Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
File: B82F77DE71E811E8ACB86768C4F9AE02.roa (raw, json)
Hash identifier: wypSowIiJqz1vuJEeVjlkKy9B3nmkxI0NlOZ1geBf8Q=
Subject key identifier: 69:C2:1D:06:F8:5D:88:24:3A:A8:12:C9:01:74:4B:E9:E1:CA:5D:48
Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial: 112B
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
Signing time: Tue 26 Apr 2022 06:04:41 +0000
ROA not before: Tue 26 Apr 2022 06:04:41 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 136557
IP address blocks: 103.108.228.0/23 maxlen: 23
103.108.228.0/24 maxlen: 24
103.108.229.0/24 maxlen: 24
103.108.231.0/24 maxlen: 24
2402:7340:1::/48 maxlen: 48
2402:7340:2::/48 maxlen: 48
2402:7340:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Validity
Not Before: Apr 26 06:04:41 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62678b79-c5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:92:f9:92:aa:a0:e1:1a:23:b2:c1:41:ee:
6c:c8:f6:3a:ea:e0:3f:82:84:9d:52:4b:df:26:f8:
d3:c6:bb:49:7a:77:af:b1:55:1b:5e:95:bb:dd:97:
6a:05:17:b9:ec:67:ed:65:80:94:de:85:2e:96:a6:
b2:ad:47:cf:61:24:56:16:32:2f:5f:da:e2:01:da:
4d:f3:da:35:48:71:f8:60:19:d3:83:98:10:91:23:
cb:27:52:7a:5e:bf:7e:00:8b:5a:f0:77:d2:7a:dd:
69:d1:cc:c7:47:b0:56:fd:48:3f:0a:e7:8b:ff:20:
aa:53:81:bc:a1:cb:b3:3b:ab:9c:14:0a:df:fb:cb:
52:b3:53:fb:31:b1:e4:4c:f3:46:a2:ab:03:ed:71:
c6:50:a2:dc:99:15:7e:9b:e7:f3:6b:a5:c3:c4:af:
e0:78:e5:1f:03:9a:03:cf:ac:ac:b1:27:40:cc:22:
29:61:04:bf:fd:b1:ec:b9:d2:8c:88:04:7c:5f:34:
9e:14:e8:b5:66:42:b4:20:50:2f:4c:e7:59:b9:cc:
74:87:e9:24:1d:6f:7b:82:81:22:c9:c8:a4:9f:d1:
43:f0:90:90:99:0f:74:fe:53:b9:38:a3:bb:e1:5d:
9c:45:43:2c:96:85:db:84:c7:31:df:49:41:5a:6e:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:1D:06:F8:5D:88:24:3A:A8:12:C9:01:74:4B:E9:E1:CA:5D:48
X509v3 Authority Key Identifier:
keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.228.0/23
103.108.231.0/24
IPv6:
2402:7340:1::-2402:7340:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:15:38:fb:23:63:62:33:75:48:1e:90:db:07:6e:4b:d4:92:
c9:c8:b0:27:94:9f:a6:2c:50:44:ef:2c:3e:d0:fb:05:3d:b5:
f7:bb:02:76:ba:ff:ae:be:0b:00:02:ec:64:ae:b0:0d:0d:30:
6b:6b:96:c2:a8:2c:cd:b3:c1:db:34:df:58:72:47:77:96:4b:
0a:7b:65:91:0e:eb:50:48:91:01:b1:38:5f:f1:34:bc:12:18:
75:04:aa:71:b0:fc:df:18:f8:89:cb:fd:72:87:48:7c:28:a6:
75:de:f1:43:2c:ba:15:7b:d8:ca:b6:f0:28:29:a9:96:ca:4d:
7a:e8:58:d6:85:1f:a6:14:1f:79:38:72:5c:5b:95:a2:ab:04:
84:10:1b:75:a9:f1:fb:95:0e:b9:44:71:74:3f:ae:23:6c:a7:
71:b8:41:39:97:de:12:cf:2c:f7:3a:f7:e9:70:1c:42:d3:70:
80:bf:11:97:7b:d3:fa:52:a8:4c:2a:56:b0:9d:91:a0:04:0c:
7d:52:53:5f:aa:ab:37:95:25:a3:3a:9d:af:d2:bf:d8:24:94:
77:7d:7b:1f:33:08:02:75:51:1a:98:26:d8:56:8d:6a:08:25:
61:d0:31:c1:b4:1f:3f:b0:bb:80:de:b1:5d:7e:15:22:18:94:
ce:50:96:6d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICESswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC
MUQwNkUyRTMwHhcNMjIwNDI2MDYwNDQxWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjY3OGI3OS1jNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnXyS+ZKqoOEaI7LBQe5syPY66uA/goSdUkvfJvjTxrtJenevsVUbXpW73Zdq
BRe57GftZYCU3oUulqayrUfPYSRWFjIvX9riAdpN89o1SHH4YBnTg5gQkSPLJ1J6
Xr9+AIta8HfSet1p0czHR7BW/Ug/CueL/yCqU4G8ocuzO6ucFArf+8tSs1P7MbHk
TPNGoqsD7XHGUKLcmRV+m+fza6XDxK/geOUfA5oDz6yssSdAzCIpYQS//bHsudKM
iAR8XzSeFOi1ZkK0IFAvTOdZucx0h+kkHW97goEiycikn9FD8JCQmQ90/lO5OKO7
4V2cRUMsloXbhMcx30lBWm5XwwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGnCHQb4
XYgkOqgSyQF0S+nhyl1IMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx
RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvQjgyRjc3REU3
MUU4MTFFOEFDQjg2NzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E
MjAwMBIEAgABMAwDBAFnbOQDBABnbOcwGgQCAAIwFDASAwcAJAJzQAABAwcCJAJz
QAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBJFTj7I2NiM3VIHpDbB25L1JLJyLAnlJ+m
LFBE7yw+0PsFPbX3uwJ2uv+uvgsAAuxkrrANDTBra5bCqCzNs8HbNN9Yckd3lksK
e2WRDutQSJEBsThf8TS8Ehh1BKpxsPzfGPiJy/1yh0h8KKZ13vFDLLoVe9jKtvAo
KamWyk166FjWhR+mFB95OHJcW5WiqwSEEBt1qfH7lQ65RHF0P64jbKdxuEE5l94S
zyz3OvfpcBxC03CAvxGXe9P6UqhMKlawnZGgBAx9UlNfqqs3lSWjOp2v0r/YJJR3
fXsfMwgCdVEamCbYVo1qCCVh0DHBtB8/sLuA3rFdfhUiGJTOUJZt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org