Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/BAE7A44684A711EABF754420C4F9AE02.roa
File: BAE7A44684A711EABF754420C4F9AE02.roa (raw, json)
Hash identifier: 930q8WCDHZvXehQ9+ykhRXxHnSIp4aRO1/9eijWBUyc=
Subject key identifier: B1:CE:50:5B:88:D0:7B:1E:43:57:DA:4F:A3:E3:C2:D9:FA:97:1D:55
Certificate issuer: /CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Certificate serial: 07DC
Authority key identifier: 1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/BAE7A44684A711EABF754420C4F9AE02.roa
Signing time: Mon 31 Oct 2022 22:27:58 +0000
ROA not before: Mon 31 Oct 2022 22:27:58 +0000
ROA not after: Wed 01 Mar 2023 00:00:00 +0000
asID: 138570
IP address blocks: 103.73.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Validity
Not Before: Oct 31 22:27:58 2022 GMT
Not After : Mar 1 00:00:00 2023 GMT
Subject: CN=63604bed-b5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:66:72:a6:79:16:56:76:d9:b7:82:b5:b2:
62:0c:39:a3:bc:a0:c4:1d:b6:79:c8:51:be:d2:1d:
52:2a:6b:cc:7d:ca:49:67:86:9a:a1:c0:70:4f:0a:
7c:cf:d0:c5:31:1a:25:40:7b:f1:53:60:8c:3b:9b:
3f:54:e2:47:b8:28:35:b1:9d:0a:9c:77:c3:00:6c:
15:90:38:c1:31:87:70:98:21:68:40:9e:de:36:52:
c1:cd:29:2b:39:23:58:60:75:6e:c3:29:af:0a:ad:
e8:fa:a0:06:54:02:ef:5a:8d:b4:02:2e:d5:5f:dd:
74:78:8f:a3:08:bd:e1:b0:c6:76:58:47:64:98:f2:
d5:5d:2c:e1:33:1e:f3:f9:58:db:d0:fb:53:bd:4f:
b5:f8:5d:ff:5f:48:4a:57:55:47:a1:97:94:2f:50:
9a:74:2f:0f:17:1b:58:b8:1b:84:b1:78:97:0d:36:
2e:a5:f3:28:23:2d:99:2b:9c:cf:64:7c:ae:b9:54:
0d:21:df:6e:65:d8:a5:45:d8:c7:45:4e:f2:6e:95:
81:ed:23:7e:05:3b:94:37:72:0b:eb:2c:7d:d1:e6:
f4:1b:dd:b4:02:13:51:8d:ba:5f:12:61:cf:04:61:
58:dc:57:03:53:d8:01:0e:ea:65:6c:ca:7d:93:4b:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:50:5B:88:D0:7B:1E:43:57:DA:4F:A3:E3:C2:D9:FA:97:1D:55
X509v3 Authority Key Identifier:
keyid:1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/BAE7A44684A711EABF754420C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b3:1d:18:8a:66:8e:42:f1:37:72:e9:dc:2d:1f:6a:39:36:
ed:9e:02:e1:fc:54:1a:05:6b:0f:90:45:d2:04:43:6c:e6:de:
16:c2:52:03:f4:f9:50:36:16:f3:05:da:bc:96:71:90:44:3d:
e6:e0:59:5f:b3:79:ab:c2:3b:ff:61:c5:4a:cb:33:a7:d4:49:
33:3d:28:bb:7d:ed:88:cc:95:39:5b:32:8a:1e:cc:29:34:64:
1a:74:43:87:42:c5:32:c3:81:c5:c1:77:28:44:01:e1:b6:b0:
0f:3e:74:d1:d9:44:6c:7b:5d:79:fc:32:ea:0b:9a:6f:3d:c2:
9e:fb:15:54:ef:1f:cc:a7:1f:d3:ca:5e:7d:72:f9:80:99:81:
89:48:dd:42:e1:d0:b5:17:56:17:10:75:f0:83:ea:30:1f:fc:
89:a4:88:39:b0:15:0e:24:b0:e9:77:45:ba:8b:ef:8e:5a:24:
56:7a:6a:ac:ef:08:bc:11:d4:f2:58:a1:4d:8c:db:72:86:a9:
64:21:58:7b:33:ae:60:27:50:83:6d:e1:bd:1a:92:d4:c0:53:
2e:6a:82:c0:17:a7:98:6e:5c:13:3d:56:b9:fa:be:7b:9c:cd:
9d:60:8f:29:85:47:1e:a9:59:52:b9:a3:10:67:9b:d8:79:f3:
3f:6c:08:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdEQzMxMTAvBgNVBAUTKDFEQzVFNzEwMjk3QzUyMzFDN0IyQTU2NUExNDYwNTUx
MThFNjUyNjQwHhcNMjIxMDMxMjIyNzU4WhcNMjMwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzYwNGJlZC1iNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0VmcqZ5FlZ22beCtbJiDDmjvKDEHbZ5yFG+0h1SKmvMfcpJZ4aaocBwTwp8
z9DFMRolQHvxU2CMO5s/VOJHuCg1sZ0KnHfDAGwVkDjBMYdwmCFoQJ7eNlLBzSkr
OSNYYHVuwymvCq3o+qAGVALvWo20Ai7VX910eI+jCL3hsMZ2WEdkmPLVXSzhMx7z
+Vjb0PtTvU+1+F3/X0hKV1VHoZeUL1CadC8PFxtYuBuEsXiXDTYupfMoIy2ZK5zP
ZHyuuVQNId9uZdilRdjHRU7ybpWB7SN+BTuUN3IL6yx90eb0G920AhNRjbpfEmHP
BGFY3FcDU9gBDuplbMp9k0tJ0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLHOUFuI
0HseQ1faT6Pjwtn6lx1VMB8GA1UdIwQYMBaAFB3F5xApfFIxx7KlZaFGBVEY5lJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RDMy9FNjUxMThBMjg0
QTYxMUVBQUM1MTQyMUZDNEY5QUUwMi9IY1huRUNsOFVqSEhzcVZsb1VZRlVSam1V
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hjWG5FQ2w4VWpISHNxVmxvVVlGVVJqbVVtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdEQzMvRTY1MTE4QTI4NEE2MTFFQUFDNTE0MjFGQzRGOUFFMDIvQkFFN0E0NDY4
NEE3MTFFQUJGNzU0NDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnSf4wDQYJKoZIhvcNAQELBQADggEBAE2zHRiKZo5C8Tdy
6dwtH2o5Nu2eAuH8VBoFaw+QRdIEQ2zm3hbCUgP0+VA2FvMF2ryWcZBEPebgWV+z
eavCO/9hxUrLM6fUSTM9KLt97YjMlTlbMooezCk0ZBp0Q4dCxTLDgcXBdyhEAeG2
sA8+dNHZRGx7XXn8MuoLmm89wp77FVTvH8ynH9PKXn1y+YCZgYlI3ULh0LUXVhcQ
dfCD6jAf/ImkiDmwFQ4ksOl3RbqL745aJFZ6aqzvCLwR1PJYoU2M23KGqWQhWHsz
rmAnUINt4b0aktTAUy5qgsAXp5huXBM9Vrn6vnuczZ1gjymFRx6pWVK5oxBnm9h5
8z9sCPc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org