Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6E14C81443B611EB9FB8597CC4F9AE02.roa
File: 6E14C81443B611EB9FB8597CC4F9AE02.roa (raw, json)
Hash identifier: CHO6Qdqj5d4bG2nhJH08nZ86b1ayY080P57Bta2FTTU=
Subject key identifier: DE:5A:88:42:A6:07:5A:FA:F4:2C:F8:88:D9:23:E0:06:E9:AE:BA:B3
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 30EF
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6E14C81443B611EB9FB8597CC4F9AE02.roa
Signing time: Mon 31 Jan 2022 14:40:26 +0000
ROA not before: Mon 31 Jan 2022 14:40:25 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 136969
IP address blocks: 202.142.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12527 (0x30ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 31 14:40:25 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61f7f4d9-c8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:a5:cb:37:0d:7c:10:95:50:6e:3d:a3:b7:
31:53:10:83:15:e2:2b:62:ee:d6:ad:98:9d:57:ba:
be:e0:6d:2b:9f:02:11:2c:67:ae:ee:58:02:6e:b4:
3b:ce:44:25:33:d9:ea:4e:ad:b7:27:a1:e5:fe:0a:
68:4c:96:0b:bd:d5:47:7d:7f:f5:cd:9c:45:16:d3:
75:5a:fd:29:f1:c4:98:aa:76:c8:ec:57:f8:87:02:
72:34:53:c1:94:19:c7:2b:47:2d:12:b5:3a:d5:64:
4e:6b:da:4e:2f:e0:e8:e6:3d:e8:6f:4e:0b:4d:95:
9b:17:42:9c:5d:d5:cd:31:51:fe:13:a2:fc:80:44:
62:04:e1:bf:de:ab:b1:58:58:4b:48:42:71:c7:0b:
35:c3:af:de:9a:35:c6:99:99:ed:fb:e2:00:64:04:
56:5c:d8:ca:8f:1b:3f:33:11:27:46:80:37:e4:2f:
3d:1a:0a:a3:c3:ee:d5:11:1f:1c:1d:10:13:ce:be:
f8:c8:d9:c6:ee:be:be:83:fc:9f:4a:30:c7:51:ff:
7c:3a:27:23:a7:ec:d1:b2:96:53:af:dc:f5:b3:b5:
69:0e:c3:a8:68:72:e7:93:fc:52:5a:3b:74:ef:d1:
dd:96:ff:5c:f8:e2:4d:45:d2:5a:fb:8a:55:4d:43:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:88:42:A6:07:5A:FA:F4:2C:F8:88:D9:23:E0:06:E9:AE:BA:B3
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/6E14C81443B611EB9FB8597CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b6:c5:fb:77:22:87:5f:69:a2:7e:ab:6a:46:a6:fe:46:6c:
f6:e6:64:8c:4b:3a:5c:b8:a0:8b:c7:8a:cb:48:5b:c6:cd:ac:
28:18:21:f2:04:30:07:89:c0:f0:53:bf:ea:56:4c:03:1f:91:
52:b6:d0:3a:d7:08:5b:1b:75:2e:c4:cf:9c:0f:76:7e:1e:c9:
a4:ca:35:a0:b5:cc:85:8c:c2:3a:f5:11:f8:75:19:78:47:ff:
11:ed:b4:8f:82:e2:8f:2e:0c:6b:54:ab:6c:74:10:4d:e2:dd:
54:80:68:33:f0:d2:fa:d8:b7:20:7d:70:38:35:59:48:0e:6c:
e6:96:b4:5a:9b:86:67:95:a9:9f:77:b8:d0:8b:8a:f2:56:69:
4c:89:8b:2f:b2:50:5f:d9:92:32:ff:29:35:2e:f9:e7:6e:94:
c8:4c:e3:ee:a7:fa:f8:4d:f7:e5:e8:1c:41:05:bd:a2:d8:d5:
b5:af:bd:ef:05:8d:27:9d:7f:cb:bd:09:df:29:4b:dd:bb:b6:
d5:f6:af:0f:50:86:bf:16:4f:8d:24:31:bc:14:d2:73:a1:f0:
1e:b2:ca:33:8d:6b:10:d6:13:bb:12:2c:0e:96:1d:25:40:05:
ea:36:ee:b1:3c:bc:ca:12:f4:e6:4f:ac:e3:4d:a5:c7:16:f3:
8d:d0:8e:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjIwMTMxMTQ0MDI1WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWY3ZjRkOS1jOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRGlyzcNfBCVUG49o7cxUxCDFeIrYu7WrZidV7q+4G0rnwIRLGeu7lgCbrQ7
zkQlM9nqTq23J6Hl/gpoTJYLvdVHfX/1zZxFFtN1Wv0p8cSYqnbI7Ff4hwJyNFPB
lBnHK0ctErU61WROa9pOL+Do5j3ob04LTZWbF0KcXdXNMVH+E6L8gERiBOG/3qux
WFhLSEJxxws1w6/emjXGmZnt++IAZARWXNjKjxs/MxEnRoA35C89Ggqjw+7VER8c
HRATzr74yNnG7r6+g/yfSjDHUf98Oicjp+zRspZTr9z1s7VpDsOoaHLnk/xSWjt0
79Hdlv9c+OJNRdJa+4pVTUOWmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN5aiEKm
B1r69Cz4iNkj4AbprrqzMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNkUxNEM4MTQ0
M0I2MTFFQjlGQjg1OTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKjpswDQYJKoZIhvcNAQELBQADggEBALG2xft3IodfaaJ+
q2pGpv5GbPbmZIxLOly4oIvHistIW8bNrCgYIfIEMAeJwPBTv+pWTAMfkVK20DrX
CFsbdS7Ez5wPdn4eyaTKNaC1zIWMwjr1Efh1GXhH/xHttI+C4o8uDGtUq2x0EE3i
3VSAaDPw0vrYtyB9cDg1WUgObOaWtFqbhmeVqZ93uNCLivJWaUyJiy+yUF/ZkjL/
KTUu+edulMhM4+6n+vhN9+XoHEEFvaLY1bWvve8FjSedf8u9Cd8pS927ttX2rw9Q
hr8WT40kMbwU0nOh8B6yyjONaxDWE7sSLA6WHSVABeo27rE8vMoS9OZPrONNpccW
843Qjg0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org