Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DC29098EA2A311EDA901AC7AC4F9AE02.roa
File: DC29098EA2A311EDA901AC7AC4F9AE02.roa (raw, json)
Hash identifier: Gb7rA0mIPQTpsIDz6G0yEF8I5pkZ9z+dHWl3W/SpcL0=
Subject key identifier: C6:1B:2A:98:59:DA:2B:90:07:4B:61:4E:1A:8E:82:A7:40:B3:D9:60
Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial: 09DD
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DC29098EA2A311EDA901AC7AC4F9AE02.roa
Signing time: Thu 02 Feb 2023 02:46:58 +0000
ROA not before: Thu 02 Feb 2023 02:46:58 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 14618
IP address blocks: 103.142.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Validity
Not Before: Feb 2 02:46:58 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63db2421-b1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:17:60:eb:f1:a7:c0:41:48:02:5d:7e:70:
dd:51:62:c3:f3:f2:6c:f0:75:54:2e:4c:fb:49:8a:
4e:b3:ae:da:b1:e1:a1:e1:b8:d9:78:3b:d7:78:03:
48:38:0a:91:11:d8:09:3f:30:e6:83:2e:b6:79:f9:
e8:de:49:be:a3:24:7c:46:e7:07:54:78:64:b5:52:
f5:8b:38:c1:86:c0:45:33:61:e9:77:58:5a:85:84:
35:25:57:26:de:17:50:4a:c1:53:ce:97:4f:4e:58:
66:fd:b7:a8:9a:d3:b8:28:fc:b3:18:05:38:24:4d:
a8:88:30:0d:b3:2d:cc:5f:20:45:8c:8e:1f:8b:fb:
72:1d:26:5f:a1:57:37:16:41:69:75:28:28:46:74:
ee:1c:90:a1:e0:25:eb:19:48:e8:f6:79:39:80:5c:
40:2c:c6:3f:9e:66:bb:33:01:52:c3:2b:4f:4e:69:
78:01:e1:66:e3:ed:7c:68:48:e6:23:26:97:a5:d8:
21:64:88:da:b9:4a:e6:2e:92:71:37:50:e5:9e:2f:
bf:8b:79:d8:4e:25:c4:b3:4c:9b:22:a9:ea:28:60:
ae:4d:3a:51:91:25:67:b4:49:fb:ef:7d:32:f6:de:
23:12:8c:62:1f:03:4e:40:15:bc:fc:1c:a4:4d:39:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:2A:98:59:DA:2B:90:07:4B:61:4E:1A:8E:82:A7:40:B3:D9:60
X509v3 Authority Key Identifier:
keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DC29098EA2A311EDA901AC7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.68.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ed:04:35:a5:5f:94:0a:1e:eb:a6:07:2e:1c:38:b2:73:36:
75:e0:84:cb:82:cf:13:2c:74:58:6c:6a:5b:a7:0d:a9:a4:fd:
53:29:92:43:2d:5d:9a:be:ac:d0:85:22:b1:c9:88:0f:21:b9:
5f:14:ff:af:0a:58:9f:1c:2e:90:3e:59:5e:67:82:f0:41:47:
2f:aa:a7:0c:63:18:6c:73:80:bb:94:ef:d9:7c:9d:9f:f0:c2:
93:b3:38:ab:78:73:74:f6:e3:0b:16:98:97:ca:85:bd:d2:f8:
32:a6:16:83:f9:05:8b:45:79:e8:3e:5b:f0:85:6a:d9:50:33:
46:60:c3:8a:06:04:29:93:e4:c7:5d:88:cf:3e:b5:83:4e:d9:
0b:7c:18:e4:41:51:7b:62:e0:2e:00:a5:69:67:a5:4b:c8:ec:
61:b9:dd:43:c2:30:91:84:ec:c3:ee:d9:30:f7:0b:13:e6:04:
e7:3c:e1:a5:48:0a:11:89:cb:b9:44:8a:1f:5c:ab:d4:fe:7e:
fd:c6:e8:ca:22:c8:2c:a1:7b:e4:58:05:e0:b8:19:6a:ee:47:
92:1a:66:48:19:fd:27:b5:42:73:cc:ed:77:53:fd:02:da:2d:
db:24:9b:84:c5:95:18:b5:0d:38:77:87:c9:f2:60:ad:17:b9:
f6:93:57:2c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy
Q0NBQkU5M0EwHhcNMjMwMjAyMDI0NjU4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2RiMjQyMS1iMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDEXYOvxp8BBSAJdfnDdUWLD8/Js8HVULkz7SYpOs67aseGh4bjZeDvXeANI
OAqREdgJPzDmgy62efno3km+oyR8RucHVHhktVL1izjBhsBFM2Hpd1hahYQ1JVcm
3hdQSsFTzpdPTlhm/beomtO4KPyzGAU4JE2oiDANsy3MXyBFjI4fi/tyHSZfoVc3
FkFpdSgoRnTuHJCh4CXrGUjo9nk5gFxALMY/nma7MwFSwytPTml4AeFm4+18aEjm
IyaXpdghZIjauUrmLpJxN1Dlni+/i3nYTiXEs0ybIqnqKGCuTTpRkSVntEn7730y
9t4jEoxiHwNOQBW8/BykTTldZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMYbKphZ
2iuQB0thThqOgqdAs9lgMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4
QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURGMTIvQ0ZBNTI1OUEyOEMwMTFFQUFBRTI0RTQ4QzRGOUFFMDIvREMyOTA5OEVB
MkEzMTFFREE5MDFBQzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjkQwDQYJKoZIhvcNAQELBQADggEBABPtBDWlX5QKHuum
By4cOLJzNnXghMuCzxMsdFhsalunDamk/VMpkkMtXZq+rNCFIrHJiA8huV8U/68K
WJ8cLpA+WV5ngvBBRy+qpwxjGGxzgLuU79l8nZ/wwpOzOKt4c3T24wsWmJfKhb3S
+DKmFoP5BYtFeeg+W/CFatlQM0Zgw4oGBCmT5MddiM8+tYNO2Qt8GORBUXti4C4A
pWlnpUvI7GG53UPCMJGE7MPu2TD3CxPmBOc84aVIChGJy7lEih9cq9T+fv3G6Moi
yCyhe+RYBeC4GWruR5IaZkgZ/Se1QnPM7XdT/QLaLdskm4TFlRi1DTh3h8nyYK0X
ufaTVyw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org