Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EB7013F63D5F11ECACCA1778C4F9AE02.roa
File: EB7013F63D5F11ECACCA1778C4F9AE02.roa (raw, json)
Hash identifier: /v19AEqMvCDRrVlAZc0W4QPiXVJdlaoUE79xA0PgEQ0=
Subject key identifier: 96:AA:EA:F3:CA:58:76:6E:C3:E1:FE:0A:8C:8C:3F:81:A0:C4:C6:0F
Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial: ED
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EB7013F63D5F11ECACCA1778C4F9AE02.roa
Signing time: Thu 04 Nov 2021 11:11:13 +0000
ROA not before: Thu 04 Nov 2021 11:11:13 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 148993
IP address blocks: 103.169.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Validity
Not Before: Nov 4 11:11:13 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6183bfd0-6eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:d8:a4:82:ab:b4:31:f7:ea:6e:cd:ab:10:
e3:ca:e0:a6:77:c0:28:88:fe:d6:bb:ac:07:c2:e0:
2f:85:ec:68:ec:b1:0d:64:cb:9c:5c:a8:2b:09:60:
d1:e5:be:5d:10:ad:88:74:bd:48:6c:38:5b:79:76:
cf:11:8b:ff:51:b0:f3:d1:8d:24:bf:ea:59:7c:88:
01:63:7c:3f:35:51:f5:4c:be:b2:5b:3a:76:1d:20:
7f:63:11:c1:62:12:c5:f5:4a:a4:32:34:6f:54:1f:
81:59:ad:58:36:00:81:a1:33:d5:b1:4d:06:5f:88:
67:8a:02:7f:65:08:ee:00:f3:c2:a5:c5:c6:85:3c:
e1:67:87:5a:b8:4b:5f:5b:9d:20:30:9e:9e:dd:27:
61:e6:dd:8e:d5:d1:66:70:e6:e6:f4:eb:2e:b7:23:
3b:29:41:88:03:26:f4:d9:c5:01:94:ba:1b:a5:02:
8c:30:55:a2:e1:41:05:4c:51:8f:83:26:81:2e:f0:
cf:41:74:bf:00:93:82:bb:7f:63:ce:ce:4c:42:df:
46:a2:78:a4:63:7d:2a:d7:fe:71:0b:1e:53:4b:66:
47:1e:b6:b7:13:ac:41:79:79:00:95:44:3d:9a:b4:
22:03:3e:f3:82:71:85:78:43:ac:c8:14:00:e8:af:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AA:EA:F3:CA:58:76:6E:C3:E1:FE:0A:8C:8C:3F:81:A0:C4:C6:0F
X509v3 Authority Key Identifier:
keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EB7013F63D5F11ECACCA1778C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.160.0/24
Signature Algorithm: sha256WithRSAEncryption
76:63:d5:e3:e1:b8:c5:9e:22:9f:0c:93:c7:ed:fa:b4:c6:5c:
08:e3:72:3e:cd:1a:82:42:c0:83:4f:5b:88:f8:c3:be:8f:c0:
78:ed:dc:d9:06:71:8f:90:94:00:6c:84:67:92:46:4f:cc:82:
bd:cf:6c:2f:0d:24:5a:52:57:79:6e:14:27:45:09:bf:12:cb:
54:6c:33:87:ab:aa:6c:b6:84:b3:e9:dc:53:4a:1a:fd:60:61:
ab:8c:19:03:c7:f8:ed:ca:5b:5c:f4:a9:6a:17:5c:db:30:66:
6f:b5:b3:b3:9d:fb:5e:23:41:2b:a0:1c:2b:bd:83:1d:ab:6e:
a7:1b:f8:f9:b6:87:6f:56:2e:5b:d1:cd:fe:87:85:b6:5d:b0:
1a:81:1d:d3:8e:7d:4d:33:86:e4:d9:e1:be:48:86:87:9f:31:
69:da:3d:54:0c:b3:6f:ea:f8:17:c1:b1:45:3c:04:aa:e5:1e:
2c:ac:ac:53:58:2d:78:8e:62:39:16:41:60:5c:2a:74:b5:d2:
23:fc:60:d8:a3:85:ac:06:80:b8:17:96:fd:1a:3e:ca:2b:98:
68:34:9a:44:29:8a:4d:38:f0:9f:f0:4e:91:f0:ac:9a:d9:ce:
2d:dd:4b:94:fe:b7:c0:1d:72:85:76:70:63:e6:60:8c:3a:8c:
b6:e9:4d:5c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx
QzBDNUQ1QUMwHhcNMjExMTA0MTExMTEzWhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTgzYmZkMC02ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwD/YpIKrtDH36m7NqxDjyuCmd8AoiP7Wu6wHwuAvhexo7LENZMucXKgrCWDR
5b5dEK2IdL1IbDhbeXbPEYv/UbDz0Y0kv+pZfIgBY3w/NVH1TL6yWzp2HSB/YxHB
YhLF9UqkMjRvVB+BWa1YNgCBoTPVsU0GX4hnigJ/ZQjuAPPCpcXGhTzhZ4dauEtf
W50gMJ6e3Sdh5t2O1dFmcObm9OsutyM7KUGIAyb02cUBlLobpQKMMFWi4UEFTFGP
gyaBLvDPQXS/AJOCu39jzs5MQt9GonikY30q1/5xCx5TS2ZHHra3E6xBeXkAlUQ9
mrQiAz7zgnGFeEOsyBQA6K/adwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJaq6vPK
WHZuw+H+CoyMP4GgxMYPMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF
RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAwNUMvN0MwMUMxMkVERUU0MTFFQjgyODYyODNCQzRGOUFFMDIvRUI3MDEzRjYz
RDVGMTFFQ0FDQ0ExNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnqaAwDQYJKoZIhvcNAQELBQADggEBAHZj1ePhuMWeIp8M
k8ft+rTGXAjjcj7NGoJCwINPW4j4w76PwHjt3NkGcY+QlABshGeSRk/Mgr3PbC8N
JFpSV3luFCdFCb8Sy1RsM4erqmy2hLPp3FNKGv1gYauMGQPH+O3KW1z0qWoXXNsw
Zm+1s7Od+14jQSugHCu9gx2rbqcb+Pm2h29WLlvRzf6HhbZdsBqBHdOOfU0zhuTZ
4b5IhoefMWnaPVQMs2/q+BfBsUU8BKrlHiysrFNYLXiOYjkWQWBcKnS10iP8YNij
hawGgLgXlv0aPsormGg0mkQpik048J/wTpHwrJrZzi3dS5T+t8AdcoV2cGPmYIw6
jLbpTVw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-ams.rpki-client.org