Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/73BC3634F8B211EAB089654EC4F9AE02.roa
File: 73BC3634F8B211EAB089654EC4F9AE02.roa (raw, json)
Hash identifier: mCsc9dAhhSSEA3ySN5ouRF1W1WaswsP1J/oSpKR0YMo=
Subject key identifier: ED:D0:90:24:AA:56:CF:B7:DF:CA:0F:E0:41:2F:E9:FE:B9:0E:05:19
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0831
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/73BC3634F8B211EAB089654EC4F9AE02.roa
Signing time: Thu 05 Aug 2021 19:35:07 +0000
ROA not before: Thu 05 Aug 2021 19:35:07 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 135037
IP address blocks: 103.117.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 5 19:35:07 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=610c3d6a-5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2f:35:d1:68:85:66:ae:41:a0:76:3b:5f:7d:
61:e7:27:cb:c7:6a:04:81:9f:ee:42:b9:25:14:94:
32:96:fa:4d:a9:a6:a9:be:a1:22:f3:e8:4d:9e:fb:
b9:61:6a:19:b6:cb:c2:ca:1c:07:17:66:24:7f:c6:
ac:b2:a4:09:25:bd:7e:3e:74:45:63:0c:d5:aa:68:
f8:6e:d0:68:05:c8:dc:8f:f6:f5:da:82:cd:2c:be:
c1:34:4a:bb:92:82:64:2a:77:3b:14:17:03:7c:e4:
56:24:ca:a0:6d:1a:cf:be:51:b2:82:86:43:d1:6a:
08:0f:a2:08:2b:2c:6d:58:c9:0a:b3:b1:2b:a6:c8:
2a:31:47:49:7b:22:1d:29:ac:18:8b:25:92:42:c6:
49:d8:a8:8f:7c:21:20:3a:f2:77:06:65:4b:11:c9:
13:23:8f:08:56:c4:af:07:28:df:21:23:9e:f9:a1:
8b:02:52:6d:09:90:bf:e9:89:b4:7a:85:70:65:12:
0b:ee:5e:60:6e:e4:54:3d:92:0a:db:56:70:e6:50:
52:3c:2e:a1:5d:a9:94:75:8f:85:ad:81:a0:1e:03:
01:0e:b3:69:31:d1:ef:56:50:f7:f8:64:b0:97:c7:
98:c4:0d:6e:ee:92:a5:31:f9:b9:57:96:be:f4:d8:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:90:24:AA:56:CF:B7:DF:CA:0F:E0:41:2F:E9:FE:B9:0E:05:19
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/73BC3634F8B211EAB089654EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.111.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:87:0d:24:fb:35:fb:60:16:f3:99:e1:7a:b2:54:d4:e6:
5f:78:96:01:94:0b:61:3a:c5:c8:c6:c3:d0:ec:76:9f:df:db:
fd:e3:a1:8e:65:33:cb:44:74:53:f3:92:bf:07:e1:de:41:dc:
98:1f:16:c9:c8:da:23:7a:ff:c1:dd:8c:98:10:b3:c7:80:a1:
1c:0c:94:7a:b8:13:66:fe:1e:55:1e:80:eb:89:42:85:c4:00:
67:90:63:db:02:ba:3c:c0:de:78:99:29:41:84:a7:39:de:fc:
b4:ca:68:a4:57:20:a9:de:64:f9:d4:99:c1:13:42:93:ff:b1:
95:9f:d9:ad:a7:3d:0e:5c:e9:7e:f4:a3:5a:e8:1a:4c:47:e2:
e2:ed:03:08:2a:38:da:b5:bc:c7:4e:bb:8c:b0:91:0b:b0:e3:
31:d6:9e:62:65:9a:a6:45:a5:39:2f:82:ed:f4:90:ff:4c:19:
95:af:df:9b:8c:4a:6f:31:08:3b:70:67:3c:94:9f:8c:1f:61:
21:d9:16:8f:b3:db:dc:a0:c6:de:1f:6b:43:c7:15:28:d5:c8:
f2:f5:69:64:fb:cd:3c:48:c9:79:33:80:32:88:22:70:57:f6:
54:67:ff:f2:72:c1:fa:37:09:a7:f9:b3:b6:3f:66:17:54:1f:
14:f3:11:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4
OTg2NDAxRjQwHhcNMjEwODA1MTkzNTA3WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTBjM2Q2YS01OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+i810WiFZq5BoHY7X31h5yfLx2oEgZ/uQrklFJQylvpNqaapvqEi8+hNnvu5
YWoZtsvCyhwHF2Ykf8assqQJJb1+PnRFYwzVqmj4btBoBcjcj/b12oLNLL7BNEq7
koJkKnc7FBcDfORWJMqgbRrPvlGygoZD0WoID6IIKyxtWMkKs7ErpsgqMUdJeyId
KawYiyWSQsZJ2KiPfCEgOvJ3BmVLEckTI48IVsSvByjfISOe+aGLAlJtCZC/6Ym0
eoVwZRIL7l5gbuRUPZIK21Zw5lBSPC6hXamUdY+FrYGgHgMBDrNpMdHvVlD3+GSw
l8eYxA1u7pKlMfm5V5a+9NhtswIDAQABo4IClTCCApEwHQYDVR0OBBYEFO3QkCSq
Vs+338oP4EEv6f65DgUZMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF
NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdGNDcvMzMwQTAwOENDRTU5MTFFOUEwOTA4Mjg3QzRGOUFFMDIvNzNCQzM2MzRG
OEIyMTFFQUIwODk2NTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndW8wDQYJKoZIhvcNAQELBQADggEBAINhhw0k+zX7YBbz
meF6slTU5l94lgGUC2E6xcjGw9Dsdp/f2/3joY5lM8tEdFPzkr8H4d5B3JgfFsnI
2iN6/8HdjJgQs8eAoRwMlHq4E2b+HlUegOuJQoXEAGeQY9sCujzA3niZKUGEpzne
/LTKaKRXIKneZPnUmcETQpP/sZWf2a2nPQ5c6X70o1roGkxH4uLtAwgqONq1vMdO
u4ywkQuw4zHWnmJlmqZFpTkvgu30kP9MGZWv35uMSm8xCDtwZzyUn4wfYSHZFo+z
29ygxt4fa0PHFSjVyPL1aWT7zTxIyXkzgDKIInBX9lRn//Jywfo3Caf5s7Y/ZhdU
HxTzEQc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org