112.0/23
Signature Algorithm: sha256WithRSAEncryption
02:ca:2c:8a:c1:11:b6:da:58:b9:af:ad:57:c9:e9:77:e1:f2:
8d:2f:91:cd:d5:45:ec:28:15:e8:61:a4:2c:07:d9:c5:0d:91:
12:7f:da:78:b3:86:58:a5:2c:19:35:5b:24:23:de:f5:4f:ac:
f9:9a:27:dc:e6:e7:d6:80:9f:b7:ac:63:7a:17:a7:22:bb:6d:
6b:c2:13:4f:e7:61:ab:54:03:a5:99:0e:16:bd:9b:43:7c:36:
4f:5d:32:6f:e9:a7:0e:ad:3f:9a:e0:0a:37:d6:52:85:30:ba:
89:c8:11:3d:57:8c:4d:8b:84:bd:ee:73:2c:22:08:f3:c0:dc:
f4:26:0a:6a:ca:1e:1c:b7:34:d4:c2:67:fe:a9:60:30:6f:81:
97:be:6f:f8:39:74:35:2b:96:8e:93:62:0d:8b:51:9c:ba:e6:
51:d9:4f:d7:c9:39:36:a0:92:88:a6:9c:32:16:6d:78:0c:8e:
d0:20:02:1b:fb:1e:d0:5c:fb:68:9d:23:5e:e6:c7:f8:39:66:
c9:aa:01:08:f6:11:a3:e9:ff:a9:9e:d6:b8:ea:7c:b1:e0:4d:
26:10:62:a0:a1:85:d1:9b:b9:55:40:fd:fa:82:80:b5:6e:01:
c9:5b:7d:b2:e8:78:57:b0:3c:98:e1:05:be:33:f6:95:b7:01:
d2:85:20:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICUl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNTE2MDQyMDEyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjgxZDBmYy1lZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFvUEJ7dHSCt83V2Ku5cubEpOSDQLWE4TJyM3BonF17ifNJSw0eUhK+k5FC3
RcaP1q8jlD2U63r0dA68Y/if/GjSZdy8Z7La6ROjdJtei8SGhTn5x0Bz9vS1ZHut
ofpwD6D6tilCDtXf/TeTwEoV5CYIO2R5V/plMZ2mAF7g3lBaiIYa9lM3JDigqsBL
KTKNxpILhj17n9NNJo56Rtui6OJTL69QNsGpX8QUPyDBDP1t0qV7g2ZvX+ydJUp6
JhASONsckFckMYzKF0uLyp96lgK/sSvGJIJL6Ja83IZxKPnvXYtkOFdl6n9Xn5pN
cmzvSG7dUbE+qz+8DEo/5yM1awIDAQABo4IClTCCApEwHQYDVR0OBBYEFI34De6W
6/tScrZ9QjxK/7k3iruEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0UyMDk5NDAz
OUY3MTFFQkI1QjBBRDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnk3AwDQYJKoZIhvcNAQELBQADggEBAALKLIrBEbbaWLmv
rVfJ6Xfh8o0vkc3VRewoFehhpCwH2cUNkRJ/2nizhlilLBk1WyQj3vVPrPmaJ9zm
59aAn7esY3oXpyK7bWvCE0/nYatUA6WZDha9m0N8Nk9dMm/ppw6tP5rgCjfWUoUw
uonIET1XjE2LhL3ucywiCPPA3PQmCmrKHhy3NNTCZ/6pYDBvgZe+b/g5dDUrlo6T
Yg2LUZy65lHZT9fJOTagkoimnDIWbXgMjtAgAhv7HtBc+2idI17mx/g5ZsmqAQj2
EaPp/6me1rjqfLHgTSYQYqChhdGbuVVA/fqCgLVuAclbfbLoeFewPJjhBb4z9pW3
AdKFIC0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org