Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/1E30436A9C5111EC8C84286AC4F9AE02.roa
File: 1E30436A9C5111EC8C84286AC4F9AE02.roa (raw, json)
Hash identifier: PsiqZOVIu8fT5ATqTw5M7U4+JaIVOYG2IgqNoVb0HvY=
Subject key identifier: C6:12:EA:D1:A4:4C:BA:CD:93:6F:D4:66:21:26:93:1F:5D:88:03:3A
Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial: 02
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/1E30436A9C5111EC8C84286AC4F9AE02.roa
Signing time: Sat 05 Mar 2022 06:54:36 +0000
ROA not before: Sat 05 Mar 2022 06:54:36 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 149636
IP address blocks: 103.183.62.0/24 maxlen: 24
103.183.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Validity
Not Before: Mar 5 06:54:36 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6223092b-4243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:9f:a6:37:d7:1e:2c:4c:3d:e1:a4:96:ce:
13:9c:61:de:76:07:1a:2b:7a:d4:63:b4:5c:37:43:
3e:06:0a:f5:c4:98:be:02:59:b1:d2:1f:e0:24:10:
09:ee:8a:f9:eb:ca:ae:55:83:22:a0:2a:3a:3b:2d:
26:62:10:b9:c1:5b:4a:70:75:67:cd:1f:80:93:79:
82:62:ed:ba:22:a5:54:7b:45:85:72:e7:a2:a0:5b:
73:aa:8d:33:6c:be:ec:80:57:ea:db:4c:f5:e7:e3:
5d:3f:b6:a0:81:01:90:88:30:07:8c:15:a0:cf:a4:
37:3a:f3:03:a1:d2:24:b5:13:f2:12:71:a5:a2:b0:
72:6d:56:24:e2:cc:f3:36:8a:b8:20:28:41:2d:38:
f3:c0:ec:5e:36:2c:cb:5d:f3:f1:f3:60:b1:1d:f1:
63:9b:d0:89:9c:2f:a0:1d:58:7b:4d:e5:6e:58:a4:
f0:70:d9:25:76:b7:ce:c9:06:c2:84:bf:5c:06:12:
53:3f:d3:e7:a3:9a:01:26:6b:3e:3a:df:ca:fe:d7:
37:98:a1:56:b2:89:b1:2a:9c:95:50:73:bd:42:3e:
5a:9a:00:d9:70:89:b8:8c:e4:67:cb:84:ca:59:50:
be:8c:58:04:f6:c6:40:14:f3:34:6c:82:9a:e1:22:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:EA:D1:A4:4C:BA:CD:93:6F:D4:66:21:26:93:1F:5D:88:03:3A
X509v3 Authority Key Identifier:
keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/1E30436A9C5111EC8C84286AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:12:b2:fe:f0:29:d0:83:a4:2b:c0:7e:06:60:56:44:eb:aa:
4b:54:ca:7a:6b:43:cb:f6:50:e1:21:ed:37:81:88:20:ba:d4:
c9:97:9a:98:a6:9c:9a:0d:a5:c4:f3:0a:db:8d:01:0d:ee:58:
f2:c6:03:9d:d3:63:be:77:d1:cc:e4:3b:b3:89:24:ec:95:04:
42:8d:d2:ba:6f:9b:3a:fd:bc:a4:ad:61:ad:41:ac:7f:04:3d:
e1:f5:14:ee:78:ed:ec:a9:01:6d:ae:69:f0:7a:14:20:20:32:
51:c0:4a:77:a6:cc:5b:c6:78:38:fb:50:9c:80:b6:97:8b:bb:
86:4f:d5:55:3e:7d:fb:43:bc:3a:cc:70:7b:98:e7:6d:a3:16:
8d:cf:84:02:af:f5:a7:b5:f4:30:d0:8a:43:0a:74:f9:f5:ea:
60:39:5e:82:b8:67:e8:a8:29:e1:11:a2:1d:ed:a5:47:15:fe:
82:d1:92:1d:0a:c4:56:4c:d6:59:3e:2d:54:67:dc:40:a1:02:
b4:03:a2:0a:7b:e9:f5:94:d4:51:06:85:31:fa:d1:9f:45:39:
21:37:ff:15:8c:32:13:d9:db:e3:49:10:c8:c5:97:88:d6:2e:
86:cf:87:68:25:ed:1c:97:52:25:6d:4b:fa:9a:85:07:05:ac:
1e:6e:5e:ea
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTBBODExMC8GA1UEBRMoRjM2NzRBODkwN0U5QjFBRThFRTI2RjlDRjNDOTlDNDdG
NzU0OTM0QzAeFw0yMjAzMDUwNjU0MzZaFw0yMzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyMjMwOTJiLTQyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOAZ+mN9ceLEw94aSWzhOcYd52BxoretRjtFw3Qz4GCvXEmL4CWbHSH+AkEAnu
ivnryq5VgyKgKjo7LSZiELnBW0pwdWfNH4CTeYJi7boipVR7RYVy56KgW3OqjTNs
vuyAV+rbTPXn410/tqCBAZCIMAeMFaDPpDc68wOh0iS1E/IScaWisHJtViTizPM2
irggKEEtOPPA7F42LMtd8/HzYLEd8WOb0ImcL6AdWHtN5W5YpPBw2SV2t87JBsKE
v1wGElM/0+ejmgEmaz4638r+1zeYoVayibEqnJVQc71CPlqaANlwibiM5GfLhMpZ
UL6MWAT2xkAU8zRsgprhIkbnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxhLq0aRM
us2Tb9RmISaTH12IAzowHwYDVR0jBBgwFoAU82dKiQfpsa6O4m+c88mcR/dUk0ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMEE4LzdCMjAwNzNFOUM0
RTExRUNCMTc0OEI2OEM0RjlBRTAyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWsw
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODJkS2lRZnBzYTZPNG0tYzg4bWNSX2RVazB3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi8xRTMwNDM2QTlD
NTExMUVDOEM4NDI4NkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe3PjANBgkqhkiG9w0BAQsFAAOCAQEANBKy/vAp0IOkK8B+
BmBWROuqS1TKemtDy/ZQ4SHtN4GIILrUyZeamKacmg2lxPMK240BDe5Y8sYDndNj
vnfRzOQ7s4kk7JUEQo3Sum+bOv28pK1hrUGsfwQ94fUU7njt7KkBba5p8HoUICAy
UcBKd6bMW8Z4OPtQnIC2l4u7hk/VVT59+0O8Osxwe5jnbaMWjc+EAq/1p7X0MNCK
Qwp0+fXqYDlegrhn6Kgp4RGiHe2lRxX+gtGSHQrEVkzWWT4tVGfcQKECtAOiCnvp
9ZTUUQaFMfrRn0U5ITf/FYwyE9nb40kQyMWXiNYuhs+HaCXtHJdSJW1L+pqFBwWs
Hm5e6g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org