Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F3498CC557C11EB8BD4EE35C4F9AE02.roa
File: 7F3498CC557C11EB8BD4EE35C4F9AE02.roa (raw, json)
Hash identifier: G/F/hSBbYeBVeoBaCXN2F9VgrqDL5HXFloR+X5antr0=
Subject key identifier: ED:77:68:96:AC:DD:1D:52:70:27:7C:21:08:98:61:1E:DF:06:AA:21
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4077
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F3498CC557C11EB8BD4EE35C4F9AE02.roa
Signing time: Wed 03 Nov 2021 10:01:40 +0000
ROA not before: Wed 03 Nov 2021 10:01:40 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138520
IP address blocks: 103.84.80.0/24 maxlen: 24
103.133.64.0/22 maxlen: 24
183.87.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16503 (0x4077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 3 10:01:40 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61825e04-8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:e9:c7:3d:d8:ef:2c:aa:c8:f6:31:a1:0a:
63:82:4e:82:cf:2c:5b:19:05:e7:00:3b:71:68:90:
89:03:a1:c4:b9:02:f9:55:25:1a:66:47:81:47:9f:
a4:15:4f:cd:06:ed:3e:5f:78:b4:08:83:43:70:60:
38:d7:ed:52:19:2b:8a:84:4a:f4:a3:8d:0d:82:8e:
62:56:d4:b4:60:f8:b7:4d:13:db:1d:af:9b:30:52:
4e:eb:da:3e:e0:f8:92:1a:be:1b:3b:93:24:0b:d5:
37:a7:23:94:1d:39:4f:ad:2d:ab:ee:11:5a:09:ed:
e2:e1:25:dc:2c:2b:e4:b0:31:8a:a3:86:df:3e:2a:
6c:e7:e2:40:cf:9b:1d:7d:55:91:5c:90:0d:1b:7c:
d1:74:ab:e4:07:2f:b9:93:d2:59:fc:d9:75:e9:55:
64:97:41:73:31:34:27:2b:4b:c7:e6:35:96:2d:9f:
dd:26:af:eb:79:63:37:b2:c4:42:74:df:a4:ba:9b:
57:b9:43:7e:8c:6a:5d:d8:5d:18:e0:39:93:8e:fa:
df:c7:22:7c:09:b7:32:4a:64:47:3f:8e:04:cb:e1:
2d:bd:83:95:2f:cd:c4:b1:9c:7d:4c:b3:86:d4:1b:
64:e0:d6:5d:e2:0c:d8:ce:17:16:3c:d9:76:14:69:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:68:96:AC:DD:1D:52:70:27:7C:21:08:98:61:1E:DF:06:AA:21
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F3498CC557C11EB8BD4EE35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.80.0/24
103.133.64.0/22
183.87.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:7c:03:80:d8:78:df:21:af:de:b1:e0:8c:7a:5d:06:d3:
69:41:36:bf:f7:95:55:10:b3:26:1e:e0:8c:b9:7f:08:aa:99:
88:dd:46:dc:b9:ec:20:cf:55:f7:dc:74:d2:da:2a:bc:89:a3:
35:db:41:a9:74:a2:1d:0b:1d:9e:ef:2f:a4:03:47:4a:26:6a:
b7:c0:ba:7d:42:8a:b9:cc:02:d2:e1:15:d6:e3:7e:4f:91:f0:
74:ab:ee:11:a1:07:5d:f1:32:10:b8:5a:ec:2e:2d:92:a5:65:
3f:74:8c:e5:cb:bd:b7:73:51:c0:f7:c0:70:64:1a:dd:d8:85:
90:24:cb:e8:b6:50:08:8b:b7:da:a4:d2:ae:92:24:38:4b:60:
7f:4b:f7:0a:a0:01:f1:0a:0b:c3:52:55:6b:2d:6e:ba:99:e1:
d6:6a:46:db:7e:54:1e:97:c3:50:90:b7:2e:9c:b7:9b:cd:ff:
76:2d:a5:31:38:3a:7e:59:ef:14:b0:14:db:3c:95:8c:25:35:
6e:77:ba:cd:70:d4:f0:7f:00:4b:04:30:b4:d2:a6:7c:0c:1b:
4d:f0:82:c0:e2:7a:7e:1e:f4:3d:b8:43:1c:2b:58:c2:31:58:
0d:ec:13:2f:7b:21:a4:4f:63:92:00:95:c3:7c:7a:26:b1:68:
ed:a5:10:df
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICQHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjExMTAzMTAwMTQwWhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTgyNWUwNC04NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5HTpxz3Y7yyqyPYxoQpjgk6CzyxbGQXnADtxaJCJA6HEuQL5VSUaZkeBR5+k
FU/NBu0+X3i0CINDcGA41+1SGSuKhEr0o40Ngo5iVtS0YPi3TRPbHa+bMFJO69o+
4PiSGr4bO5MkC9U3pyOUHTlPrS2r7hFaCe3i4SXcLCvksDGKo4bfPips5+JAz5sd
fVWRXJANG3zRdKvkBy+5k9JZ/Nl16VVkl0FzMTQnK0vH5jWWLZ/dJq/reWM3ssRC
dN+kuptXuUN+jGpd2F0Y4DmTjvrfxyJ8CbcySmRHP44Ey+EtvYOVL83EsZx9TLOG
1Btk4NZd4gzYzhcWPNl2FGlFyQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO13aJas
3R1ScCd8IQiYYR7fBqohMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0YzNDk4Q0M1
NTdDMTFFQjhCRDRFRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnVFADBAJnhUADBAC3VyowDQYJKoZIhvcNAQELBQADggEB
AD83fAOA2HjfIa/eseCMel0G02lBNr/3lVUQsyYe4Iy5fwiqmYjdRty57CDPVffc
dNLaKryJozXbQal0oh0LHZ7vL6QDR0omarfAun1CirnMAtLhFdbjfk+R8HSr7hGh
B13xMhC4WuwuLZKlZT90jOXLvbdzUcD3wHBkGt3YhZAky+i2UAiLt9qk0q6SJDhL
YH9L9wqgAfEKC8NSVWstbrqZ4dZqRtt+VB6Xw1CQty6ct5vN/3YtpTE4On5Z7xSw
FNs8lYwlNW53us1w1PB/AEsEMLTSpnwMG03wgsDien4e9D24QxwrWMIxWA3sEy97
IaRPY5IAlcN8eiaxaO2lEN8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org