Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/7DACDF8E7F4F11EC86019377C4F9AE02.roa
File: 7DACDF8E7F4F11EC86019377C4F9AE02.roa (raw, json)
Hash identifier: 2jFo5ZrQJXmSCLd+gyS4n6GcBMT1lxlKdoHygz5tjQ8=
Subject key identifier: C2:0E:8D:2B:22:11:BA:01:9E:41:B1:AD:47:C7:44:BB:45:A4:28:AF
Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial: 0390
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/7DACDF8E7F4F11EC86019377C4F9AE02.roa
Signing time: Thu 27 Jan 2022 08:59:53 +0000
ROA not before: Thu 27 Jan 2022 08:59:53 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9913
IP address blocks: 103.158.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Validity
Not Before: Jan 27 08:59:53 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61f25f09-e2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:d4:dd:a9:fe:c0:0f:8a:89:ca:8d:40:44:
be:48:b5:f5:99:7a:c9:53:67:f7:44:50:00:82:61:
3b:e9:8d:4c:e8:42:50:bb:27:74:1e:e0:95:00:81:
c3:98:19:00:f5:5d:7f:99:fe:a0:e3:74:d2:6c:9e:
39:bc:09:3d:40:0b:bf:32:ea:15:21:4d:c7:fc:09:
90:08:d4:a6:ef:85:eb:70:7e:9b:7e:fc:ce:cb:6f:
c6:7c:ca:70:8b:b8:81:c2:8b:6b:4a:b0:f6:63:c1:
62:19:90:18:7b:7c:f2:66:97:27:c8:fb:b9:6e:a6:
00:cd:c1:30:52:bb:a0:28:9f:2e:93:1b:e3:9d:bf:
16:f2:75:dc:8d:3e:0d:0e:b7:f5:5b:2a:10:41:52:
5e:c7:bd:b4:6f:d4:6b:ba:d9:87:af:7a:0e:ef:0a:
54:1e:5d:98:34:36:d6:42:ff:88:28:c0:e9:95:61:
53:1f:fd:e5:1e:e4:68:97:4e:56:fe:49:b5:56:8c:
1a:4b:90:a6:63:e1:96:1f:99:2c:3e:ba:29:4b:22:
ad:96:6e:d5:a7:e9:30:96:a4:2b:6b:18:23:cb:b3:
62:be:1f:0c:de:b2:5f:86:49:d0:77:18:cd:53:53:
94:88:1c:15:99:e7:6a:94:a1:f5:53:0b:f7:2c:3d:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:8D:2B:22:11:BA:01:9E:41:B1:AD:47:C7:44:BB:45:A4:28:AF
X509v3 Authority Key Identifier:
keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/7DACDF8E7F4F11EC86019377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a9:4f:bb:ba:58:08:d0:3a:39:25:24:f5:90:6f:2a:04:c9:
db:5f:e1:72:d5:9c:72:f4:27:d2:da:a8:65:83:aa:1d:da:c0:
be:1d:97:8e:87:f7:6b:89:96:5a:a6:b7:23:b0:b5:bd:2c:ae:
59:e0:83:f4:ce:03:a9:12:cc:1d:11:be:b5:9b:0e:4c:19:28:
2c:ca:60:28:d9:c6:bd:a2:a5:6c:00:57:38:82:ba:8b:9e:04:
50:c8:c4:37:c6:8b:5e:04:08:d7:14:50:c8:08:0e:91:44:77:
2a:92:a0:e8:79:45:f9:12:46:e3:2d:6e:64:ee:5c:98:0f:2a:
cc:b7:d4:87:f2:c3:15:46:8b:35:6b:cf:ff:61:51:d9:6d:5e:
bb:bf:6a:8d:5f:a1:90:b0:1c:d5:84:35:7b:78:1a:b7:f2:9f:
1b:c8:62:c9:09:17:c4:3c:ca:86:69:d5:88:1f:0a:25:61:0c:
ad:10:62:ef:8d:b4:0c:9a:67:ad:e8:e3:a6:47:3d:48:fd:f5:
35:61:0a:40:3b:4e:17:89:a1:fa:09:a3:17:d1:31:1d:c6:a3:
62:b9:09:56:e3:54:88:1f:38:6f:af:bb:ad:e4:7c:d4:d7:7f:
3f:57:67:d0:1e:89:52:29:13:b0:c8:30:1c:34:95:c4:0f:7b:
7e:67:a8:43
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx
N0YyMUJFMjAwHhcNMjIwMTI3MDg1OTUzWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWYyNWYwOS1lMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurHU3an+wA+KicqNQES+SLX1mXrJU2f3RFAAgmE76Y1M6EJQuyd0HuCVAIHD
mBkA9V1/mf6g43TSbJ45vAk9QAu/MuoVIU3H/AmQCNSm74XrcH6bfvzOy2/GfMpw
i7iBwotrSrD2Y8FiGZAYe3zyZpcnyPu5bqYAzcEwUrugKJ8ukxvjnb8W8nXcjT4N
Drf1WyoQQVJex720b9RrutmHr3oO7wpUHl2YNDbWQv+IKMDplWFTH/3lHuRol05W
/km1VowaS5CmY+GWH5ksPropSyKtlm7Vp+kwlqQraxgjy7Nivh8M3rJfhknQdxjN
U1OUiBwVmedqlKH1Uwv3LD1bswIDAQABo4IClTCCApEwHQYDVR0OBBYEFMIOjSsi
EboBnkGxrUfHRLtFpCivMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG
M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUI3RUQvMzA4ODc4OTgxRjNFMTFFQkFBMDIyQTIxQzRGOUFFMDIvN0RBQ0RGOEU3
RjRGMTFFQzg2MDE5Mzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnnjMwDQYJKoZIhvcNAQELBQADggEBACqpT7u6WAjQOjkl
JPWQbyoEydtf4XLVnHL0J9LaqGWDqh3awL4dl46H92uJllqmtyOwtb0srlngg/TO
A6kSzB0RvrWbDkwZKCzKYCjZxr2ipWwAVziCuoueBFDIxDfGi14ECNcUUMgIDpFE
dyqSoOh5RfkSRuMtbmTuXJgPKsy31IfywxVGizVrz/9hUdltXru/ao1foZCwHNWE
NXt4GrfynxvIYskJF8Q8yoZp1YgfCiVhDK0QYu+NtAyaZ63o46ZHPUj99TVhCkA7
TheJofoJoxfRMR3Go2K5CVbjVIgfOG+vu63kfNTXfz9XZ9AeiVIpE7DIMBw0lcQP
e35nqEM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org