Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/58AD2B889AD111EC890E2B39C4F9AE02.roa
File: 58AD2B889AD111EC890E2B39C4F9AE02.roa (raw, json)
Hash identifier: HvoEs+SgEKqxyf6FXmakDh4J+78Zc4XOVp/CtwQl0TM=
Subject key identifier: 69:06:02:E7:83:1D:9E:85:E5:99:FC:A7:7A:87:7E:93:8C:1F:50:C0
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 0D7B
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/58AD2B889AD111EC890E2B39C4F9AE02.roa
Signing time: Thu 17 Mar 2022 18:45:20 +0000
ROA not before: Thu 17 Mar 2022 18:45:20 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 0
IP address blocks: 103.135.100.0/24 maxlen: 24
103.135.102.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Mar 17 18:45:20 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623381bf-b026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:a8:f8:57:cd:0f:82:4d:54:d3:5d:7a:7e:
1e:e0:ca:b1:ec:8d:7c:6b:a7:68:6d:f9:80:97:bb:
47:58:81:0c:55:20:5f:20:1e:52:98:ee:2b:24:df:
af:2f:ce:b3:7b:1a:cd:1a:3b:3e:a3:96:d5:d8:8f:
6a:a3:40:5f:dd:31:e7:32:d8:5a:9e:04:1a:e2:41:
bf:97:32:e5:bf:71:d1:72:13:f6:63:70:02:da:ba:
b9:e4:47:bb:a2:1e:38:c9:3e:75:75:58:dc:e0:65:
9d:72:eb:be:e8:d3:c4:5b:eb:cb:8a:bc:a8:fc:7a:
0f:ac:c0:53:96:28:b9:1e:92:2e:53:15:32:5d:49:
2e:2f:06:2e:86:1d:6d:41:55:c1:49:7e:ec:c1:16:
52:a2:6a:ee:e7:0e:73:eb:05:d4:e0:9a:cc:7b:e8:
dc:d4:2c:a3:49:54:37:93:9d:19:2c:2a:4b:43:74:
57:c7:de:74:bb:1a:26:ba:11:c3:f9:08:9c:74:5e:
60:5f:42:40:63:1c:0c:50:34:9e:c0:8a:58:82:3e:
0d:55:ef:26:56:12:f3:ca:2a:2a:41:ab:57:da:69:
95:21:6a:e9:16:ec:0f:77:bb:bf:ca:ab:a8:66:99:
34:42:e5:47:5b:32:bf:54:e4:0c:43:8b:b5:d7:3a:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:02:E7:83:1D:9E:85:E5:99:FC:A7:7A:87:7E:93:8C:1F:50:C0
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/58AD2B889AD111EC890E2B39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.100.0/24
103.135.102.0/23
Signature Algorithm: sha256WithRSAEncryption
78:73:10:fb:29:43:00:95:35:64:12:04:68:ae:fd:ee:63:c8:
ba:0f:1f:c0:86:ba:af:0c:75:35:70:63:77:59:6e:4c:d1:40:
36:a8:ed:3b:15:0a:f7:17:dc:7f:30:62:1d:1c:a4:d7:9e:88:
84:a8:16:a3:51:17:da:1d:07:8c:d5:66:c2:f5:48:fd:66:a1:
08:2e:73:09:9d:95:0a:ff:33:ea:9b:ea:60:1a:74:13:ec:dc:
84:11:43:dc:f2:21:70:5c:cf:f2:14:66:bd:df:f9:c1:71:64:
f4:85:7e:1c:d4:80:aa:5f:05:fd:c6:59:1f:41:04:c3:84:88:
4a:89:5f:db:12:9b:81:90:59:e7:47:f4:ed:1e:c8:93:43:cd:
ba:1d:8d:3a:68:0b:8b:d5:84:53:27:2a:2b:27:40:e3:41:d4:
03:b1:43:24:42:9b:69:07:2a:14:71:0f:63:57:4f:77:fb:5b:
cd:ba:55:36:8c:6e:94:08:4a:da:6b:47:10:66:0a:09:fb:4c:
72:83:36:d7:06:7b:05:60:2a:30:50:89:e4:b6:60:02:0c:8e:
67:c6:fe:e6:ae:a8:32:fb:60:1b:8d:6c:82:69:79:64:e0:69:
6d:2f:e5:4f:20:7c:5c:9f:61:fc:21:7f:87:c3:5b:a1:98:92:
58:71:79:a8
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz
QzBDRUNBMzIwHhcNMjIwMzE3MTg0NTIwWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjMzODFiZi1iMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmf6o+FfND4JNVNNden4e4Mqx7I18a6dobfmAl7tHWIEMVSBfIB5SmO4rJN+v
L86zexrNGjs+o5bV2I9qo0Bf3THnMthangQa4kG/lzLlv3HRchP2Y3AC2rq55Ee7
oh44yT51dVjc4GWdcuu+6NPEW+vLiryo/HoPrMBTlii5HpIuUxUyXUkuLwYuhh1t
QVXBSX7swRZSomru5w5z6wXU4JrMe+jc1CyjSVQ3k50ZLCpLQ3RXx950uxomuhHD
+QicdF5gX0JAYxwMUDSewIpYgj4NVe8mVhLzyioqQatX2mmVIWrpFuwPd7u/yquo
Zpk0QuVHWzK/VOQMQ4u11zov1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGkGAueD
HZ6F5Zn8p3qHfpOMH1DAMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4
QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvNThBRDJCODg5
QUQxMTFFQzg5MEUyQjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnh2QDBAFnh2YwDQYJKoZIhvcNAQELBQADggEBAHhzEPsp
QwCVNWQSBGiu/e5jyLoPH8CGuq8MdTVwY3dZbkzRQDao7TsVCvcX3H8wYh0cpNee
iISoFqNRF9odB4zVZsL1SP1moQgucwmdlQr/M+qb6mAadBPs3IQRQ9zyIXBcz/IU
Zr3f+cFxZPSFfhzUgKpfBf3GWR9BBMOEiEqJX9sSm4GQWedH9O0eyJNDzbodjTpo
C4vVhFMnKisnQONB1AOxQyRCm2kHKhRxD2NXT3f7W826VTaMbpQIStprRxBmCgn7
THKDNtcGewVgKjBQieS2YAIMjmfG/uauqDL7YBuNbIJpeWTgaW0v5U8gfFyfYfwh
f4fDW6GYklhxeag=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org