Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/9A0F766234BF11ECB08A3D36C4F9AE02.roa
File: 9A0F766234BF11ECB08A3D36C4F9AE02.roa (raw, json)
Hash identifier: lPOj2hA7BosEpiW2YLiXl/uwhl9Di7zOC9bCc66NQFA=
Subject key identifier: 3E:E8:25:C7:AD:70:BA:0B:5F:9B:28:A2:B1:7B:46:17:7C:2C:72:4B
Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Certificate serial: 050A
Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/9A0F766234BF11ECB08A3D36C4F9AE02.roa
Signing time: Fri 08 Apr 2022 17:43:54 +0000
ROA not before: Fri 08 Apr 2022 17:43:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24323
IP address blocks: 103.54.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Validity
Not Before: Apr 8 17:43:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6250745a-87a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c4:44:3c:6e:3c:df:0a:df:23:44:4b:4c:0e:
13:94:35:69:40:e8:82:87:50:41:0d:4b:55:98:5e:
d4:8e:03:82:be:88:9f:e6:48:3a:50:bf:72:a4:77:
1f:e0:9e:46:5a:b9:cd:1a:59:18:23:a4:3a:23:27:
37:fd:cf:3c:55:d8:46:80:f2:20:30:9f:90:17:b7:
9e:5b:45:3c:5e:dd:70:59:5e:7a:68:77:be:83:ee:
38:db:fd:cf:dc:10:d6:7a:e1:9c:e7:91:2c:2b:ef:
22:86:f9:6a:53:2e:a9:d5:6a:52:68:0b:a8:08:27:
a4:18:5e:90:d1:d6:d7:cc:93:9f:5b:91:db:82:83:
98:fa:19:69:5a:b6:d3:c9:ed:39:b2:9c:2c:b2:5c:
41:08:53:01:31:fc:36:2b:f6:39:83:75:87:c3:a1:
f7:14:5d:bb:26:38:9b:56:bf:bc:62:7c:57:ca:17:
49:40:c0:bf:d9:b3:93:f9:71:b6:bd:77:22:34:fe:
a1:8c:bc:d2:68:c7:4c:ba:5c:c6:b8:05:19:2b:4c:
a2:f3:2c:5a:fb:9e:dc:41:50:0d:c4:55:8f:24:32:
99:c1:69:1a:ba:57:2c:15:a2:4a:10:74:ae:32:2d:
50:d0:61:05:47:d6:b1:c8:e1:55:ab:8a:92:c0:68:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:25:C7:AD:70:BA:0B:5F:9B:28:A2:B1:7B:46:17:7C:2C:72:4B
X509v3 Authority Key Identifier:
keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/9A0F766234BF11ECB08A3D36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.40.0/24
Signature Algorithm: sha256WithRSAEncryption
27:51:cf:82:22:c4:42:6e:53:89:03:1f:79:89:e5:d2:0d:f5:
f2:06:3e:c2:45:1c:f1:fa:41:f1:c1:7b:57:86:e2:21:d1:0a:
93:c6:dc:a9:0c:c9:d1:4e:35:ec:47:8f:68:61:e0:df:ac:db:
3e:a6:3e:30:16:6a:46:d0:3c:f3:4c:7a:5e:54:ae:99:50:09:
23:a7:54:50:6b:59:8e:3a:e5:6c:9c:de:6d:dd:ac:62:70:dd:
ac:1d:9f:82:b1:02:ad:f8:2a:17:fb:98:5b:1c:8c:0e:0a:7f:
11:aa:7c:ec:7d:03:ed:6f:8f:22:fa:22:4c:11:22:6e:5e:b3:
eb:e0:93:b9:8c:f7:1c:46:6d:82:04:4f:66:0f:8e:67:25:42:
24:d1:67:df:2e:29:74:33:ab:75:91:7c:1f:8c:cc:90:3c:cb:
21:66:75:ca:5a:48:b3:cc:4c:66:a6:a8:54:dd:4b:d7:c4:ee:
cd:8b:55:46:4f:10:00:11:99:0b:f9:7d:65:9d:c2:31:7b:16:
c0:0e:ee:15:b1:78:e5:aa:41:07:e5:1d:2b:06:81:b0:fa:93:
e2:07:b6:36:1a:92:97:6e:50:48:a1:43:35:b6:ec:56:97:d0:
8e:3c:a1:51:2b:1c:4f:3a:46:c2:fd:9a:f5:71:03:a1:07:08:
13:20:93:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4
MjM2RDM0NDUwHhcNMjIwNDA4MTc0MzU0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjUwNzQ1YS04N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+cREPG483wrfI0RLTA4TlDVpQOiCh1BBDUtVmF7UjgOCvoif5kg6UL9ypHcf
4J5GWrnNGlkYI6Q6Iyc3/c88VdhGgPIgMJ+QF7eeW0U8Xt1wWV56aHe+g+442/3P
3BDWeuGc55EsK+8ihvlqUy6p1WpSaAuoCCekGF6Q0dbXzJOfW5HbgoOY+hlpWrbT
ye05spwsslxBCFMBMfw2K/Y5g3WHw6H3FF27JjibVr+8YnxXyhdJQMC/2bOT+XG2
vXciNP6hjLzSaMdMulzGuAUZK0yi8yxa+57cQVANxFWPJDKZwWkaulcsFaJKEHSu
Mi1Q0GEFR9axyOFVq4qSwGhzuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD7oJcet
cLoLX5soorF7Rhd8LHJLMB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE
RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYwMjYvMDMyOEE4NUNEREUwMTFFN0IyODEwNzU3QzRGOUFFMDIvOUEwRjc2NjIz
NEJGMTFFQ0IwOEEzRDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNigwDQYJKoZIhvcNAQELBQADggEBACdRz4IixEJuU4kD
H3mJ5dIN9fIGPsJFHPH6QfHBe1eG4iHRCpPG3KkMydFONexHj2hh4N+s2z6mPjAW
akbQPPNMel5UrplQCSOnVFBrWY465Wyc3m3drGJw3awdn4KxAq34Khf7mFscjA4K
fxGqfOx9A+1vjyL6IkwRIm5es+vgk7mM9xxGbYIET2YPjmclQiTRZ98uKXQzq3WR
fB+MzJA8yyFmdcpaSLPMTGamqFTdS9fE7s2LVUZPEAARmQv5fWWdwjF7FsAO7hWx
eOWqQQflHSsGgbD6k+IHtjYakpduUEihQzW27FaX0I48oVErHE86RsL9mvVxA6EH
CBMgk+Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org