Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/7FAEEE6A7DB111ED8DD23254C4F9AE02.roa
File: 7FAEEE6A7DB111ED8DD23254C4F9AE02.roa (raw, json)
Hash identifier: aEc8ewumGmDJZz1Ah8aCmjM97xHTEeDEnUJtvHWPMAw=
Subject key identifier: 12:EF:65:04:4C:58:0F:05:39:74:9E:4F:7A:A0:2F:2C:F3:C5:B1:88
Certificate issuer: /CN=A9191202/serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
Certificate serial: 049B
Authority key identifier: 5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/7FAEEE6A7DB111ED8DD23254C4F9AE02.roa
Signing time: Sat 17 Dec 2022 02:21:23 +0000
ROA not before: Sat 17 Dec 2022 02:21:22 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 137990
IP address blocks: 103.154.60.0/24 maxlen: 24
2407:8bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191202/serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
Validity
Not Before: Dec 17 02:21:22 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=639d27a2-2a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:91:e4:63:c3:f7:1b:75:84:48:3d:9b:40:
dc:48:93:a4:0e:e2:f5:92:84:07:d9:d8:3f:0d:75:
af:12:e2:6f:de:ca:8b:a0:61:7c:bb:21:44:3a:35:
49:30:fb:20:ed:7e:74:77:72:22:f1:ac:1d:88:27:
09:fd:b7:5e:c1:10:48:a8:ab:38:72:b0:00:00:c7:
d6:39:ce:d2:2b:7b:2b:68:8d:65:33:90:7c:27:e5:
44:6e:3c:33:b1:b3:c7:91:d6:a3:c9:92:60:eb:ab:
ab:4d:06:e0:a7:18:1c:e2:1b:69:ca:ea:ac:7a:0e:
3b:fd:f7:62:ed:54:ca:19:5c:03:c3:c1:0b:c1:64:
05:b7:21:39:fc:ca:4c:ff:f8:8e:94:65:28:89:95:
ae:f9:62:56:0f:2b:9b:6d:dd:21:c4:86:9b:60:e4:
0c:b2:54:3f:61:73:eb:c3:1d:e6:b6:da:b5:a2:a4:
33:bd:c0:a4:fc:c9:01:cb:6a:34:02:a1:10:5f:81:
68:2e:fa:10:f6:31:b9:2f:79:df:2e:c2:d3:bf:ac:
c1:82:49:cb:d2:c3:66:c9:b6:22:9e:7f:38:c0:bc:
00:14:c2:9b:d9:ef:bc:42:50:4e:b6:94:4d:aa:5b:
b4:f0:2f:59:d9:3b:66:c2:66:49:2f:f6:6f:80:85:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:65:04:4C:58:0F:05:39:74:9E:4F:7A:A0:2F:2C:F3:C5:B1:88
X509v3 Authority Key Identifier:
keyid:5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/7FAEEE6A7DB111ED8DD23254C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.60.0/24
IPv6:
2407:8bc0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:9f:f4:8b:6e:18:1a:df:a1:17:f6:61:dd:13:9a:56:75:ab:
4d:a1:e8:c6:72:f9:18:d2:6c:43:1c:66:4c:80:9e:a2:f7:1b:
4a:55:92:af:c4:66:d2:1d:d2:32:10:7b:cf:12:72:5b:89:76:
8f:c5:a1:0e:63:52:f6:c2:bb:95:b5:31:ab:6a:6e:60:11:8e:
5a:c0:27:fe:b1:1a:48:cd:3e:c4:e8:7f:dd:4e:a7:06:d7:71:
1a:e3:78:be:16:52:dd:0a:7f:f5:b6:8a:f7:9a:83:17:1c:3c:
63:95:93:0f:41:57:d4:4c:aa:ff:e4:b0:2f:49:1f:e2:bd:db:
c4:64:03:92:b5:5b:63:1c:b3:32:6c:bc:49:51:35:20:2a:78:
f3:eb:38:0d:e1:9f:04:df:05:60:11:83:22:b5:47:75:8d:af:
f1:20:a7:36:a8:d6:90:9c:23:b6:c2:26:47:9e:79:77:a6:1a:
e7:c1:b8:e7:b5:93:0a:21:dc:16:7d:92:9e:d2:b5:b7:86:92:
9e:0f:07:5c:d9:c1:7a:39:10:77:e3:bc:a6:83:6d:c8:49:25:
dd:7f:18:ca:d2:62:0c:11:89:0c:23:07:9d:4d:0b:3b:4e:be:
3b:1c:af:09:4c:a0:2e:4d:17:37:bb:1e:a9:ee:80:15:4b:6f:
94:9b:d5:d8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEyMDIxMTAvBgNVBAUTKDVBNkZCMkEzQTMzODMyRTIxNjY1NzRCRDkwQ0RFMDMw
QkUxRkNFQ0YwHhcNMjIxMjE3MDIyMTIyWhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzlkMjdhMi0yYTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp6+R5GPD9xt1hEg9m0DcSJOkDuL1koQH2dg/DXWvEuJv3sqLoGF8uyFEOjVJ
MPsg7X50d3Ii8awdiCcJ/bdewRBIqKs4crAAAMfWOc7SK3sraI1lM5B8J+VEbjwz
sbPHkdajyZJg66urTQbgpxgc4htpyuqseg47/fdi7VTKGVwDw8ELwWQFtyE5/MpM
//iOlGUoiZWu+WJWDyubbd0hxIabYOQMslQ/YXPrwx3mttq1oqQzvcCk/MkBy2o0
AqEQX4FoLvoQ9jG5L3nfLsLTv6zBgknL0sNmybYinn84wLwAFMKb2e+8QlBOtpRN
qlu08C9Z2TtmwmZJL/ZvgIUd3wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBLvZQRM
WA8FOXSeT3qgLyzzxbGIMB8GA1UdIwQYMBaAFFpvsqOjODLiFmV0vZDN4DC+H87P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIwMi9EQkFGMkRFRThE
NDcxMUVCQkExQTkwMkRDNEY5QUUwMi9XbS15bzZNNE11SVdaWFM5a00zZ01MNGZ6
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dtLXlvNk00TXVJV1pYUzlrTTNnTUw0ZnpzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTEyMDIvREJBRjJERUU4RDQ3MTFFQkJBMUE5MDJEQzRGOUFFMDIvN0ZBRUVFNkE3
REIxMTFFRDhERDIzMjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnmjwwDQQCAAIwBwMFACQHi8AwDQYJKoZIhvcNAQELBQAD
ggEBADyf9ItuGBrfoRf2Yd0TmlZ1q02h6MZy+RjSbEMcZkyAnqL3G0pVkq/EZtId
0jIQe88ScluJdo/FoQ5jUvbCu5W1MatqbmARjlrAJ/6xGkjNPsTof91OpwbXcRrj
eL4WUt0Kf/W2iveagxccPGOVkw9BV9RMqv/ksC9JH+K928RkA5K1W2McszJsvElR
NSAqePPrOA3hnwTfBWARgyK1R3WNr/Egpzao1pCcI7bCJkeeeXemGufBuOe1kwoh
3BZ9kp7StbeGkp4PB1zZwXo5EHfjvKaDbchJJd1/GMrSYgwRiQwjB51NCztOvjsc
rwlMoC5NFze7HqnugBVLb5Sb1dg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org