Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/4BAE38AC8B2E11EDB67E0E2BC4F9AE02.roa
File: 4BAE38AC8B2E11EDB67E0E2BC4F9AE02.roa (raw, json)
Hash identifier: ji0yoWXbAz0L9xd7BtMgKyqBCWd9GnqgN6U9PBtYQfE=
Subject key identifier: D0:71:6B:79:E9:9A:83:7A:B9:03:17:60:56:83:1C:30:E3:39:68:5C
Certificate issuer: /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial: 09CF
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/4BAE38AC8B2E11EDB67E0E2BC4F9AE02.roa
Signing time: Tue 03 Jan 2023 06:17:27 +0000
ROA not before: Tue 03 Jan 2023 06:17:27 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150178
IP address blocks: 103.142.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Validity
Not Before: Jan 3 06:17:27 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63b3c877-6409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:68:eb:0e:74:0a:b4:8a:8b:09:38:c4:97:
45:0c:1f:bb:1e:44:c9:e9:f6:79:7b:41:7c:53:60:
07:ef:16:f2:73:e5:2a:4d:4c:61:15:95:d1:77:a3:
27:a7:83:83:f7:90:bf:1b:a9:bc:1b:14:a2:45:4b:
77:dc:5a:08:64:68:4e:0d:fe:7c:37:35:83:67:b4:
9b:31:a6:7a:63:2a:fc:17:98:c4:e1:db:dc:1e:c6:
84:58:36:8f:ac:cf:78:4a:d6:0d:08:3b:dd:7f:0c:
c0:41:e2:a3:6d:14:35:6a:ec:6e:fc:87:0f:72:7a:
0a:6d:23:e1:dc:e6:0e:cb:57:8a:5b:4b:2f:55:30:
e8:b9:e3:c2:88:b4:79:60:b1:f6:9d:47:8d:16:70:
24:51:36:0d:61:53:27:45:be:68:dc:7e:2e:d1:3e:
87:81:f7:ff:62:ee:c0:55:b9:f8:70:3a:53:c9:c4:
51:16:51:8a:3c:1f:cf:28:df:04:76:9d:e9:7a:de:
1d:b9:de:ca:b1:01:af:48:a2:ed:24:f2:51:35:d1:
ee:1d:40:72:4f:31:e9:89:42:68:ce:d9:6f:7d:2a:
5c:c2:26:3c:ed:92:74:29:f8:8c:1b:4a:d7:50:1b:
51:f8:ba:dc:1a:46:53:46:08:29:52:08:b0:a9:6a:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:6B:79:E9:9A:83:7A:B9:03:17:60:56:83:1C:30:E3:39:68:5C
X509v3 Authority Key Identifier:
keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/4BAE38AC8B2E11EDB67E0E2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:51:91:39:54:35:d2:13:71:4b:28:37:c3:6f:af:a7:20:f1:
05:ae:f7:81:48:18:6e:35:07:46:5e:ac:8a:13:17:68:e1:17:
37:9f:10:06:06:2b:74:d1:7d:09:35:b9:4e:23:ad:f7:a8:f8:
39:f2:2c:1b:f7:09:af:2d:6b:1b:bc:4c:fe:5b:ae:f7:00:6c:
ef:5e:5e:e5:d1:14:1e:cd:e2:98:3f:59:36:3e:fb:58:c2:c3:
60:84:6d:83:91:2e:ee:8f:0a:cc:c4:f8:72:a7:b4:b7:d2:4e:
d2:6c:f9:9c:c2:fb:b1:77:14:c1:f2:35:92:b5:76:8f:89:40:
8d:1b:05:1b:b7:d1:4f:18:9b:b2:85:37:52:14:74:0e:e5:80:
ed:56:da:5b:f2:19:bf:dc:ed:f3:aa:30:59:43:53:e7:8d:2b:
18:de:f1:dc:33:36:50:01:0d:19:75:83:20:dd:44:2b:1f:83:
cf:e7:9b:c9:0c:a1:5f:e1:7f:ba:db:8f:79:ba:d7:da:dc:68:
da:14:a3:cb:a9:56:3f:10:6d:5a:29:d1:55:e9:84:f7:07:33:
70:6c:98:21:12:55:f8:78:bd:df:75:8e:a6:15:71:6d:36:4b:
15:dc:61:ab:5c:ab:20:e6:94:62:b2:ee:80:0b:d2:d6:c5:ad:
0a:f1:fb:5c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYxMDQxMTAvBgNVBAUTKDlCMjVCRDJDRTM1NTkwMzJCNUVCNDQ1N0UwNUM4MTBB
RThCOEFBQUMwHhcNMjMwMTAzMDYxNzI3WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2IzYzg3Ny02NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8Jo6w50CrSKiwk4xJdFDB+7HkTJ6fZ5e0F8U2AH7xbyc+UqTUxhFZXRd6Mn
p4OD95C/G6m8GxSiRUt33FoIZGhODf58NzWDZ7SbMaZ6Yyr8F5jE4dvcHsaEWDaP
rM94StYNCDvdfwzAQeKjbRQ1auxu/IcPcnoKbSPh3OYOy1eKW0svVTDouePCiLR5
YLH2nUeNFnAkUTYNYVMnRb5o3H4u0T6Hgff/Yu7AVbn4cDpTycRRFlGKPB/PKN8E
dp3pet4dud7KsQGvSKLtJPJRNdHuHUByTzHpiUJoztlvfSpcwiY87ZJ0KfiMG0rX
UBtR+LrcGkZTRggpUgiwqWp1rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNBxa3np
moN6uQMXYFaDHDDjOWhcMB8GA1UdIwQYMBaAFJslvSzjVZAytetEV+BcgQrouKqs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjEwNC9FN0U5MzM2NDI4
QjkxMUVBOUI3RUFCMzFDNEY5QUUwMi9teVc5TE9OVmtESzE2MFJYNEZ5QkN1aTRx
cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL215VzlMT05Wa0RLMTYwUlg0RnlCQ3VpNHFxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYxMDQvRTdFOTMzNjQyOEI5MTFFQTlCN0VBQjMxQzRGOUFFMDIvNEJBRTM4QUM4
QjJFMTFFREI2N0UwRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjrgwDQYJKoZIhvcNAQELBQADggEBAMJRkTlUNdITcUso
N8Nvr6cg8QWu94FIGG41B0ZerIoTF2jhFzefEAYGK3TRfQk1uU4jrfeo+DnyLBv3
Ca8taxu8TP5brvcAbO9eXuXRFB7N4pg/WTY++1jCw2CEbYORLu6PCszE+HKntLfS
TtJs+ZzC+7F3FMHyNZK1do+JQI0bBRu30U8Ym7KFN1IUdA7lgO1W2lvyGb/c7fOq
MFlDU+eNKxje8dwzNlABDRl1gyDdRCsfg8/nm8kMoV/hf7rbj3m619rcaNoUo8up
Vj8QbVop0VXphPcHM3BsmCESVfh4vd91jqYVcW02SxXcYatcqyDmlGKy7oAL0tbF
rQrx+1w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org