Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/4B8FD9EA1F0C11EDA480AC63C4F9AE02.roa
File: 4B8FD9EA1F0C11EDA480AC63C4F9AE02.roa (raw, json)
Hash identifier: CwQkYC9AFR3vWpm/ChcVdX2QrrTyQRl/X9etsXdxCcA=
Subject key identifier: C7:0C:0C:77:7A:3C:48:9A:93:6D:49:38:82:09:D6:5E:75:99:BC:D5
Certificate issuer: /CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
Certificate serial: 02BD
Authority key identifier: 79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/4B8FD9EA1F0C11EDA480AC63C4F9AE02.roa
Signing time: Thu 18 Aug 2022 15:41:59 +0000
ROA not before: Thu 18 Aug 2022 15:41:59 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 55714
IP address blocks: 103.151.236.0/23 maxlen: 23
103.151.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
Validity
Not Before: Aug 18 15:41:59 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62fe5dc6-ea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:9c:45:ad:04:52:c6:60:b4:94:1d:65:57:
32:66:06:f7:6d:bb:37:88:f0:16:1c:72:0e:c2:22:
8e:95:a1:aa:64:fb:6a:68:aa:ea:9b:46:7a:a4:ed:
23:8d:c6:37:49:ae:f3:7c:3f:6e:b6:9f:34:4a:fc:
7e:75:15:40:db:05:48:f6:d3:53:7b:bb:66:3b:8a:
b3:37:eb:9c:ba:ad:8a:75:d6:d7:a6:22:d5:95:fd:
90:5d:53:0e:ef:93:79:7a:3b:45:a8:88:8e:e7:b9:
f1:70:f8:b6:31:68:c0:37:d2:e0:bb:0e:82:f3:40:
ae:f3:57:67:a7:45:87:d5:56:b8:24:a3:e9:8b:0d:
ba:a4:ea:74:18:d2:98:d5:9d:ba:67:5b:8d:4f:91:
9c:ba:5a:1e:dc:e0:26:48:70:32:9e:45:ff:78:b0:
a8:c8:64:b7:63:77:f3:d8:90:44:2b:45:7d:91:ef:
f6:4d:7c:27:a1:67:da:e4:6d:70:b5:36:0a:2f:58:
f6:11:08:40:58:ed:20:5c:95:ac:6d:33:55:c6:90:
be:3d:33:e3:fb:ac:5b:f9:76:40:6b:80:f6:7b:a1:
ac:55:3a:c0:45:e4:0e:09:ec:78:9a:2e:12:2a:36:
0e:08:92:58:d7:18:2e:a2:32:c7:de:2c:36:87:f5:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:0C:77:7A:3C:48:9A:93:6D:49:38:82:09:D6:5E:75:99:BC:D5
X509v3 Authority Key Identifier:
keyid:79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/4B8FD9EA1F0C11EDA480AC63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.236.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:74:4c:dc:86:34:1d:8a:b2:2a:1a:c3:cc:ba:31:2f:8b:15:
94:b4:24:ea:df:7d:79:59:df:06:d7:6e:6d:d0:a1:34:6e:4e:
bf:37:d7:76:ad:4b:e0:35:df:e9:00:df:f3:0f:21:60:be:57:
19:9f:9d:93:9d:cc:0f:39:d8:59:c7:e2:5d:09:cb:f9:62:5b:
0d:eb:b4:43:36:3e:c4:27:df:83:f6:f8:be:7d:24:1b:3d:7f:
e8:47:9e:17:b0:8e:de:4a:70:24:96:30:e9:55:c0:4e:63:cb:
86:14:45:bb:2d:bb:5c:0b:96:e2:95:44:43:79:35:bd:4c:52:
86:56:f8:c0:7d:f5:d8:28:4d:dc:63:48:12:30:14:ed:ea:19:
06:d1:0f:4f:1e:36:1e:ac:f5:f0:34:dc:f8:1c:96:c2:10:63:
db:57:1a:a5:4e:14:d0:3a:68:ef:3a:cc:f2:6e:05:be:a1:c9:
e8:8a:ce:99:ee:44:81:06:03:87:18:ce:cd:69:10:9f:5c:f8:
28:eb:a9:38:1e:62:56:3b:42:5e:a0:2e:27:1d:c6:a1:45:26:
67:80:09:49:76:f4:fd:11:3f:75:51:e0:fb:4b:c7:39:c1:73:
8d:d6:11:46:e1:f0:b8:bd:b8:cb:a1:38:28:88:36:14:05:2a:
c3:74:bc:59
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNTIxMTAvBgNVBAUTKDc5MDU1NTNGRUNBNTkwMzBENTE5MTgzNzJGMUVFMTcy
NzQ5NDlGQjUwHhcNMjIwODE4MTU0MTU5WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZlNWRjNi1lYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBucRa0EUsZgtJQdZVcyZgb3bbs3iPAWHHIOwiKOlaGqZPtqaKrqm0Z6pO0j
jcY3Sa7zfD9utp80Svx+dRVA2wVI9tNTe7tmO4qzN+ucuq2KddbXpiLVlf2QXVMO
75N5ejtFqIiO57nxcPi2MWjAN9Lguw6C80Cu81dnp0WH1Va4JKPpiw26pOp0GNKY
1Z26Z1uNT5Gculoe3OAmSHAynkX/eLCoyGS3Y3fz2JBEK0V9ke/2TXwnoWfa5G1w
tTYKL1j2EQhAWO0gXJWsbTNVxpC+PTPj+6xb+XZAa4D2e6GsVTrAReQOCex4mi4S
KjYOCJJY1xguojLH3iw2h/W8XQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMcMDHd6
PEiak21JOIIJ1l51mbzVMB8GA1UdIwQYMBaAFHkFVT/spZAw1RkYNy8e4XJ0lJ+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM1Mi82QjcxNTE2MjBE
N0UxMUVDOUMwQjVGNzVDNEY5QUUwMi9lUVZWUC15bGtERFZHUmczTHg3aGNuU1Vu
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VRVlZQLXlsa0REVkdSZzNMeDdoY25TVW43VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjlDNTIvNkI3MTUxNjIwRDdFMTFFQzlDMEI1Rjc1QzRGOUFFMDIvNEI4RkQ5RUEx
RjBDMTFFREE0ODBBQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnl+wwDQYJKoZIhvcNAQELBQADggEBAI50TNyGNB2Ksioa
w8y6MS+LFZS0JOrffXlZ3wbXbm3QoTRuTr8313atS+A13+kA3/MPIWC+VxmfnZOd
zA852FnH4l0Jy/liWw3rtEM2PsQn34P2+L59JBs9f+hHnhewjt5KcCSWMOlVwE5j
y4YURbstu1wLluKVREN5Nb1MUoZW+MB99dgoTdxjSBIwFO3qGQbRD08eNh6s9fA0
3PgclsIQY9tXGqVOFNA6aO86zPJuBb6hyeiKzpnuRIEGA4cYzs1pEJ9c+CjrqTge
YlY7Ql6gLicdxqFFJmeACUl29P0RP3VR4PtLxznBc43WEUbh8Li9uMuhOCiINhQF
KsN0vFk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org