Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D02EDF80CEDE11EC9281BA0CC4F9AE02.roa
File: D02EDF80CEDE11EC9281BA0CC4F9AE02.roa (raw, json)
Hash identifier: FXQDJKYEEKGx42/Ssoco03QJ81DFq54wTAT+irplC6s=
Subject key identifier: 8A:50:7D:28:52:3A:2A:9E:AE:6F:A8:FB:CC:1E:3D:1C:27:6A:1D:77
Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial: 9D
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D02EDF80CEDE11EC9281BA0CC4F9AE02.roa
Signing time: Sun 08 May 2022 14:54:51 +0000
ROA not before: Sun 08 May 2022 14:54:51 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 17828
IP address blocks: 103.127.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Validity
Not Before: May 8 14:54:51 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6277d9bb-abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:75:b6:fe:27:97:2c:b0:44:3a:ad:f6:1e:
80:3e:37:f6:5e:32:ee:64:62:d6:14:71:fd:8b:90:
af:49:5c:be:7f:b3:b1:2f:84:6c:4a:ed:ea:e3:f8:
e7:bb:4b:a1:ba:2e:b7:23:93:57:8d:33:b2:3e:33:
7f:3f:52:20:e0:37:89:bd:ca:64:96:6c:a0:5f:6f:
3b:c4:db:a3:b6:8d:61:ef:76:2e:56:08:c2:c4:8a:
46:0f:a5:25:27:92:b0:32:a5:30:ce:3c:80:56:34:
b8:44:71:69:f0:c2:b5:30:f1:8a:aa:7c:f8:bc:3c:
32:6f:c6:18:ff:b1:25:35:c7:fc:f4:b3:0c:e4:31:
fb:a9:92:e2:6a:41:2e:3e:48:32:56:84:75:39:4d:
75:e8:9a:f3:18:fb:09:14:05:3a:d8:e8:46:8c:53:
ff:a1:44:64:fa:81:93:80:14:7b:f4:9a:e4:d9:9a:
75:29:9c:0f:c1:23:37:5b:2d:35:8e:1a:3e:bc:d8:
79:a7:45:a0:23:d7:76:83:ba:bb:72:a3:c6:96:ef:
09:80:f1:b4:bd:9e:ef:53:7d:a6:6d:2a:22:a7:5c:
b6:10:28:bc:a7:a8:59:46:49:48:f6:53:e8:7b:15:
e4:4f:ac:d5:ec:54:f1:f4:63:a4:75:d5:8b:6e:76:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:7D:28:52:3A:2A:9E:AE:6F:A8:FB:CC:1E:3D:1C:27:6A:1D:77
X509v3 Authority Key Identifier:
keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D02EDF80CEDE11EC9281BA0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.90.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c7:d9:25:5f:ca:66:49:8e:c4:e5:53:21:fe:ab:2f:df:08:
24:49:9d:b5:40:90:b9:02:3d:fd:29:65:ff:c4:59:c9:06:1a:
ad:2e:c2:72:e6:e6:e9:ce:ed:7b:d3:33:ad:aa:45:f5:a5:64:
84:68:9c:a6:94:fe:5b:81:ba:fc:f0:cb:eb:72:9a:8e:a3:9a:
c4:31:85:52:d6:97:d0:70:77:bb:d5:5b:71:48:c3:25:81:e8:
24:69:68:0a:99:51:9b:de:2e:1d:23:2a:90:d4:d1:54:22:54:
2b:3b:23:6b:61:41:23:2f:ff:7c:f8:eb:83:b6:e5:e9:83:c6:
f4:75:9d:fb:d9:8d:e3:83:84:5b:8d:fe:c7:14:c7:0e:ab:88:
3f:79:62:f9:60:a4:2d:14:f7:05:98:9b:9d:18:95:ef:6c:94:
de:45:4b:13:ed:81:64:c5:0a:13:db:b2:67:d2:6b:0f:d0:6f:
ee:d1:1b:d1:54:00:94:d9:f9:e6:b2:32:be:12:ef:ec:73:e9:
53:fe:4f:16:85:12:ec:7a:00:ac:0f:58:61:bf:bd:89:ee:5e:
88:8b:bb:66:01:81:91:b7:88:fb:d0:85:24:01:ef:c0:5d:ce:
c9:2d:9d:46:a2:de:aa:35:6d:93:f7:d1:02:00:91:1d:87:7a:
da:3b:d1:31
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3
RjEwNUJEMzMwHhcNMjIwNTA4MTQ1NDUxWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjc3ZDliYi1hYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HV1tv4nlyywRDqt9h6APjf2XjLuZGLWFHH9i5CvSVy+f7OxL4RsSu3q4/jn
u0uhui63I5NXjTOyPjN/P1Ig4DeJvcpklmygX287xNujto1h73YuVgjCxIpGD6Ul
J5KwMqUwzjyAVjS4RHFp8MK1MPGKqnz4vDwyb8YY/7ElNcf89LMM5DH7qZLiakEu
PkgyVoR1OU116JrzGPsJFAU62OhGjFP/oURk+oGTgBR79Jrk2Zp1KZwPwSM3Wy01
jho+vNh5p0WgI9d2g7q7cqPGlu8JgPG0vZ7vU32mbSoip1y2ECi8p6hZRklI9lPo
exXkT6zV7FTx9GOkddWLbnbV7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIpQfShS
Oiqerm+o+8wePRwnah13MB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky
MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdBM0YvNjRDMzM5NDg5MjM1MTFFQzk2MDQ3NTExQzRGOUFFMDIvRDAyRURGODBD
RURFMTFFQzkyODFCQTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnf1owDQYJKoZIhvcNAQELBQADggEBABPH2SVfymZJjsTl
UyH+qy/fCCRJnbVAkLkCPf0pZf/EWckGGq0uwnLm5unO7XvTM62qRfWlZIRonKaU
/luBuvzwy+tymo6jmsQxhVLWl9Bwd7vVW3FIwyWB6CRpaAqZUZveLh0jKpDU0VQi
VCs7I2thQSMv/3z464O25emDxvR1nfvZjeODhFuN/scUxw6riD95YvlgpC0U9wWY
m50Yle9slN5FSxPtgWTFChPbsmfSaw/Qb+7RG9FUAJTZ+eayMr4S7+xz6VP+TxaF
Eux6AKwPWGG/vYnuXoiLu2YBgZG3iPvQhSQB78BdzsktnUai3qo1bZP30QIAkR2H
eto70TE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org