Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7AB5D850837F11EDB3636C36C4F9AE02.roa
File: 7AB5D850837F11EDB3636C36C4F9AE02.roa (raw, json)
Hash identifier: 3vTvJ6YKErNbPDijS3ac8uNFBxZigHYMnVaMxK1n2YU=
Subject key identifier: 32:6E:4C:2A:3F:52:0D:96:2F:10:76:FC:03:45:7F:3B:9F:A3:E7:9E
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 073D
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7AB5D850837F11EDB3636C36C4F9AE02.roa
Signing time: Sat 24 Dec 2022 11:38:26 +0000
ROA not before: Sat 24 Dec 2022 11:38:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133973
IP address blocks: 103.112.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Dec 24 11:38:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a6e4b2-5f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:17:ab:d3:3c:2b:a2:2e:b5:f6:b3:8f:b3:
1c:47:58:75:35:cd:87:db:44:49:36:55:32:e4:fd:
88:4b:1d:f5:7b:23:43:aa:8f:05:73:0f:f8:09:4c:
c7:07:bc:c1:3b:be:6d:2d:54:9f:7d:8b:8c:bb:75:
e5:fd:57:7b:3d:95:43:14:2a:1f:f5:18:40:be:1e:
b4:f8:2b:f3:9d:18:42:2b:77:a8:85:d8:65:a2:9e:
56:44:c1:6a:29:f4:41:22:e2:98:df:b3:98:7b:66:
63:bb:f5:f5:b8:57:a7:1f:8c:03:f3:be:94:db:76:
69:4f:da:fc:3c:a9:6f:d2:b0:b7:14:f0:63:7b:b5:
93:ae:51:82:ae:eb:1a:67:85:ee:20:2c:dc:6e:b6:
90:ad:4f:f2:c0:bb:91:ba:e8:de:66:cd:0c:82:68:
ed:fd:3a:18:8b:8c:77:0d:c4:63:7c:2b:0c:8a:24:
ce:ab:5d:c3:2a:7a:16:1d:f0:35:ea:a6:eb:6d:76:
36:31:e3:c8:0f:bf:65:8a:63:23:07:d3:7b:59:07:
b8:4e:f5:de:1e:62:e5:7d:d9:fd:17:7e:2a:4e:f1:
70:1f:4f:89:9b:d5:ca:d5:7f:58:91:3d:55:17:ed:
7d:c4:96:c5:a0:32:5d:ba:d2:00:be:ac:4e:59:bc:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:4C:2A:3F:52:0D:96:2F:10:76:FC:03:45:7F:3B:9F:A3:E7:9E
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7AB5D850837F11EDB3636C36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1b:5c:3c:95:fb:9a:a2:00:a2:41:73:e3:58:58:11:38:23:
c6:f4:a9:0e:fc:4b:a0:20:80:05:71:83:d1:ba:43:cd:59:57:
32:f3:be:f7:c1:44:b0:78:64:c5:93:b3:bd:e5:5f:ac:37:e8:
b1:ed:08:c0:1d:a8:91:3e:f4:84:58:7f:e4:8d:ef:f9:43:a3:
75:b9:94:bb:75:40:88:96:a9:49:bd:8e:9e:b9:1e:6e:68:f8:
e5:2c:af:6d:e2:d4:91:be:d7:f2:09:c1:3f:26:72:83:df:7b:
ea:55:94:d0:cb:c6:72:12:b3:ed:d0:68:78:a8:88:23:c2:2e:
bd:06:95:97:55:a8:ed:05:af:78:bb:44:67:81:1f:e0:9c:3a:
ac:58:f3:ba:e7:87:de:0f:39:2c:0e:c3:50:e5:d5:b9:56:d0:
ea:e4:18:b8:ff:5c:d9:4a:a9:6f:86:8a:2b:30:98:0a:20:47:
67:d2:aa:7c:10:10:f5:5f:15:68:d0:81:92:bc:32:16:18:48:
1b:1f:85:73:9b:ef:f9:b0:54:5f:3f:0e:7b:1f:f1:c3:26:ad:
de:c8:2d:18:de:3b:8d:7c:3f:d6:33:49:c5:36:fa:69:37:58:
e0:b8:11:c4:64:82:14:0c:30:f5:c8:57:a1:4a:c2:14:5e:87:
07:95:be:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjIxMjI0MTEzODI2WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2E2ZTRiMi01ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuS8Xq9M8K6Iutfazj7McR1h1Nc2H20RJNlUy5P2ISx31eyNDqo8Fcw/4CUzH
B7zBO75tLVSffYuMu3Xl/Vd7PZVDFCof9RhAvh60+CvznRhCK3eohdhlop5WRMFq
KfRBIuKY37OYe2Zju/X1uFenH4wD876U23ZpT9r8PKlv0rC3FPBje7WTrlGCrusa
Z4XuICzcbraQrU/ywLuRuujeZs0Mgmjt/ToYi4x3DcRjfCsMiiTOq13DKnoWHfA1
6qbrbXY2MePID79limMjB9N7WQe4TvXeHmLlfdn9F34qTvFwH0+Jm9XK1X9YkT1V
F+19xJbFoDJdutIAvqxOWbwISQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJuTCo/
Ug2WLxB2/ANFfzufo+eeMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvN0FCNUQ4NTA4
MzdGMTFFREIzNjM2QzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncAEwDQYJKoZIhvcNAQELBQADggEBAG8bXDyV+5qiAKJB
c+NYWBE4I8b0qQ78S6AggAVxg9G6Q81ZVzLzvvfBRLB4ZMWTs73lX6w36LHtCMAd
qJE+9IRYf+SN7/lDo3W5lLt1QIiWqUm9jp65Hm5o+OUsr23i1JG+1/IJwT8mcoPf
e+pVlNDLxnISs+3QaHioiCPCLr0GlZdVqO0Fr3i7RGeBH+CcOqxY87rnh94POSwO
w1Dl1blW0OrkGLj/XNlKqW+GiiswmAogR2fSqnwQEPVfFWjQgZK8MhYYSBsfhXOb
7/mwVF8/Dnsf8cMmrd7ILRjeO418P9YzScU2+mk3WOC4EcRkghQMMPXIV6FKwhRe
hweVvtI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-fra.rpki-client.org