Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/B3B1453CE16711EC8EDF6621C4F9AE02.roa
File: B3B1453CE16711EC8EDF6621C4F9AE02.roa (raw, json)
Hash identifier: P3QsRIJnxb/4ucJy3AIIpj6jhfKB78QYuHsoa9FhLaI=
Subject key identifier: AC:E7:33:8D:40:A6:30:9E:E8:E7:4D:90:13:06:04:E9:EF:7B:3F:1F
Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial: CB
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/B3B1453CE16711EC8EDF6621C4F9AE02.roa
Signing time: Wed 01 Jun 2022 17:31:10 +0000
ROA not before: Wed 01 Jun 2022 17:31:10 +0000
ROA not after: Sat 01 Oct 2022 00:00:00 +0000
asID: 140321
IP address blocks: 103.149.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Validity
Not Before: Jun 1 17:31:10 2022 GMT
Not After : Oct 1 00:00:00 2022 GMT
Subject: CN=6297a25d-4efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:c9:d1:3c:85:83:71:67:af:ad:5e:09:4b:
37:97:d8:65:e8:ab:91:70:11:1f:ea:3f:c7:47:57:
cc:a4:2b:fe:a9:1e:7b:78:c1:52:7b:93:58:69:10:
4d:fc:37:aa:42:8a:19:e1:d2:82:b8:53:18:af:40:
0f:83:cd:2c:95:8e:78:59:bb:b0:81:a3:a1:f2:d3:
6d:2d:92:9d:ab:95:d1:77:af:67:2a:4a:45:aa:86:
73:8b:43:5a:3c:38:ee:b4:f7:33:98:3d:a2:77:25:
a1:a5:28:5f:50:e4:22:e9:bb:c4:ba:90:94:61:b3:
3e:66:9d:eb:b4:be:83:2c:16:19:bd:1f:b1:7a:b7:
38:78:30:32:cf:6c:65:6d:e5:30:a3:70:2b:3f:32:
18:b9:eb:27:9d:2d:d3:b2:be:41:cd:1d:95:67:ba:
61:89:da:4e:d8:6c:0d:bd:aa:cb:92:cd:3e:ca:ba:
a4:8e:78:2f:00:26:9b:5e:1f:f1:22:7a:d9:6c:c3:
94:41:32:cb:80:72:28:82:ba:fc:54:b1:a7:c4:3c:
33:63:36:c2:d9:9b:a0:6e:a1:a5:40:2f:37:ea:ff:
17:2f:58:e2:4e:a4:8b:d8:8d:eb:61:0e:c8:b1:d3:
a1:c9:d5:e8:eb:4f:c1:b9:fe:9f:2d:aa:eb:78:c3:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:33:8D:40:A6:30:9E:E8:E7:4D:90:13:06:04:E9:EF:7B:3F:1F
X509v3 Authority Key Identifier:
keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/B3B1453CE16711EC8EDF6621C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.168.0/23
Signature Algorithm: sha256WithRSAEncryption
65:39:1e:ef:94:d7:25:5e:dd:9d:1c:a0:91:bc:ca:cc:25:d4:
40:d5:50:33:f6:2a:8d:a6:2d:ca:f9:41:2a:ed:1f:b6:cd:55:
bd:51:c8:34:ed:74:8b:d1:46:50:e0:e0:55:63:c4:c3:d0:5b:
a7:17:44:0c:a6:c2:b6:d3:a4:dd:1b:c3:c9:1c:7f:fb:59:58:
91:64:fd:41:a1:81:5d:41:d2:bc:2f:c7:66:b5:33:c9:1c:1e:
95:8c:f1:2e:94:54:33:6b:87:22:9b:39:cb:4e:e2:57:23:f3:
46:be:90:d5:bb:2e:8d:cb:ec:9b:28:9e:0b:fd:81:50:b4:94:
86:89:4f:90:9c:c1:14:bb:6f:b3:fa:c2:fa:f7:20:da:c5:10:
20:7e:d6:fd:b9:1e:30:41:26:0f:c0:07:14:2d:b3:97:35:7a:
b2:92:0e:a6:95:28:3a:06:e2:d3:12:be:7b:04:5b:52:7a:ad:
64:de:dc:b8:da:74:39:3d:6a:6f:cd:36:d3:97:e9:6c:89:5f:
20:ed:e3:5d:a2:38:ec:0b:de:55:ca:1d:27:5d:0d:43:1d:f3:
c8:ab:ba:40:cb:59:27:44:30:70:8c:b3:b3:4e:22:7b:2d:b6:
09:c2:58:c2:01:e7:71:f6:76:5c:4d:d5:1c:9b:d8:82:34:01:
2d:07:4f:de
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVDMkYxMTAvBgNVBAUTKEY3QTA3RjdBOTkxQzIxQTI1Q0QzOUFCMjBBREU0RkEz
QjVFMDVEMTUwHhcNMjIwNjAxMTczMTEwWhcNMjIxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk3YTI1ZC00ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymnJ0TyFg3Fnr61eCUs3l9hl6KuRcBEf6j/HR1fMpCv+qR57eMFSe5NYaRBN
/DeqQooZ4dKCuFMYr0APg80slY54WbuwgaOh8tNtLZKdq5XRd69nKkpFqoZzi0Na
PDjutPczmD2idyWhpShfUOQi6bvEupCUYbM+Zp3rtL6DLBYZvR+xerc4eDAyz2xl
beUwo3ArPzIYuesnnS3Tsr5BzR2VZ7phidpO2GwNvarLks0+yrqkjngvACabXh/x
InrZbMOUQTLLgHIogrr8VLGnxDwzYzbC2ZugbqGlQC836v8XL1jiTqSL2I3rYQ7I
sdOhydXo60/Buf6fLarreMMIvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKznM41A
pjCe6OdNkBMGBOnvez8fMB8GA1UdIwQYMBaAFPegf3qZHCGiXNOasgreT6O14F0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMyRi83MjFCMzFENDk2
MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lhSmMwNXF5Q3Q1UG83WGdY
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk2Ql9lcGtjSWFKYzA1cXlDdDVQbzdYZ1hSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkVDMkYvNzIxQjMxRDQ5NjM4MTFFQ0I4M0MxNjgyQzRGOUFFMDIvQjNCMTQ1M0NF
MTY3MTFFQzhFREY2NjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlagwDQYJKoZIhvcNAQELBQADggEBAGU5Hu+U1yVe3Z0c
oJG8yswl1EDVUDP2Ko2mLcr5QSrtH7bNVb1RyDTtdIvRRlDg4FVjxMPQW6cXRAym
wrbTpN0bw8kcf/tZWJFk/UGhgV1B0rwvx2a1M8kcHpWM8S6UVDNrhyKbOctO4lcj
80a+kNW7Lo3L7Jsongv9gVC0lIaJT5CcwRS7b7P6wvr3INrFECB+1v25HjBBJg/A
BxQts5c1erKSDqaVKDoG4tMSvnsEW1J6rWTe3LjadDk9am/NNtOX6WyJXyDt412i
OOwL3lXKHSddDUMd88irukDLWSdEMHCMs7NOInsttgnCWMIB53H2dlxN1Ryb2II0
AS0HT94=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org