Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/ADDB681CE38D11EDA7A5923FC4F9AE02.roa
File: ADDB681CE38D11EDA7A5923FC4F9AE02.roa (raw, json)
Hash identifier: gTIuZq5Boc0bdaxetOVimaTS2c5aVdnQfY9MVO4Kwpo=
Subject key identifier: B0:DE:73:83:52:A5:66:83:A5:0D:88:AC:ED:D8:CB:D7:99:A0:2E:C5
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 0502
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/ADDB681CE38D11EDA7A5923FC4F9AE02.roa
Signing time: Tue 25 Apr 2023 17:21:57 +0000
ROA not before: Tue 25 Apr 2023 17:21:57 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 60445
IP address blocks: 103.151.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E
Validity
Not Before: Apr 25 17:21:57 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64480c34-26a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:d8:a2:18:62:a5:8d:ab:8e:b6:3e:15:f7:
1c:b8:fe:dc:6d:de:65:df:28:e1:c4:50:6b:f8:2f:
03:ce:de:06:91:d2:3f:27:18:c7:3b:f1:71:82:9d:
49:1b:64:e8:93:a3:be:7f:58:ad:41:22:e5:70:77:
4f:ae:fe:ee:b9:a5:52:ef:ad:6a:c2:1d:55:51:6f:
63:16:a1:87:b2:63:63:56:89:b6:11:8c:57:2f:ff:
df:af:a1:ea:c9:31:cc:2e:fe:b8:a0:c6:c5:c3:0d:
7a:81:14:bb:77:7a:92:9e:47:e1:b8:1e:13:76:69:
06:a4:7e:08:86:d6:df:8d:a0:db:6b:cb:07:a0:22:
95:50:8e:a2:81:b1:f6:0f:e8:14:fe:ea:c2:67:7c:
50:01:1a:32:70:68:16:13:71:30:f9:ec:5b:ca:35:
49:8b:9f:33:08:42:25:62:8b:fb:1d:27:61:6e:7d:
1f:c5:2a:b2:84:5d:b8:fc:ea:cc:ac:05:9f:a3:e6:
05:25:8a:55:15:b5:16:a5:b4:c2:2c:9e:17:5a:ba:
63:c7:18:93:40:1f:92:bf:26:f3:00:e9:6b:28:0a:
84:d3:0d:97:da:cc:bd:82:10:ba:5d:d0:b3:e9:3b:
1d:23:26:c2:77:79:bb:3d:58:61:64:fd:cb:d3:d7:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:73:83:52:A5:66:83:A5:0D:88:AC:ED:D8:CB:D7:99:A0:2E:C5
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/ADDB681CE38D11EDA7A5923FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e4:ca:71:68:53:00:51:05:c5:14:88:5e:a8:77:a5:ce:24:
5b:40:03:c8:33:04:a5:8c:22:98:e3:b5:ce:42:39:e8:ff:59:
1d:cc:93:0d:68:af:c4:b7:68:57:57:9d:23:e8:f1:51:fb:9f:
8a:5f:73:59:13:52:f2:1b:a6:3a:97:4f:06:26:15:1c:81:8e:
43:11:7f:36:6b:35:50:be:b3:73:a7:c0:59:c0:1e:47:4f:e7:
04:09:4f:97:b8:32:94:fc:07:22:32:e2:d9:cd:5a:12:48:0e:
a6:3e:85:df:df:4b:b3:07:59:64:0e:cf:d4:7a:e3:14:df:21:
ca:45:3f:5d:ba:fe:ff:f2:1d:b1:7a:48:4c:44:ea:b4:51:66:
13:02:be:fd:43:ac:9f:42:f9:95:8f:ee:ed:0c:8b:3e:45:8c:
07:ad:06:98:4e:41:d0:2a:45:9f:f5:39:60:00:46:e9:5a:d4:
29:2c:41:2e:d9:3c:e9:a9:50:e7:7a:e8:6a:9a:4a:6f:fb:fb:
1f:15:e3:29:63:aa:4e:0a:40:1a:89:3b:f3:8a:dc:87:0b:80:
96:ce:44:4f:0b:de:02:3d:f7:9d:52:c1:f2:73:03:d6:07:8b:
76:28:ee:03:ea:a1:ca:ce:75:7a:56:87:55:0d:8d:7b:32:d7:
cc:e4:e0:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz
NTlCMzAxNjUwHhcNMjMwNDI1MTcyMTU3WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQ4MGMzNC0yNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVfYohhipY2rjrY+FfccuP7cbd5l3yjhxFBr+C8Dzt4GkdI/JxjHO/Fxgp1J
G2Tok6O+f1itQSLlcHdPrv7uuaVS761qwh1VUW9jFqGHsmNjVom2EYxXL//fr6Hq
yTHMLv64oMbFww16gRS7d3qSnkfhuB4TdmkGpH4IhtbfjaDba8sHoCKVUI6igbH2
D+gU/urCZ3xQARoycGgWE3Ew+exbyjVJi58zCEIlYov7HSdhbn0fxSqyhF24/OrM
rAWfo+YFJYpVFbUWpbTCLJ4XWrpjxxiTQB+SvybzAOlrKAqE0w2X2sy9ghC6XdCz
6TsdIybCd3m7PVhhZP3L09dMmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDec4NS
pWaDpQ2IrO3Yy9eZoC7FMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw
RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdDMEUvRUU1OUU3RjQ4MEY5MTFFQjk4NUY0MzNBQzRGOUFFMDIvQUREQjY4MUNF
MzhEMTFFREE3QTU5MjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlygwDQYJKoZIhvcNAQELBQADggEBAKbkynFoUwBRBcUU
iF6od6XOJFtAA8gzBKWMIpjjtc5COej/WR3Mkw1or8S3aFdXnSPo8VH7n4pfc1kT
UvIbpjqXTwYmFRyBjkMRfzZrNVC+s3OnwFnAHkdP5wQJT5e4MpT8ByIy4tnNWhJI
DqY+hd/fS7MHWWQOz9R64xTfIcpFP126/v/yHbF6SExE6rRRZhMCvv1DrJ9C+ZWP
7u0Miz5FjAetBphOQdAqRZ/1OWAARula1CksQS7ZPOmpUOd66GqaSm/7+x8V4ylj
qk4KQBqJO/OK3IcLgJbORE8L3gI9951SwfJzA9YHi3Yo7gPqocrOdXpWh1UNjXsy
18zk4FE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:50 2025 by rpki-client