Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/AD5AEBAA546A11EC86268621C4F9AE02.roa
File: AD5AEBAA546A11EC86268621C4F9AE02.roa (raw, json)
Hash identifier: OeqvytIF/DKIKER7OB1+rL9380qLtTwzfeaHPJlYPDs=
Subject key identifier: 43:28:44:D2:34:4B:1D:18:08:F0:4F:00:9C:C5:91:A6:98:04:19:E1
Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Certificate serial: 0A53
Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/AD5AEBAA546A11EC86268621C4F9AE02.roa
Signing time: Thu 02 Mar 2023 20:47:14 +0000
ROA not before: Thu 02 Mar 2023 20:47:14 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 213371
IP address blocks: 103.145.12.0/24 maxlen: 24
103.145.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643 (0xa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Validity
Not Before: Mar 2 20:47:14 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64010b51-155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:cf:2c:96:ca:6f:bf:bc:55:26:54:73:4a:
15:ca:aa:43:d9:c5:80:bd:15:d5:61:1d:6a:30:9f:
a0:46:f6:d0:77:98:4d:a6:30:0c:0f:ef:a3:56:ae:
c2:9a:02:86:cb:f0:5b:15:34:4f:71:48:23:bb:06:
d6:aa:da:a1:75:cf:f0:e4:3d:e4:4e:61:d6:58:f5:
b8:49:b0:85:de:e0:0c:96:de:36:78:6e:96:0e:2b:
91:81:5b:dd:52:49:86:a2:9a:83:a5:1a:6b:b4:12:
10:9f:db:b0:09:d3:c7:6a:bb:a9:b3:90:00:3f:aa:
82:7a:c1:c4:83:12:83:10:25:81:cd:75:26:81:41:
92:6b:f4:0c:ca:4f:6c:5e:90:56:b8:4d:82:c0:23:
1d:b6:40:11:e6:f9:be:92:5e:ce:62:84:b4:6b:58:
53:d7:e3:ff:8b:b8:6f:41:35:e1:b5:08:c1:0d:0f:
59:fe:31:9e:49:7a:ac:82:92:82:40:73:de:3c:38:
0b:48:3a:6c:4a:d3:b0:c0:0c:44:f5:61:a3:13:8c:
97:35:a3:0a:51:08:f9:6e:dd:d2:d2:9c:e6:00:4b:
b5:16:09:36:a0:3d:5f:8a:37:7c:2e:a6:78:9c:e8:
23:60:7c:bf:4d:ea:6f:96:26:a9:5d:3e:36:96:70:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:44:D2:34:4B:1D:18:08:F0:4F:00:9C:C5:91:A6:98:04:19:E1
X509v3 Authority Key Identifier:
keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/AD5AEBAA546A11EC86268621C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.12.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c5:ad:4d:2c:4d:5f:6d:59:7c:08:a2:5c:dd:6d:a9:02:d6:
d0:cb:a2:53:5f:b7:d0:8f:53:e8:a5:ea:4b:b2:e9:06:c6:a4:
62:3f:6d:37:67:06:fd:b3:6c:84:19:80:bb:75:68:ff:ae:b7:
5b:e6:82:56:d9:04:4c:a8:4d:e8:4a:9a:3c:74:a6:29:47:35:
78:4c:d0:a9:ff:d2:2f:0b:06:30:47:af:b3:06:a6:99:c6:d1:
76:19:08:eb:11:90:4a:91:e0:d8:e1:a5:5d:c1:48:75:db:87:
9c:c7:84:70:ee:c5:e5:fa:ac:f6:91:e0:bd:25:ca:93:53:56:
6f:5d:b6:5e:07:64:3e:2c:b0:a7:e3:5c:b8:f4:02:df:15:54:
6a:1f:dd:00:d9:92:d6:64:c4:2b:4e:91:42:c7:5e:7e:20:53:
94:f5:69:b6:6a:2b:39:5c:27:b2:b8:26:ac:d4:9e:de:44:e4:
46:d2:64:94:64:a6:6f:c0:cf:e8:bf:d9:90:e9:37:4f:aa:df:
0e:2c:2e:fc:46:6f:b1:d8:37:20:05:84:77:e3:45:e5:e8:0b:
c5:74:17:fe:a1:88:ae:e3:c8:9a:10:df:2b:03:f9:7f:ed:b7:
33:16:27:9e:f5:ac:89:eb:ff:da:97:aa:6b:94:53:56:20:db:
14:77:d6:62
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE
MjBDMzgwMzkwHhcNMjMwMzAyMjA0NzE0WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDAxMGI1MS0xNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp6TPLJbKb7+8VSZUc0oVyqpD2cWAvRXVYR1qMJ+gRvbQd5hNpjAMD++jVq7C
mgKGy/BbFTRPcUgjuwbWqtqhdc/w5D3kTmHWWPW4SbCF3uAMlt42eG6WDiuRgVvd
UkmGopqDpRprtBIQn9uwCdPHarups5AAP6qCesHEgxKDECWBzXUmgUGSa/QMyk9s
XpBWuE2CwCMdtkAR5vm+kl7OYoS0a1hT1+P/i7hvQTXhtQjBDQ9Z/jGeSXqsgpKC
QHPePDgLSDpsStOwwAxE9WGjE4yXNaMKUQj5bt3S0pzmAEu1Fgk2oD1fijd8LqZ4
nOgjYHy/TepvliapXT42lnCXgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEMoRNI0
Sx0YCPBPAJzFkaaYBBnhMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4
NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY0NjIvREFGNDM1RTAxODQzMTFFQUIwQUYyMDFEQzRGOUFFMDIvQUQ1QUVCQUE1
NDZBMTFFQzg2MjY4NjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkQwwDQYJKoZIhvcNAQELBQADggEBAAjFrU0sTV9tWXwI
olzdbakC1tDLolNft9CPU+il6kuy6QbGpGI/bTdnBv2zbIQZgLt1aP+ut1vmglbZ
BEyoTehKmjx0pilHNXhM0Kn/0i8LBjBHr7MGppnG0XYZCOsRkEqR4NjhpV3BSHXb
h5zHhHDuxeX6rPaR4L0lypNTVm9dtl4HZD4ssKfjXLj0At8VVGof3QDZktZkxCtO
kULHXn4gU5T1abZqKzlcJ7K4JqzUnt5E5EbSZJRkpm/Az+i/2ZDpN0+q3w4sLvxG
b7HYNyAFhHfjReXoC8V0F/6hiK7jyJoQ3ysD+X/ttzMWJ571rInr/9qXqmuUU1Yg
2xR31mI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org