Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/BC57E376AEC211EC8D8D1B0CC4F9AE02.roa
File: BC57E376AEC211EC8D8D1B0CC4F9AE02.roa (raw, json)
Hash identifier: HE0Vz+oSGbcmIbyzSDbVKAqaebKc8TWPEed0buXacFg=
Subject key identifier: 97:20:58:C5:38:8D:67:44:FE:54:86:58:33:EA:47:8C:3A:70:BC:CA
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0140
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/BC57E376AEC211EC8D8D1B0CC4F9AE02.roa
Signing time: Mon 28 Mar 2022 18:13:15 +0000
ROA not before: Mon 28 Mar 2022 18:13:15 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 10753
IP address blocks: 103.134.74.0/24 maxlen: 24
103.134.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Mar 28 18:13:15 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6241fabb-1106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:83:4c:78:6d:4c:6e:d1:21:9b:09:b1:f0:
c3:96:42:f5:72:29:fc:75:1b:87:0d:7a:58:53:b6:
5d:76:2c:99:68:46:dd:46:ac:d2:18:e3:42:d9:d3:
7f:8e:e1:06:d6:52:40:e7:1f:31:6e:c7:a7:a1:8c:
f3:04:26:aa:a1:f6:16:60:2b:4e:35:93:bd:4d:67:
e3:d0:9e:61:8c:60:db:14:4d:27:9f:5b:94:06:22:
16:1a:76:de:39:b7:a5:8a:55:6b:38:44:58:76:c4:
4f:b3:46:68:2b:af:a1:1e:c4:24:ea:ab:bd:0f:3b:
37:d8:1a:65:2a:db:ed:0e:e5:94:96:07:cd:bd:1c:
c7:a2:e9:90:3f:80:92:d0:c2:76:23:e9:de:f6:cd:
8c:f6:b0:82:c9:d0:3a:41:9c:c1:16:62:8a:93:29:
16:29:10:75:36:a7:d2:ab:78:b9:11:db:1c:c0:88:
26:25:ff:e0:23:4c:29:26:cc:e6:ad:3d:f6:ee:62:
66:33:96:9e:c1:1e:07:f8:20:87:8a:32:50:80:bf:
23:cc:42:54:eb:26:45:fa:bb:7d:b8:9d:65:29:c2:
79:33:63:4c:d5:f4:3a:3a:88:36:dd:ff:40:15:a8:
87:bf:80:ec:1d:4a:68:f6:f3:53:0a:8f:c8:d0:ff:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:20:58:C5:38:8D:67:44:FE:54:86:58:33:EA:47:8C:3A:70:BC:CA
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/BC57E376AEC211EC8D8D1B0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.74.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:da:45:bf:89:0d:de:10:68:9b:ea:d9:94:47:c1:17:64:da:
a1:0a:8a:23:97:71:46:67:ae:39:9c:11:93:36:e1:8e:b7:9f:
21:fa:3d:ad:48:45:a7:76:27:a6:18:f5:ad:9a:11:b2:16:bc:
82:97:11:b0:31:ea:bf:5f:a3:e1:98:38:dc:4a:aa:07:e8:23:
39:5c:1b:e9:32:a1:b0:d7:26:79:61:4b:89:1a:05:2f:53:d6:
8e:08:d8:26:c7:72:6f:e2:26:dd:48:24:3a:99:c1:0f:a5:49:
c8:07:c8:53:8c:bd:e8:33:eb:2b:cb:7b:65:6e:db:fd:7e:28:
92:31:58:a9:53:87:82:9b:81:62:81:0b:9b:eb:20:a5:d2:f4:
65:2e:c4:d6:2b:f9:d8:b7:fc:91:2f:85:04:b9:89:e8:9c:29:
93:ab:39:b0:76:85:87:d7:43:77:6a:ee:15:6d:82:97:bd:eb:
7d:48:c1:1e:24:da:b1:87:5c:71:e8:99:58:db:9b:fb:94:ed:
7b:3f:98:e7:eb:e0:28:a2:b9:78:17:4e:64:6b:7e:81:71:43:
ae:bf:45:5d:94:c1:9a:86:b3:bc:81:51:da:e2:c5:ef:7c:bc:
c0:f1:8a:0a:87:f7:84:9a:26:64:f5:11:08:e6:a2:8b:4e:27:
c8:a5:d8:8b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw
NzBDN0YzRUQwHhcNMjIwMzI4MTgxMzE1WhcNMjIxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjQxZmFiYi0xMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuH+DTHhtTG7RIZsJsfDDlkL1cin8dRuHDXpYU7ZddiyZaEbdRqzSGONC2dN/
juEG1lJA5x8xbsenoYzzBCaqofYWYCtONZO9TWfj0J5hjGDbFE0nn1uUBiIWGnbe
ObelilVrOERYdsRPs0ZoK6+hHsQk6qu9Dzs32BplKtvtDuWUlgfNvRzHoumQP4CS
0MJ2I+ne9s2M9rCCydA6QZzBFmKKkykWKRB1NqfSq3i5EdscwIgmJf/gI0wpJszm
rT327mJmM5aewR4H+CCHijJQgL8jzEJU6yZF+rt9uJ1lKcJ5M2NM1fQ6Oog23f9A
FaiHv4DsHUpo9vNTCo/I0P9smwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJcgWMU4
jWdE/lSGWDPqR4w6cLzKMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy
MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBDOUIvQTQ2RTk4OUEzMjJCMTFFQzk3RjhDRjdDQzRGOUFFMDIvQkM1N0UzNzZB
RUMyMTFFQzhEOEQxQjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnhkowDQYJKoZIhvcNAQELBQADggEBAJzaRb+JDd4QaJvq
2ZRHwRdk2qEKiiOXcUZnrjmcEZM24Y63nyH6Pa1IRad2J6YY9a2aEbIWvIKXEbAx
6r9fo+GYONxKqgfoIzlcG+kyobDXJnlhS4kaBS9T1o4I2CbHcm/iJt1IJDqZwQ+l
ScgHyFOMvegz6yvLe2Vu2/1+KJIxWKlTh4KbgWKBC5vrIKXS9GUuxNYr+di3/JEv
hQS5ieicKZOrObB2hYfXQ3dq7hVtgpe9631IwR4k2rGHXHHomVjbm/uU7Xs/mOfr
4CiiuXgXTmRrfoFxQ66/RV2UwZqGs7yBUdrixe98vMDxigqH94SaJmT1EQjmootO
J8il2Is=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org