Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
File: C7965A0AC4AC11ED98F4D369C4F9AE02.roa (raw, json)
Hash identifier: BnHvEPzvq/FyKuUNEVelyd+oaI7bS7vDHqCxjIa6IxQ=
Subject key identifier: A4:18:C5:C4:5D:E2:45:EB:43:6B:86:FB:97:57:A5:3A:64:55:30:33
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 3F
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
Signing time: Fri 17 Mar 2023 10:16:28 +0000
ROA not before: Fri 17 Mar 2023 10:16:28 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.252.189.0/24 maxlen: 24
103.3.224.0/22 maxlen: 22
103.221.233.0/24 maxlen: 24
103.241.52.0/22 maxlen: 22
160.20.8.0/22 maxlen: 23
202.94.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Mar 17 10:16:28 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64143dfc-74ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:4f:52:7a:f7:7f:35:e2:ef:d1:51:d7:78:
93:e6:40:25:33:44:40:3c:40:9b:72:f8:0d:1d:32:
d8:6f:4f:36:fe:bd:ea:99:a7:11:68:16:f2:51:35:
22:14:f0:dd:e1:98:1e:e2:9d:63:3e:12:d7:4f:27:
21:b5:6e:47:e5:b8:9d:41:21:67:2a:ce:ab:fb:83:
f3:76:ad:85:ce:e2:51:31:04:f8:0c:f3:2f:07:54:
26:32:3f:a3:a5:78:04:53:a1:bb:33:0f:7a:f4:93:
9f:34:a0:eb:38:15:5f:4e:5f:7e:ac:81:fd:fe:ae:
e0:b6:54:2e:0a:78:3a:45:83:59:d5:33:bc:58:37:
dd:1a:f8:92:a8:81:a6:2e:f3:63:2a:9c:05:22:89:
92:bd:f3:2d:0e:4e:13:7d:af:c0:91:80:53:87:10:
a4:03:b2:0e:b0:c7:de:73:11:20:6c:1e:d8:58:d3:
f1:75:4c:8b:e5:ee:6f:22:1a:f1:5a:0b:2e:92:a0:
9e:e1:23:26:ae:d8:1b:1c:b4:46:aa:c4:80:26:51:
36:c9:b4:29:49:b1:b3:62:5f:51:45:0c:8f:fa:5c:
2f:d4:77:78:02:de:4f:3c:e7:e6:1e:50:54:96:04:
f6:18:94:66:d7:03:29:4a:03:06:d2:68:18:bc:6e:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:C5:C4:5D:E2:45:EB:43:6B:86:FB:97:57:A5:3A:64:55:30:33
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.189.0/24
103.3.224.0/22
103.221.233.0/24
103.241.52.0/22
160.20.8.0/22
202.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
37:04:b5:69:19:b6:b3:a1:a5:f1:fb:08:a4:9a:93:75:61:40:
1c:e0:01:49:a2:c5:28:ee:45:83:15:b7:61:06:a3:db:3e:dd:
bd:c4:0b:78:33:7c:92:10:a3:99:f9:9a:e9:7f:93:3d:92:68:
3e:20:86:31:0d:84:7e:54:0c:44:27:a0:96:57:b1:a5:1b:c3:
d0:df:66:ae:dc:ca:20:d0:5c:d6:dc:57:30:e2:62:ac:d0:2c:
ae:29:0a:e3:cc:70:e4:46:fa:92:5d:c6:cc:6e:29:7f:75:f4:
60:0f:40:0b:89:6b:21:82:ba:21:a4:bd:b9:6a:2a:be:20:0d:
f0:c0:cd:cb:8f:61:e8:d3:0a:a8:23:46:c7:ed:38:5a:f0:2a:
38:73:11:c4:30:cb:9a:e5:6c:a8:f4:0f:81:c0:d8:a8:5c:9c:
a6:cb:6f:65:41:47:71:22:9b:cc:15:87:1a:aa:3b:24:30:17:
b3:19:36:28:bb:c6:f0:b5:b6:a8:0b:99:60:ec:7d:1b:b3:af:
05:28:18:49:e2:96:aa:d7:99:a1:df:da:dc:2b:f6:8d:52:ee:
93:d0:4c:70:7a:f8:36:a1:f2:03:14:11:ca:4b:44:24:83:ab:
31:3e:94:af:57:6a:33:42:70:a9:9c:be:e2:56:86:81:a3:d5:
91:7f:92:1e
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjU4NzExMC8GA1UEBRMoMkQ2MzQwNzdDQzg0N0I1OUQ0MDQ4RDQzRTA0QjMzMDk2
OThGRTYzODAeFw0yMzAzMTcxMDE2MjhaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0MTQzZGZjLTc0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzZk9Sevd/NeLv0VHXeJPmQCUzREA8QJty+A0dMthvTzb+veqZpxFoFvJRNSIU
8N3hmB7inWM+EtdPJyG1bkfluJ1BIWcqzqv7g/N2rYXO4lExBPgM8y8HVCYyP6Ol
eARTobszD3r0k580oOs4FV9OX36sgf3+ruC2VC4KeDpFg1nVM7xYN90a+JKogaYu
82MqnAUiiZK98y0OThN9r8CRgFOHEKQDsg6wx95zESBsHthY0/F1TIvl7m8iGvFa
Cy6SoJ7hIyau2BsctEaqxIAmUTbJtClJsbNiX1FFDI/6XC/Ud3gC3k885+YeUFSW
BPYYlGbXAylKAwbSaBi8bs5/AgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUpBjFxF3i
RetDa4b7l1elOmRVMDMwHwYDVR0jBBgwFoAULWNAd8yEe1nUBI1D4EszCWmP5jgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NTg3LzQxN0Q3MUI0OTE4
NjExRURBODRBMTI0REM0RjlBRTAyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVq
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTFdOQWQ4eUVlMW5VQkkxRDRFc3pDV21QNWpnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9DNzk2NUEwQUM0
QUMxMUVEOThGNEQzNjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAEwJAMEAC38vQMEAmcD4AMEAGfd6QMEAmfxNAMEAqAUCAMEAMperjAN
BgkqhkiG9w0BAQsFAAOCAQEANwS1aRm2s6Gl8fsIpJqTdWFAHOABSaLFKO5FgxW3
YQaj2z7dvcQLeDN8khCjmfma6X+TPZJoPiCGMQ2EflQMRCegllexpRvD0N9mrtzK
INBc1txXMOJirNAsrikK48xw5Eb6kl3GzG4pf3X0YA9AC4lrIYK6IaS9uWoqviAN
8MDNy49h6NMKqCNGx+04WvAqOHMRxDDLmuVsqPQPgcDYqFycpstvZUFHcSKbzBWH
Gqo7JDAXsxk2KLvG8LW2qAuZYOx9G7OvBSgYSeKWqteZod/a3Cv2jVLuk9BMcHr4
NqHyAxQRyktEJIOrMT6Ur1dqM0JwqZy+4laGgaPVkX+SHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org