Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7EAC4CBA7C5411EC825ECF5DC4F9AE02.roa
File: 7EAC4CBA7C5411EC825ECF5DC4F9AE02.roa (raw, json)
Hash identifier: Qq5azthFOTRtXAb8e1ilXUMTsEy+AMQ2RErbCBlIDHU=
Subject key identifier: 13:B5:8C:11:E6:D1:C7:D6:AB:43:7B:94:0A:BF:86:AB:9A:E9:69:C2
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 05DD
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7EAC4CBA7C5411EC825ECF5DC4F9AE02.roa
Signing time: Thu 05 May 2022 22:48:53 +0000
ROA not before: Thu 05 May 2022 22:48:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.112.0.0/24 maxlen: 24
103.112.2.0/24 maxlen: 24
103.112.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: May 5 22:48:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62745455-fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:5c:17:a5:3c:9e:0b:82:71:2c:b9:ac:17:
ae:bc:91:77:02:c7:16:ce:20:36:29:c3:ec:79:81:
ae:28:af:f0:9e:3e:b8:73:fe:5d:45:2f:bd:45:cc:
28:39:69:8d:a0:4c:36:1e:36:fb:62:cf:ea:8e:87:
df:ce:d4:69:6c:03:69:6c:33:42:df:45:ea:02:9b:
ff:4d:2b:8e:43:17:f8:1d:4f:89:f1:dd:62:ef:1a:
b5:51:f0:69:78:f8:8d:5c:2f:24:10:46:6f:a1:4c:
2d:46:89:74:6c:82:de:23:61:b3:b9:40:53:73:bb:
5a:af:3c:0b:93:10:62:97:f3:05:e0:62:9f:39:51:
82:91:f0:28:37:8a:41:e5:e1:c3:a5:ee:7f:3b:c2:
eb:59:5a:55:f8:6f:d2:56:f4:f0:6d:38:6f:f0:51:
f3:7a:80:bf:c0:39:6e:b0:b7:90:c3:9c:2d:20:91:
a0:d3:a0:d0:bf:f6:78:72:c8:4f:37:05:ad:02:e9:
d4:de:e6:bd:2c:1f:64:f3:90:e4:72:5d:44:94:a2:
75:42:57:3d:a9:42:94:1a:9c:1e:db:24:fd:72:0f:
9e:2d:e0:e5:78:43:b3:34:dc:51:54:6c:25:0f:7b:
31:b9:de:9e:2d:ae:05:6c:02:2f:60:dc:cf:58:d1:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:8C:11:E6:D1:C7:D6:AB:43:7B:94:0A:BF:86:AB:9A:E9:69:C2
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/7EAC4CBA7C5411EC825ECF5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/24
103.112.2.0/23
Signature Algorithm: sha256WithRSAEncryption
20:5d:b1:1b:be:13:98:c1:af:9b:2a:8a:69:39:4b:64:64:c7:
39:68:f1:b9:f4:12:85:df:e2:e0:96:a6:97:36:05:ec:df:69:
95:06:21:9a:24:83:fa:4c:49:ab:91:6c:9d:31:cc:bf:da:42:
20:01:36:e4:d3:63:93:51:7c:72:bb:2c:fe:0f:c7:9b:d2:4b:
41:d7:cc:83:a0:2b:fc:64:1d:41:c3:aa:81:ee:92:12:ab:23:
a5:40:49:74:f6:12:a5:fd:f3:75:91:d5:24:7a:32:2e:32:f9:
56:be:41:71:0e:42:5e:cf:09:c6:86:f9:e8:6d:53:dc:e6:bd:
21:71:72:9f:1a:6b:ea:1f:15:d4:d3:d4:94:2a:d0:3e:bd:de:
f5:5d:82:00:16:86:2e:6b:db:09:c5:6c:82:ee:ec:2a:d6:28:
f6:09:bd:30:4d:6d:b6:53:27:1b:65:2a:16:c8:16:14:2f:b1:
04:7a:e1:18:fb:56:6f:b0:2b:9f:2f:0a:d1:d4:04:2c:fc:24:
7f:e0:b0:fc:7e:0b:82:26:c2:8f:43:42:0e:c2:e5:0f:ca:b2:
95:47:d8:a1:36:4c:60:03:2d:48:b6:c7:3d:bd:b7:92:cc:b4:
cf:09:94:49:bc:9f:43:c6:3b:0d:5f:53:1a:e5:df:10:7c:d2:
d6:e7:d6:23
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjIwNTA1MjI0ODUzWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjc0NTQ1NS1mYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmwRcF6U8nguCcSy5rBeuvJF3AscWziA2KcPseYGuKK/wnj64c/5dRS+9Rcwo
OWmNoEw2Hjb7Ys/qjoffztRpbANpbDNC30XqApv/TSuOQxf4HU+J8d1i7xq1UfBp
ePiNXC8kEEZvoUwtRol0bILeI2GzuUBTc7tarzwLkxBil/MF4GKfOVGCkfAoN4pB
5eHDpe5/O8LrWVpV+G/SVvTwbThv8FHzeoC/wDlusLeQw5wtIJGg06DQv/Z4cshP
NwWtAunU3ua9LB9k85Dkcl1ElKJ1Qlc9qUKUGpwe2yT9cg+eLeDleEOzNNxRVGwl
D3sxud6eLa4FbAIvYNzPWNHHqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBO1jBHm
0cfWq0N7lAq/hqua6WnCMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvN0VBQzRDQkE3
QzU0MTFFQzgyNUVDRjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABncAADBAFncAIwDQYJKoZIhvcNAQELBQADggEBACBdsRu+
E5jBr5sqimk5S2Rkxzlo8bn0EoXf4uCWppc2BezfaZUGIZokg/pMSauRbJ0xzL/a
QiABNuTTY5NRfHK7LP4Px5vSS0HXzIOgK/xkHUHDqoHukhKrI6VASXT2EqX983WR
1SR6Mi4y+Va+QXEOQl7PCcaG+ehtU9zmvSFxcp8aa+ofFdTT1JQq0D693vVdggAW
hi5r2wnFbILu7CrWKPYJvTBNbbZTJxtlKhbIFhQvsQR64Rj7Vm+wK58vCtHUBCz8
JH/gsPx+C4Imwo9DQg7C5Q/KspVH2KE2TGADLUi2xz29t5LMtM8JlEm8n0PGOw1f
Uxrl3xB80tbn1iM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org