Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/758AE74C199F11EEA3569640C4F9AE02.roa
File: 758AE74C199F11EEA3569640C4F9AE02.roa (raw, json)
Hash identifier: uUetYhg5CQ47BuMbsgueoo130eKDqmqGFa2amL7X7KI=
Subject key identifier: 41:2E:C8:1C:56:84:AF:E8:65:FC:57:A7:B5:9E:1E:B2:CD:E7:FF:34
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0C95
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/758AE74C199F11EEA3569640C4F9AE02.roa
Signing time: Mon 03 Jul 2023 12:45:16 +0000
ROA not before: Mon 03 Jul 2023 12:45:16 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 57097
IP address blocks: 103.83.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Jul 3 12:45:16 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64a2c2dc-8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:65:e1:a3:b3:b9:aa:eb:41:10:ca:91:9e:
c7:ab:91:22:5c:d8:ac:86:cc:d5:33:3a:75:48:f2:
bd:e8:0b:61:0e:c6:54:9d:0a:b5:3d:b3:65:a5:cb:
a4:4f:63:00:f3:0d:0d:49:ad:88:7d:5b:1e:ee:03:
1a:04:cd:ad:7c:81:4c:00:e6:21:eb:00:22:5d:a2:
15:16:42:65:85:aa:e7:40:b1:ac:d6:f9:26:94:bc:
1d:57:02:d7:50:c5:7c:41:b6:fa:7d:9e:ba:87:77:
ad:c5:74:75:6c:40:d4:c1:8a:fe:9c:05:4b:8f:b9:
94:f0:64:1f:86:c3:15:3e:87:38:60:11:65:37:85:
bc:bb:bd:bb:88:a2:55:e1:7b:64:ba:b7:09:59:4d:
d9:d4:58:6f:e8:5e:bc:97:24:5b:f9:69:b8:91:89:
6c:d8:b0:c5:06:84:12:4a:2d:ed:64:a3:75:1f:41:
fb:be:c3:a2:16:18:96:1e:e2:09:12:e3:69:88:ac:
aa:12:9b:73:9f:96:b3:8f:e9:37:21:52:27:cf:ab:
89:f7:4c:26:86:eb:83:9a:4e:c1:3f:bb:88:a0:44:
1e:2d:dd:ff:1f:88:cb:3a:84:20:08:cc:46:ab:a2:
74:eb:c6:bf:ca:0b:b5:50:f3:a3:e7:c3:24:20:ae:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:C8:1C:56:84:AF:E8:65:FC:57:A7:B5:9E:1E:B2:CD:E7:FF:34
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/758AE74C199F11EEA3569640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c5:a3:9e:45:ac:dc:31:49:5c:6e:22:d2:d0:ad:6b:ef:80:
92:7b:80:bf:d3:b0:a0:a3:43:a1:93:4f:e5:73:80:e4:93:a6:
eb:3f:40:d4:ba:86:7c:9f:98:ed:36:a9:20:7e:5a:a3:8f:ab:
0c:81:e8:5c:77:11:88:91:af:38:8d:72:b5:40:dd:58:84:ce:
65:5b:91:35:1e:0c:24:f5:e4:b6:4e:c0:8c:ed:f9:c9:c2:44:
d6:1e:ee:c2:a5:0c:21:6c:8d:d9:23:2d:f4:08:27:f0:5d:f6:
39:23:ab:fb:45:29:ea:6d:5f:ce:28:ed:eb:04:41:35:74:30:
4e:e6:8e:e7:72:25:92:c0:96:77:28:67:e0:c1:63:8a:23:69:
56:eb:d7:e9:30:cd:04:5a:81:36:fa:87:9a:fd:c2:2b:43:c7:
7d:86:d0:1d:a1:a9:d5:6b:34:1c:fe:41:cc:51:b8:9f:c1:f2:
92:b4:4e:40:f4:9e:99:54:30:ab:52:dc:1c:cd:a4:f6:a2:c2:
39:de:48:1a:2f:67:22:2d:2f:0a:02:b5:f4:53:0d:57:5c:21:
2c:be:f3:50:67:ce:78:cd:a5:9a:de:39:22:f8:71:84:90:b9:
8f:9b:e7:80:01:85:66:8f:e2:c1:52:5a:33:16:8d:fc:3e:83:
66:89:6e:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjMwNzAzMTI0NTE2WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGEyYzJkYy04NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuxl4aOzuarrQRDKkZ7Hq5EiXNishszVMzp1SPK96AthDsZUnQq1PbNlpcuk
T2MA8w0NSa2IfVse7gMaBM2tfIFMAOYh6wAiXaIVFkJlharnQLGs1vkmlLwdVwLX
UMV8Qbb6fZ66h3etxXR1bEDUwYr+nAVLj7mU8GQfhsMVPoc4YBFlN4W8u727iKJV
4XtkurcJWU3Z1Fhv6F68lyRb+Wm4kYls2LDFBoQSSi3tZKN1H0H7vsOiFhiWHuIJ
EuNpiKyqEptzn5azj+k3IVInz6uJ90wmhuuDmk7BP7uIoEQeLd3/H4jLOoQgCMxG
q6J068a/ygu1UPOj58MkIK4guwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEuyBxW
hK/oZfxXp7WeHrLN5/80MB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA3NDEvNzdDOTE2OEVCRDEyMTFFOTkwRjRCRjJDQzRGOUFFMDIvNzU4QUU3NEMx
OTlGMTFFRUEzNTY5NjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnU8MwDQYJKoZIhvcNAQELBQADggEBAIPFo55FrNwxSVxu
ItLQrWvvgJJ7gL/TsKCjQ6GTT+VzgOSTpus/QNS6hnyfmO02qSB+WqOPqwyB6Fx3
EYiRrziNcrVA3ViEzmVbkTUeDCT15LZOwIzt+cnCRNYe7sKlDCFsjdkjLfQIJ/Bd
9jkjq/tFKeptX84o7esEQTV0ME7mjudyJZLAlncoZ+DBY4ojaVbr1+kwzQRagTb6
h5r9witDx32G0B2hqdVrNBz+QcxRuJ/B8pK0TkD0nplUMKtS3BzNpPaiwjneSBov
ZyItLwoCtfRTDVdcISy+81BnznjNpZreOSL4cYSQuY+b54ABhWaP4sFSWjMWjfw+
g2aJbgI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org