Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/6E00E83A370811ECA61C8B38C4F9AE02.roa
File: 6E00E83A370811ECA61C8B38C4F9AE02.roa (raw, json)
Hash identifier: Hxzat+D6oMjXHYIaaFYPk5JUvrQcN61u2or2LMty6LM=
Subject key identifier: 15:29:55:6A:8A:89:7D:7A:EF:2B:12:D4:38:B7:15:41:66:C1:E0:CA
Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial: 02E2
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/6E00E83A370811ECA61C8B38C4F9AE02.roa
Signing time: Sat 27 Nov 2021 00:59:06 +0000
ROA not before: Sat 27 Nov 2021 00:59:06 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 12679
IP address blocks: 103.157.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Validity
Not Before: Nov 27 00:59:06 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a182da-94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:fb:11:ea:9b:cb:05:75:6f:ba:e9:0a:f4:
d7:e6:03:da:da:96:67:e2:cb:01:2e:4d:ae:d9:c6:
52:3b:70:eb:32:18:9c:0a:79:04:ec:95:dd:ec:98:
ae:a5:d8:32:02:2b:12:9c:60:ef:ab:a0:61:75:c8:
c7:0b:7d:9b:11:fc:5d:8e:25:be:1a:be:5a:4c:10:
a5:31:ce:68:50:4d:03:9b:d5:5b:78:bb:03:48:41:
76:58:69:d1:c0:2b:7b:6e:49:1c:16:1d:ec:dd:ed:
6f:33:c3:f8:28:c7:73:86:0e:d6:7c:2f:34:97:27:
1b:80:1b:7d:d7:23:50:c6:d8:4a:0a:10:63:6a:61:
cd:4f:32:68:54:89:74:b0:2a:24:a8:de:82:b1:ea:
a3:10:af:63:ad:2e:20:80:58:b7:41:03:6c:f5:96:
ca:40:7f:d4:18:9f:16:fb:ea:9a:67:38:ba:90:d4:
18:03:79:75:c3:85:0d:06:39:5a:f3:bd:67:00:21:
81:91:6a:6a:0d:27:39:94:65:c3:d1:80:0c:93:25:
d8:c6:ef:4a:09:7a:68:d7:ac:f9:b9:50:48:ff:7b:
eb:e9:45:66:88:34:47:e0:4b:39:11:7c:68:02:e4:
28:14:a0:aa:12:49:1c:6c:dd:12:b9:94:0c:d1:66:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:55:6A:8A:89:7D:7A:EF:2B:12:D4:38:B7:15:41:66:C1:E0:CA
X509v3 Authority Key Identifier:
keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/6E00E83A370811ECA61C8B38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.138.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:6d:be:fa:bf:b9:c0:1b:1b:3e:ce:51:0d:41:57:6a:bc:2a:
72:66:f5:f9:a7:a5:43:6f:7e:02:4f:e3:ab:84:17:ed:76:0e:
f4:81:5b:e4:14:00:5c:a4:0b:5b:a3:4f:dd:dc:87:4b:7f:c6:
14:99:10:23:b0:f9:b1:de:e8:e3:87:11:dc:ce:2f:42:fd:a8:
9a:72:d7:f2:4c:72:fa:4a:42:80:cc:08:be:e6:38:bd:0b:62:
8b:08:ef:2b:10:be:80:82:75:fe:3d:12:fe:f6:92:a8:d8:a9:
b3:07:fd:be:7b:15:3c:f6:60:41:0d:13:c1:91:d5:da:e3:28:
28:23:84:e0:10:bd:b4:ab:15:2f:22:55:4b:e6:eb:77:d7:4c:
cc:29:05:15:a2:06:0e:1b:33:82:a8:99:ca:79:dd:89:aa:54:
19:ff:44:a2:e7:6c:39:f6:e7:b1:8d:8c:cf:04:0c:c3:64:8a:
3c:be:92:23:7a:37:6b:e6:d8:42:3e:05:f0:f8:63:0e:a1:f7:
48:26:53:fc:cf:4a:23:34:03:4d:6a:7b:2c:a0:9d:ac:51:53:
36:73:52:ee:94:07:5a:b7:92:28:e1:4b:ce:1c:5f:c7:ca:55:
f7:58:b3:1d:a8:95:2c:28:db:1f:55:34:c9:29:57:17:46:a2:
68:91:e3:eb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY3OUYxMTAvBgNVBAUTKDM3MkUzQUYwODhEQjM3NUE4RkY5MTk4NThCMkRDQzVD
N0ZDNEE1RTgwHhcNMjExMTI3MDA1OTA2WhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWExODJkYS05NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjj7EeqbywV1b7rpCvTX5gPa2pZn4ssBLk2u2cZSO3DrMhicCnkE7JXd7Jiu
pdgyAisSnGDvq6BhdcjHC32bEfxdjiW+Gr5aTBClMc5oUE0Dm9VbeLsDSEF2WGnR
wCt7bkkcFh3s3e1vM8P4KMdzhg7WfC80lycbgBt91yNQxthKChBjamHNTzJoVIl0
sCokqN6CseqjEK9jrS4ggFi3QQNs9ZbKQH/UGJ8W++qaZzi6kNQYA3l1w4UNBjla
871nACGBkWpqDSc5lGXD0YAMkyXYxu9KCXpo16z5uVBI/3vr6UVmiDRH4Es5EXxo
AuQoFKCqEkkcbN0SuZQM0WbTwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBUpVWqK
iX167ysS1Di3FUFmweDKMB8GA1UdIwQYMBaAFDcuOvCI2zdaj/kZhYstzFx/xKXo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjc5Ri9BMTUyNUY2QzJG
OTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4xcVAtUm1GaXkzTVhIX0Vw
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055NDY4SWpiTjFxUC1SbUZpeTNNWEhfRXBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY3OUYvQTE1MjVGNkMyRjkyMTFFQkIzRUJBRjI5QzRGOUFFMDIvNkUwMEU4M0Ez
NzA4MTFFQ0E2MUM4QjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnYowDQYJKoZIhvcNAQELBQADggEBANBtvvq/ucAbGz7O
UQ1BV2q8KnJm9fmnpUNvfgJP46uEF+12DvSBW+QUAFykC1ujT93ch0t/xhSZECOw
+bHe6OOHEdzOL0L9qJpy1/JMcvpKQoDMCL7mOL0LYosI7ysQvoCCdf49Ev72kqjY
qbMH/b57FTz2YEENE8GR1drjKCgjhOAQvbSrFS8iVUvm63fXTMwpBRWiBg4bM4Ko
mcp53YmqVBn/RKLnbDn257GNjM8EDMNkijy+kiN6N2vm2EI+BfD4Yw6h90gmU/zP
SiM0A01qeyygnaxRUzZzUu6UB1q3kijhS84cX8fKVfdYsx2olSwo2x9VNMkpVxdG
omiR4+s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org