Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/4B330532F7AA11ECB6D39879C4F9AE02.roa
File: 4B330532F7AA11ECB6D39879C4F9AE02.roa (raw, json)
Hash identifier: ki8IQ3VRU0hDx9/oLdmGjYF278wt01Sa1c3XG0jL0+8=
Subject key identifier: 04:0C:4D:E7:63:55:75:03:B5:1C:6F:F2:E7:71:87:4F:3C:61:3E:E0
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: D6
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/4B330532F7AA11ECB6D39879C4F9AE02.roa
Signing time: Mon 10 Oct 2022 14:15:24 +0000
ROA not before: Mon 10 Oct 2022 14:15:24 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 142405
IP address blocks: 103.189.68.0/24 maxlen: 24
103.189.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Oct 10 14:15:24 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=634428fc-60fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:8b:6a:ff:e5:0c:36:3f:b9:49:1e:7d:57:
f3:20:fb:af:38:55:f3:44:d4:32:4a:73:3e:18:e8:
34:9a:d0:e3:f5:0d:29:66:7e:3a:c2:cd:a0:de:c8:
00:d7:c2:20:eb:1f:e1:cb:5c:b2:0e:e6:32:74:f1:
af:ec:27:5d:c4:af:9f:a5:b7:16:7b:c7:da:0e:70:
b4:d2:1d:d3:39:f6:65:c5:3f:70:3f:c0:84:6b:fe:
59:d2:6f:75:dd:b9:ea:63:1b:35:f1:58:c2:a6:15:
df:98:77:81:f8:50:63:e6:3a:6a:46:92:28:37:ac:
57:1e:50:04:f9:ef:1a:b9:96:ff:6f:36:00:d0:b2:
ed:31:2e:8c:9a:69:6e:3c:c7:38:7a:04:70:0f:22:
a0:c6:5e:ea:a1:ec:82:9a:d5:bd:f0:65:c1:89:32:
32:3e:d9:a8:8e:83:21:12:57:b1:8d:57:31:23:9c:
ff:05:1b:38:21:5e:5e:57:b2:0a:99:72:4a:60:59:
50:1f:5c:64:d2:d5:07:19:66:7a:bf:2e:fa:5f:21:
56:29:13:c4:00:cf:3f:fa:bd:8c:30:4a:36:2c:74:
c4:07:7d:24:8a:02:ff:2f:13:b7:fb:b1:e9:eb:73:
4d:45:c8:51:b3:ad:9d:5a:f0:a8:e5:83:8a:37:97:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:4D:E7:63:55:75:03:B5:1C:6F:F2:E7:71:87:4F:3C:61:3E:E0
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/4B330532F7AA11ECB6D39879C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:7a:be:6d:86:b1:1f:09:74:cc:fe:e9:48:c4:b4:d7:f3:3b:
e6:fa:6a:9e:53:45:b3:6f:73:89:37:33:81:d9:d6:df:56:04:
db:b6:08:3b:5b:28:c4:3e:62:c0:a1:22:d8:c6:2a:f4:1e:58:
3e:3d:2c:1d:0b:3a:37:72:48:b0:35:8c:1f:17:00:e5:2a:fa:
a0:5e:38:96:6c:34:db:d8:27:b5:53:45:02:5f:3e:de:cf:f7:
57:1c:80:a1:79:eb:46:9a:87:3b:09:b0:97:3e:35:ef:a9:3e:
94:5d:e7:c5:d3:57:36:30:72:d8:ef:a4:0c:07:fd:10:b5:26:
0a:48:52:e1:d7:b2:86:b0:4a:12:7f:9f:15:ee:f5:f2:d2:31:
06:d2:de:88:5d:0c:a5:a1:e3:73:eb:18:bb:e3:16:fe:c8:2b:
0f:ac:d6:27:4a:4f:a8:39:a6:c5:95:c9:97:66:44:04:5f:e0:
96:2c:f3:42:ac:08:de:65:01:99:56:96:66:35:b6:7d:d1:49:
ba:2f:a5:e3:c4:2a:3b:e3:d3:2b:06:0c:74:d2:ac:a5:e5:ed:
71:7c:8f:94:77:11:3b:75:d8:2d:4c:2a:db:18:b2:71:c1:22:
9a:dd:60:aa:22:ab:b0:b5:0d:30:b8:17:ec:77:1b:3e:c8:12:
86:dd:c8:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5
NDAwNEZENUIwHhcNMjIxMDEwMTQxNTI0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ0MjhmYy02MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8guLav/lDDY/uUkefVfzIPuvOFXzRNQySnM+GOg0mtDj9Q0pZn46ws2g3sgA
18Ig6x/hy1yyDuYydPGv7CddxK+fpbcWe8faDnC00h3TOfZlxT9wP8CEa/5Z0m91
3bnqYxs18VjCphXfmHeB+FBj5jpqRpIoN6xXHlAE+e8auZb/bzYA0LLtMS6Mmmlu
PMc4egRwDyKgxl7qoeyCmtW98GXBiTIyPtmojoMhElexjVcxI5z/BRs4IV5eV7IK
mXJKYFlQH1xk0tUHGWZ6vy76XyFWKRPEAM8/+r2MMEo2LHTEB30kigL/LxO3+7Hp
63NNRchRs62dWvCo5YOKN5c8KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQMTedj
VXUDtRxv8udxh088YT7gMB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3
MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcyMDIvMEFGRUNBNzBGNzA4MTFFQzk4NDlGMzVFQzRGOUFFMDIvNEIzMzA1MzJG
N0FBMTFFQ0I2RDM5ODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvUQwDQYJKoZIhvcNAQELBQADggEBAIx6vm2GsR8JdMz+
6UjEtNfzO+b6ap5TRbNvc4k3M4HZ1t9WBNu2CDtbKMQ+YsChItjGKvQeWD49LB0L
OjdySLA1jB8XAOUq+qBeOJZsNNvYJ7VTRQJfPt7P91ccgKF560aahzsJsJc+Ne+p
PpRd58XTVzYwctjvpAwH/RC1JgpIUuHXsoawShJ/nxXu9fLSMQbS3ohdDKWh43Pr
GLvjFv7IKw+s1idKT6g5psWVyZdmRARf4JYs80KsCN5lAZlWlmY1tn3RSbovpePE
Kjvj0ysGDHTSrKXl7XF8j5R3ETt12C1MKtsYsnHBIprdYKoiq7C1DTC4F+x3Gz7I
EobdyDg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org