Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B875A91C36D811ECB5BD1470C4F9AE02.roa
File: B875A91C36D811ECB5BD1470C4F9AE02.roa (raw, json)
Hash identifier: IpvOx49Xsf7avIYzbnw6ErsUSRrcL5c4Wb0cxPQ5F74=
Subject key identifier: 52:F0:4A:EC:FB:90:F9:ED:13:AD:4B:7F:6F:31:59:B7:40:F6:C0:A3
Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial: 03AC
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B875A91C36D811ECB5BD1470C4F9AE02.roa
Signing time: Fri 03 Dec 2021 11:39:20 +0000
ROA not before: Fri 03 Dec 2021 11:39:19 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 131164
IP address blocks: 183.177.112.0/21 maxlen: 22
183.177.112.0/24 maxlen: 24
183.177.113.0/24 maxlen: 24
183.177.114.0/24 maxlen: 24
183.177.115.0/24 maxlen: 24
183.177.116.0/24 maxlen: 24
183.177.117.0/24 maxlen: 24
183.177.118.0/24 maxlen: 24
183.177.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Validity
Not Before: Dec 3 11:39:19 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61aa01e7-f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:e8:55:da:82:d0:de:de:b4:ea:9c:8f:58:
2f:68:14:59:f7:47:de:a1:0e:9e:30:17:9a:47:85:
63:3a:89:f4:5c:6f:6b:f3:54:35:de:b8:a6:0c:cf:
d7:d1:04:f1:41:ac:51:81:41:0e:f0:0e:a4:3b:c1:
5c:84:1d:75:35:bd:22:00:0d:e6:fc:c8:fd:7c:0e:
0d:7a:f9:a8:fe:cb:04:60:19:f3:46:f8:fd:36:37:
d4:a0:b0:67:de:cb:b5:5f:44:fb:2b:2a:4c:38:bc:
4b:12:58:67:83:08:b5:89:60:23:3c:a4:af:f1:55:
9c:7e:42:84:f1:86:fb:c6:6f:0e:6b:b8:59:08:e0:
07:f7:96:11:00:e2:32:d4:44:54:68:48:aa:a9:d2:
d8:ec:75:f0:95:79:31:96:28:69:85:6c:61:f4:25:
06:2a:60:33:0f:76:67:9e:f9:8e:6f:d3:ab:25:c6:
53:b6:be:1c:04:17:b5:d9:35:fd:46:4d:74:0f:86:
4c:64:b3:db:28:05:0e:36:b0:43:dc:f1:a6:ae:90:
ca:af:9f:0b:00:b9:37:6a:71:bd:f4:38:f7:5b:36:
31:64:54:17:d9:08:b8:7c:ed:66:d1:c9:7b:53:3e:
89:5f:2f:4a:67:d2:f6:64:7a:f8:4c:92:6f:15:c6:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:4A:EC:FB:90:F9:ED:13:AD:4B:7F:6F:31:59:B7:40:F6:C0:A3
X509v3 Authority Key Identifier:
keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B875A91C36D811ECB5BD1470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.177.112.0/21
Signature Algorithm: sha256WithRSAEncryption
51:1b:48:64:d7:ec:ff:43:e1:a4:d0:c7:17:0f:3c:19:f9:c0:
fb:4a:e9:e1:de:e8:50:b1:62:1a:65:06:03:9e:33:49:d7:b7:
b1:d8:c6:ac:cc:8f:2f:cc:66:65:0d:94:f5:ab:24:24:09:95:
8e:42:f0:70:83:ac:9e:7f:d6:5c:5a:33:80:f7:db:8d:32:8d:
ed:94:f8:e7:6a:24:29:22:73:bc:4a:18:75:e8:2d:09:81:f2:
5e:8b:46:9d:3f:f9:70:ff:5c:4a:c1:c6:77:65:96:4c:a5:70:
a7:0d:86:fd:e5:ee:02:73:f1:57:49:4c:3d:5c:8a:c1:91:1b:
7e:55:5a:30:a6:2b:49:e0:ae:cc:ba:9f:7a:7d:58:45:e7:0e:
e6:c0:52:16:5a:94:da:0e:2a:4e:9c:d5:64:a4:53:cf:b7:35:
be:9e:bc:23:d1:83:47:5f:08:b2:5b:ae:9e:43:2e:1a:62:74:
39:75:0f:fa:c4:57:3e:cc:28:a4:27:e0:ba:0c:be:21:cd:ec:
c5:46:41:b8:78:61:39:c2:50:eb:58:28:c5:0e:53:e8:f5:0b:
9e:22:df:0f:98:46:97:d5:ed:ee:47:1f:b2:80:fa:b1:d7:1c:
5b:33:4a:6d:53:78:e7:e4:1c:12:85:a1:da:39:c9:9e:8f:03:
f5:90:1b:30
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE
RTgwMUYyRDcwHhcNMjExMjAzMTEzOTE5WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWFhMDFlNy1mODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDPoVdqC0N7etOqcj1gvaBRZ90feoQ6eMBeaR4VjOon0XG9r81Q13rimDM/X
0QTxQaxRgUEO8A6kO8FchB11Nb0iAA3m/Mj9fA4Nevmo/ssEYBnzRvj9NjfUoLBn
3su1X0T7KypMOLxLElhngwi1iWAjPKSv8VWcfkKE8Yb7xm8Oa7hZCOAH95YRAOIy
1ERUaEiqqdLY7HXwlXkxlihphWxh9CUGKmAzD3ZnnvmOb9OrJcZTtr4cBBe12TX9
Rk10D4ZMZLPbKAUONrBD3PGmrpDKr58LALk3anG99Dj3WzYxZFQX2Qi4fO1m0cl7
Uz6JXy9KZ9L2ZHr4TJJvFcbLyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFLwSuz7
kPntE61Lf28xWbdA9sCjMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz
ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ1MzkvQzEyNjVEQzBFMzg5MTFFQUI3M0EzNjU5QzRGOUFFMDIvQjg3NUE5MUMz
NkQ4MTFFQ0I1QkQxNDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO3sXAwDQYJKoZIhvcNAQELBQADggEBAFEbSGTX7P9D4aTQ
xxcPPBn5wPtK6eHe6FCxYhplBgOeM0nXt7HYxqzMjy/MZmUNlPWrJCQJlY5C8HCD
rJ5/1lxaM4D3240yje2U+OdqJCkic7xKGHXoLQmB8l6LRp0/+XD/XErBxndllkyl
cKcNhv3l7gJz8VdJTD1cisGRG35VWjCmK0ngrsy6n3p9WEXnDubAUhZalNoOKk6c
1WSkU8+3Nb6evCPRg0dfCLJbrp5DLhpidDl1D/rEVz7MKKQn4LoMviHN7MVGQbh4
YTnCUOtYKMUOU+j1C54i3w+YRpfV7e5HH7KA+rHXHFszSm1TeOfkHBKFodo5yZ6P
A/WQGzA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org