Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
File: C9941972BFD111ECA4347934C4F9AE02.roa (raw, json)
Hash identifier: zmhhbUDMzs575lu0FjdhMpG1lKw5ABrnfim6US2Dg+s=
Subject key identifier: 0F:78:1D:84:0B:64:D7:A3:94:00:4B:77:01:24:A5:2A:AF:E0:E8:CC
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: E5
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
Signing time: Tue 19 Apr 2022 11:13:50 +0000
ROA not before: Tue 19 Apr 2022 11:13:50 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 134382
IP address blocks: 103.178.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Validity
Not Before: Apr 19 11:13:50 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=625e996d-3eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:3d:ba:3a:f5:5a:82:36:4a:4d:24:c3:10:
cd:cd:cb:dc:b9:ec:0c:e1:c2:bc:db:19:2b:ac:e9:
b2:61:4a:da:94:1b:0c:8d:95:59:f3:bf:04:30:2f:
60:79:6b:51:15:35:bf:c3:77:bd:13:6e:8d:cb:0e:
4c:d7:55:b7:6f:31:6d:30:74:62:7c:4a:19:9e:32:
b0:77:0c:76:dc:0a:bf:6d:64:c3:85:95:91:a2:25:
81:3f:03:e4:99:4b:cd:04:e4:fe:d4:1e:0b:b1:a0:
a5:b2:2c:f4:08:74:44:a4:61:ef:9c:f5:99:76:31:
3c:4a:4e:a7:e8:82:6b:fb:e8:bf:f4:1b:a1:f5:aa:
d2:a5:a5:e4:31:b4:a1:30:76:f1:5c:34:88:47:eb:
af:85:6d:21:d1:53:39:f7:95:2a:7b:cf:96:06:b0:
ed:f8:5f:ff:19:fe:29:cb:f1:d6:87:96:10:87:c4:
a9:92:09:20:cb:5d:e9:69:38:0d:50:6e:67:44:e5:
b7:fd:99:66:50:08:66:65:54:e8:d4:fa:da:2f:c5:
6b:36:df:b9:0c:0d:fb:df:f1:8b:38:44:c6:06:b5:
07:34:72:c1:d3:ca:be:3e:7e:29:e8:0b:bd:75:31:
ac:20:b8:83:06:a7:10:3f:03:2e:22:ad:78:7a:0f:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:1D:84:0B:64:D7:A3:94:00:4B:77:01:24:A5:2A:AF:E0:E8:CC
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fd:01:15:e0:95:17:af:e0:21:2c:b2:52:8c:2b:dd:79:41:
af:d8:7a:69:a1:58:f3:49:d3:98:23:75:86:5c:17:3f:52:09:
5c:96:1e:56:27:c2:9d:dd:01:82:27:ff:91:fb:7c:a0:b6:55:
7c:5b:78:59:e5:12:81:19:f3:fe:26:7a:72:80:31:17:60:fe:
3d:bf:1b:bb:20:6c:23:1f:cd:ca:27:be:29:2a:24:1c:54:48:
ed:6d:c9:e9:34:fa:c2:d0:5e:2c:18:b4:9d:01:0c:49:73:66:
f0:26:52:17:f7:16:5d:e8:1a:15:c2:29:4f:cc:e6:1e:b0:00:
1b:26:56:9d:83:cc:8f:ea:f4:b0:46:80:11:fc:d3:83:54:05:
f9:05:34:e2:dd:d6:b2:c0:8d:55:59:38:f1:81:3c:10:09:1a:
ad:52:6e:60:9d:da:eb:c4:cd:77:34:4b:24:88:84:75:65:7a:
25:d0:7d:72:2d:e7:f3:a8:0b:9d:d4:82:69:50:18:ae:ea:10:
50:49:da:27:36:7f:2e:65:71:b0:6d:83:7f:54:63:37:41:48:
2d:5c:c5:4d:10:11:d2:fb:79:52:cb:ee:7a:06:dd:63:9b:a5:
00:26:8c:c4:bc:48:50:4e:53:26:91:70:e2:07:70:e2:86:01:
ee:72:e5:79
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5
QzIyMTk3RTMwHhcNMjIwNDE5MTExMzUwWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjVlOTk2ZC0zZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ng9ujr1WoI2Sk0kwxDNzcvcuewM4cK82xkrrOmyYUralBsMjZVZ878EMC9g
eWtRFTW/w3e9E26Nyw5M11W3bzFtMHRifEoZnjKwdwx23Aq/bWTDhZWRoiWBPwPk
mUvNBOT+1B4LsaClsiz0CHREpGHvnPWZdjE8Sk6n6IJr++i/9Buh9arSpaXkMbSh
MHbxXDSIR+uvhW0h0VM595Uqe8+WBrDt+F//Gf4py/HWh5YQh8Spkgkgy13paTgN
UG5nROW3/ZlmUAhmZVTo1PraL8VrNt+5DA373/GLOETGBrUHNHLB08q+Pn4p6Au9
dTGsILiDBqcQPwMuIq14eg9FeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA94HYQL
ZNejlABLdwEkpSqv4OjMMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5
NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjcyRDkvQUEyM0ZBOTY2OTcxMTFFQ0I2MjU5MzBDQzRGOUFFMDIvQzk5NDE5NzJC
RkQxMTFFQ0E0MzQ3OTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnst0wDQYJKoZIhvcNAQELBQADggEBAHv9ARXglRev4CEs
slKMK915Qa/YemmhWPNJ05gjdYZcFz9SCVyWHlYnwp3dAYIn/5H7fKC2VXxbeFnl
EoEZ8/4menKAMRdg/j2/G7sgbCMfzconvikqJBxUSO1tyek0+sLQXiwYtJ0BDElz
ZvAmUhf3Fl3oGhXCKU/M5h6wABsmVp2DzI/q9LBGgBH804NUBfkFNOLd1rLAjVVZ
OPGBPBAJGq1SbmCd2uvEzXc0SySIhHVleiXQfXIt5/OoC53UgmlQGK7qEFBJ2ic2
fy5lcbBtg39UYzdBSC1cxU0QEdL7eVLL7noG3WObpQAmjMS8SFBOUyaRcOIHcOKG
Ae5y5Xk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org