Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/F1704550ADAF11EAA2A26E10C4F9AE02.roa
File: F1704550ADAF11EAA2A26E10C4F9AE02.roa (raw, json)
Hash identifier: XawNEFpV13g1AJOoX1tB4jIoB51E19fBqem1eKskHU8=
Subject key identifier: A5:D5:78:34:20:04:12:FB:6E:1F:3F:24:9E:F3:B5:01:6B:78:7B:B4
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 0665
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/F1704550ADAF11EAA2A26E10C4F9AE02.roa
Signing time: Fri 22 Jul 2022 22:27:45 +0000
ROA not before: Fri 22 Jul 2022 22:27:45 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 140681
IP address blocks: 103.151.184.0/24 maxlen: 24
103.151.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jul 22 22:27:45 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62db2460-67bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:56:e0:6e:9e:27:02:e1:58:ef:9f:b8:2b:
55:07:23:05:6b:d4:d9:d4:20:8a:2a:77:6b:e5:41:
e9:6a:a7:d0:f2:42:d6:51:8c:a2:02:0a:3b:ea:ff:
71:ae:74:1f:55:89:56:98:45:41:c9:9a:f3:d0:07:
ba:4f:3d:7e:bd:d9:7f:93:7f:4f:71:37:75:89:e1:
6a:44:41:5d:71:c0:56:6a:16:83:f3:09:0e:77:88:
41:14:01:e9:0f:b5:2f:96:81:90:2d:58:ab:de:78:
34:31:33:af:d4:c1:bf:f8:af:1a:82:fd:a0:0a:64:
da:c9:69:4b:53:31:70:1b:d3:05:2b:75:31:95:84:
47:1a:33:c3:44:9b:d2:50:7f:3b:bc:f8:32:34:4c:
5b:34:d3:62:93:e3:7d:25:ff:be:5a:62:a9:a4:73:
1b:d6:ba:ec:4f:1c:15:2c:f0:38:b5:28:4d:7d:a3:
9f:3b:26:38:8f:a7:36:97:62:eb:45:cd:e8:2e:e8:
ac:92:49:d7:eb:38:c1:f0:f9:7a:11:0a:50:94:b1:
b9:1c:21:89:e7:10:fc:55:eb:89:a0:8f:10:fe:0a:
57:77:e4:d2:ee:10:81:17:2b:ad:02:e6:55:68:cb:
7e:50:0b:fb:06:70:63:30:66:37:22:69:c5:85:12:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:78:34:20:04:12:FB:6E:1F:3F:24:9E:F3:B5:01:6B:78:7B:B4
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/F1704550ADAF11EAA2A26E10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:41:96:b7:3d:44:98:c9:4e:2b:0b:48:e2:e5:0c:9c:b2:3c:
40:19:38:5f:19:b6:7b:01:73:f8:1b:5e:76:a9:e9:b9:a5:bf:
d5:47:87:8c:d1:ff:1e:64:0e:b7:e3:f3:49:a9:22:21:13:e1:
45:28:78:01:09:bb:55:11:72:b4:5d:c6:9f:fb:2e:b5:43:8b:
ec:a6:c0:90:6e:10:cb:5e:4b:5b:ab:9c:35:fd:37:69:e0:58:
e3:ee:e3:61:a5:31:39:30:1c:28:a3:e5:d0:78:f5:09:9f:f8:
5a:5d:c6:74:38:59:fc:b2:3d:da:65:74:8d:70:72:bb:29:49:
c1:63:a4:f7:51:5e:8f:89:a9:53:cf:7b:b1:bd:82:37:c3:98:
f4:6c:2b:76:de:9a:51:48:ce:95:44:38:34:23:96:ef:7f:24:
7c:2b:fd:c7:81:d8:c4:4c:26:8e:4d:47:fd:0e:34:70:d0:b8:
9a:e6:1e:8a:3b:dc:0c:18:6d:1d:20:0e:64:60:e4:a1:8f:5e:
07:7d:47:91:67:56:96:24:e6:66:e3:5e:39:c2:8d:c1:35:d6:
98:73:60:48:d7:da:6f:bc:6f:2b:ad:ac:d0:0d:0d:46:ef:24:
03:09:bd:dc:75:da:5f:28:f8:7a:9b:81:77:c4:6d:44:67:80:
dd:98:fb:fb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2
NTAzN0I5NDMwHhcNMjIwNzIyMjIyNzQ1WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmRiMjQ2MC02N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7PdW4G6eJwLhWO+fuCtVByMFa9TZ1CCKKndr5UHpaqfQ8kLWUYyiAgo76v9x
rnQfVYlWmEVByZrz0Ae6Tz1+vdl/k39PcTd1ieFqREFdccBWahaD8wkOd4hBFAHp
D7UvloGQLVir3ng0MTOv1MG/+K8agv2gCmTayWlLUzFwG9MFK3UxlYRHGjPDRJvS
UH87vPgyNExbNNNik+N9Jf++WmKppHMb1rrsTxwVLPA4tShNfaOfOyY4j6c2l2Lr
Rc3oLuiskknX6zjB8Pl6EQpQlLG5HCGJ5xD8VeuJoI8Q/gpXd+TS7hCBFyutAuZV
aMt+UAv7BnBjMGY3ImnFhRJvEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXVeDQg
BBL7bh8/JJ7ztQFreHu0MB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE
QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTVCODMvMEY0NkNBOENBREFGMTFFQTg0QzA0RTEwQzRGOUFFMDIvRjE3MDQ1NTBB
REFGMTFFQUEyQTI2RTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnl7gwDQYJKoZIhvcNAQELBQADggEBALZBlrc9RJjJTisL
SOLlDJyyPEAZOF8ZtnsBc/gbXnap6bmlv9VHh4zR/x5kDrfj80mpIiET4UUoeAEJ
u1URcrRdxp/7LrVDi+ymwJBuEMteS1urnDX9N2ngWOPu42GlMTkwHCij5dB49Qmf
+FpdxnQ4WfyyPdpldI1wcrspScFjpPdRXo+JqVPPe7G9gjfDmPRsK3bemlFIzpVE
ODQjlu9/JHwr/ceB2MRMJo5NR/0ONHDQuJrmHoo73AwYbR0gDmRg5KGPXgd9R5Fn
VpYk5mbjXjnCjcE11phzYEjX2m+8byutrNANDUbvJAMJvdx12l8o+HqbgXfEbURn
gN2Y+/s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org