Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
File: B7313F5089A111EC8A43DF14C4F9AE02.roa (raw, json)
Hash identifier: vD62Ay/n25mm+guAYer/pK5opClVyNC83RZRsFIlLkc=
Subject key identifier: E0:C4:3D:0A:70:26:15:CA:73:E3:06:57:D3:42:DB:67:81:ED:BD:EB
Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial: 02
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
Signing time: Wed 09 Feb 2022 12:13:40 +0000
ROA not before: Wed 09 Feb 2022 12:13:40 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 200325
IP address blocks: 103.180.114.0/23 maxlen: 24
2400:52e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Validity
Not Before: Feb 9 12:13:40 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6203aff4-bb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:16:9f:c7:ae:42:3b:97:25:dd:73:35:0b:
a0:00:34:46:b9:88:06:c7:3b:9e:25:58:ca:a4:d6:
3c:5a:eb:16:30:d1:bf:87:c8:cd:d3:57:13:d6:bd:
4d:e9:22:28:e3:fc:70:72:d6:9f:03:8f:8e:10:80:
99:f3:14:f4:fe:9b:90:df:4b:d1:02:b0:5f:04:1c:
d8:35:5c:b0:54:59:a7:5a:0c:b4:57:67:51:07:f3:
42:61:53:2f:ab:f9:64:c2:0c:ea:87:f1:9a:cc:fb:
cc:41:37:dd:ca:c6:b1:ac:03:cf:33:aa:9d:9e:56:
81:bd:6d:b0:a4:11:fa:1e:b7:de:aa:62:02:81:76:
f3:2c:99:f2:07:a9:97:03:46:7a:76:46:41:be:7e:
fd:81:d9:8d:12:84:ae:81:47:cc:b8:b9:bf:92:c0:
d1:c7:63:c5:a1:ae:49:ea:ca:5a:03:59:95:84:cc:
9e:4e:53:ac:ee:78:f4:46:e6:45:2f:37:31:e8:ee:
09:03:86:cd:56:ef:a8:de:d2:c2:79:8b:45:38:4c:
27:c9:2c:89:72:45:a3:9c:4c:4f:30:d5:5b:23:b0:
42:a2:23:55:33:2b:0d:d0:41:fa:d2:c2:d7:43:d3:
21:b2:40:eb:dc:3e:f9:f0:59:b7:be:98:f0:cd:9a:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:3D:0A:70:26:15:CA:73:E3:06:57:D3:42:DB:67:81:ED:BD:EB
X509v3 Authority Key Identifier:
keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.114.0/23
IPv6:
2400:52e0::/32
Signature Algorithm: sha256WithRSAEncryption
56:64:6c:2c:4c:00:91:47:9a:c8:55:34:94:e8:1b:f3:b4:4e:
a8:4f:fd:36:32:81:4d:34:f0:ce:2c:83:a5:3c:6b:10:a7:70:
fe:c4:19:7d:bb:ff:2b:ef:28:ae:7f:0f:7b:e6:07:89:9e:0f:
17:fb:b2:3f:4c:ec:8d:d1:29:60:fb:77:50:99:09:38:87:13:
9f:c0:52:4b:fc:cb:28:eb:6c:ba:c4:ba:96:97:2a:2d:d6:ed:
30:04:99:86:66:5c:c3:f1:e8:2a:a5:40:65:60:ec:97:b1:92:
3b:88:fd:d0:ce:ca:07:1c:d5:2a:f6:6a:7a:1b:0b:da:5f:22:
8c:31:1d:6d:00:ff:fb:f4:f2:47:05:e4:3d:eb:34:82:42:4e:
68:31:4c:aa:91:58:c1:4b:59:ed:03:ac:ef:a2:47:1c:3a:52:
e8:e2:6f:b1:18:5a:02:06:d9:3c:3b:f0:c0:f7:15:1e:65:58:
2e:c1:0d:75:52:d1:fc:d4:1d:d6:31:9b:41:64:8b:38:a7:ca:
be:20:39:45:9a:cb:ea:f6:ea:74:77:e1:d8:72:13:92:9e:51:
a6:29:8f:06:a4:71:f3:ca:06:2e:a2:63:5a:5a:20:84:72:59:
c8:36:a0:98:d0:11:6f:91:e1:74:d6:52:94:a3:8b:06:80:71:
80:81:9c:cc
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUIwODExMC8GA1UEBRMoNjE0Q0NEMjRGNzg1RTkyOTkyMTU5MTY0MDgyOTQwNDJG
MTQ2MzI5NDAeFw0yMjAyMDkxMjEzNDBaFw0yMzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyMDNhZmY0LWJiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC51xafx65CO5cl3XM1C6AANEa5iAbHO54lWMqk1jxa6xYw0b+HyM3TVxPWvU3p
Iijj/HBy1p8Dj44QgJnzFPT+m5DfS9ECsF8EHNg1XLBUWadaDLRXZ1EH80JhUy+r
+WTCDOqH8ZrM+8xBN93KxrGsA88zqp2eVoG9bbCkEfoet96qYgKBdvMsmfIHqZcD
Rnp2RkG+fv2B2Y0ShK6BR8y4ub+SwNHHY8WhrknqyloDWZWEzJ5OU6zuePRG5kUv
NzHo7gkDhs1W76je0sJ5i0U4TCfJLIlyRaOcTE8w1VsjsEKiI1UzKw3QQfrSwtdD
0yGyQOvcPvnwWbe+mPDNmi0FAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU4MQ9CnAm
Fcpz4wZX00LbZ4HtveswHwYDVR0jBBgwFoAUYUzNJPeF6SmSFZFkCClAQvFGMpQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjA4LzM3NTUzQTU2ODk5
RDExRUM4QjQyNEUwQkM0RjlBRTAyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01w
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWVV6TkpQZUY2U21TRlpGa0NDbEFRdkZHTXBRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9CNzMxM0Y1MDg5
QTExMUVDOEE0M0RGMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWe0cjANBAIAAjAHAwUAJABS4DANBgkqhkiG9w0BAQsFAAOC
AQEAVmRsLEwAkUeayFU0lOgb87ROqE/9NjKBTTTwziyDpTxrEKdw/sQZfbv/K+8o
rn8Pe+YHiZ4PF/uyP0zsjdEpYPt3UJkJOIcTn8BSS/zLKOtsusS6lpcqLdbtMASZ
hmZcw/HoKqVAZWDsl7GSO4j90M7KBxzVKvZqehsL2l8ijDEdbQD/+/TyRwXkPes0
gkJOaDFMqpFYwUtZ7QOs76JHHDpS6OJvsRhaAgbZPDvwwPcVHmVYLsENdVLR/NQd
1jGbQWSLOKfKviA5RZrL6vbqdHfh2HITkp5RpimPBqRx88oGLqJjWloghHJZyDag
mNARb5HhdNZSlKOLBoBxgIGczA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org