Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/6CB345964A3411ED8523151BC4F9AE02.roa
File: 6CB345964A3411ED8523151BC4F9AE02.roa (raw, json)
Hash identifier: ld5rWveuIKKwb1X+NoH2OYIqXH1wrGpGwkMDzd/szHs=
Subject key identifier: 28:07:B0:57:C4:EF:F3:76:C2:CA:A6:21:D9:20:D3:F9:CA:92:5E:68
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 08FA
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/6CB345964A3411ED8523151BC4F9AE02.roa
Signing time: Wed 12 Oct 2022 13:47:34 +0000
ROA not before: Wed 12 Oct 2022 13:47:34 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139771
IP address blocks: 103.132.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Validity
Not Before: Oct 12 13:47:34 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6346c576-0c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:ff:8c:56:75:24:ca:39:3d:f8:7f:31:4e:
8f:53:01:e9:1e:76:66:07:71:a2:cc:9f:1a:8c:f7:
16:4b:3b:d8:d9:81:7d:4f:77:c0:e1:c8:a7:d8:fd:
b0:32:e6:fe:64:03:30:d0:13:46:bc:34:f6:17:81:
a9:da:45:e3:2a:84:11:6f:76:9e:8d:5b:f3:21:24:
37:41:e2:67:b0:2a:91:69:dc:c0:61:ba:b4:19:32:
37:09:57:e1:3b:24:21:53:cc:4d:b7:ce:1c:31:06:
5e:b6:50:b2:db:c9:c6:7f:17:4d:82:3a:87:34:64:
2e:f6:60:63:cc:a3:ef:38:8c:b9:40:ab:74:32:66:
51:65:6e:6b:e1:97:33:f8:df:63:e6:ba:62:86:e8:
f8:da:99:12:a5:ae:81:46:92:da:c9:be:da:c1:e6:
f7:79:70:bf:1c:fb:c4:a8:f8:c9:1f:33:66:f2:06:
8f:49:e0:81:55:2f:26:cd:7b:a4:70:80:07:29:3b:
00:38:11:2f:7f:fd:6f:db:34:e9:f7:2b:0f:4e:58:
53:24:b5:b4:c1:20:e7:85:fd:6c:66:88:73:b5:8b:
68:8b:13:fa:17:25:da:81:a6:ff:23:28:6b:b8:59:
f4:da:c6:64:0f:19:67:de:89:5a:b6:dd:d9:fd:b1:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:B0:57:C4:EF:F3:76:C2:CA:A6:21:D9:20:D3:F9:CA:92:5E:68
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/6CB345964A3411ED8523151BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:28:cf:b8:67:5a:04:71:8f:0c:17:1b:9d:44:85:73:0c:86:
6f:a8:a4:a3:b1:de:f4:e1:19:df:02:26:b7:77:da:41:8d:5c:
27:99:2d:8d:39:2f:be:63:c2:a9:a9:63:01:9f:ba:23:f9:52:
74:5b:41:25:5b:34:f2:bc:6c:05:1f:4d:68:74:d7:5e:a8:7a:
f2:d8:51:64:4d:04:79:3a:77:58:21:6b:33:fd:5f:5d:ed:19:
12:8a:48:d8:47:75:bc:67:72:7a:9f:3e:b3:31:03:28:e5:94:
76:89:3d:e2:67:4d:8f:89:bd:8a:b8:30:e6:de:06:76:37:ca:
fb:78:65:9a:64:17:c9:33:7b:9d:c5:16:d0:f9:2c:8b:93:9e:
25:08:c3:c6:b7:50:00:d7:e6:12:9d:4b:e0:b5:bc:9b:2c:90:
7e:72:a5:6c:66:29:97:6b:74:36:0c:8d:2e:f9:d2:b2:83:06:
6a:cf:1a:48:91:61:f9:5d:9e:a9:48:f3:c6:66:be:43:fd:0b:
18:79:04:d6:b5:58:5a:8f:f8:e6:6f:f7:bf:f1:77:0e:a3:af:
7e:27:81:08:6b:a5:69:d1:c4:09:94:b7:3b:62:37:bc:70:ff:
b3:c8:61:64:80:f5:b9:2c:93:02:d1:1c:2b:50:dd:59:42:0a:
44:2c:32:c0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE
MTgwN0ExNEMwHhcNMjIxMDEyMTM0NzM0WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ2YzU3Ni0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzf//jFZ1JMo5Pfh/MU6PUwHpHnZmB3GizJ8ajPcWSzvY2YF9T3fA4cin2P2w
Mub+ZAMw0BNGvDT2F4Gp2kXjKoQRb3aejVvzISQ3QeJnsCqRadzAYbq0GTI3CVfh
OyQhU8xNt84cMQZetlCy28nGfxdNgjqHNGQu9mBjzKPvOIy5QKt0MmZRZW5r4Zcz
+N9j5rpihuj42pkSpa6BRpLayb7aweb3eXC/HPvEqPjJHzNm8gaPSeCBVS8mzXuk
cIAHKTsAOBEvf/1v2zTp9ysPTlhTJLW0wSDnhf1sZohztYtoixP6FyXagab/Iyhr
uFn02sZkDxln3olatt3Z/bGf5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCgHsFfE
7/N2wsqmIdkg0/nKkl5oMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4
RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY5MDUvMUZBN0M0NkM0OEQzMTFFQThBQUU0NjY4QzRGOUFFMDIvNkNCMzQ1OTY0
QTM0MTFFRDg1MjMxNTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhOAwDQYJKoZIhvcNAQELBQADggEBAF8oz7hnWgRxjwwX
G51EhXMMhm+opKOx3vThGd8CJrd32kGNXCeZLY05L75jwqmpYwGfuiP5UnRbQSVb
NPK8bAUfTWh0116oevLYUWRNBHk6d1ghazP9X13tGRKKSNhHdbxncnqfPrMxAyjl
lHaJPeJnTY+JvYq4MObeBnY3yvt4ZZpkF8kze53FFtD5LIuTniUIw8a3UADX5hKd
S+C1vJsskH5ypWxmKZdrdDYMjS750rKDBmrPGkiRYfldnqlI88ZmvkP9Cxh5BNa1
WFqP+OZv97/xdw6jr34ngQhrpWnRxAmUtztiN7xw/7PIYWSA9bkskwLRHCtQ3VlC
CkQsMsA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org