Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/CA810CE2994611ED8083BB73C4F9AE02.roa
File: CA810CE2994611ED8083BB73C4F9AE02.roa (raw, json)
Hash identifier: xLHOfE87Hy22/GpABvWdFAVsmZVWyMtEl4/Zp01eVBs=
Subject key identifier: 1A:3B:D1:60:72:E8:24:62:01:35:AD:C7:8C:3B:84:38:E4:EA:A9:92
Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial: 08B7
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/CA810CE2994611ED8083BB73C4F9AE02.roa
Signing time: Tue 02 May 2023 22:18:57 +0000
ROA not before: Tue 02 May 2023 22:18:57 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 6939
IP address blocks: 103.148.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Validity
Not Before: May 2 22:18:57 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64518c50-ef8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:e9:01:6b:5a:9c:28:8e:d9:d4:4a:65:67:
ec:b5:d1:da:a3:95:93:95:de:80:25:76:fa:e3:1a:
a9:e1:10:d6:d4:35:fd:d3:85:e1:2e:9f:f6:38:3d:
81:31:4f:7c:25:8d:e3:1d:92:23:08:b6:89:99:26:
c9:74:5e:73:b3:89:38:cb:91:97:c1:1f:c1:cf:f4:
17:7b:4b:61:ca:00:63:69:48:49:86:e8:52:fb:ff:
97:97:81:2d:6d:51:ef:60:1c:f7:e0:5f:b5:f9:45:
a4:c6:fa:1e:f8:9e:6d:eb:c6:83:29:3b:f8:71:f5:
cc:67:95:c3:c4:3f:c3:50:cd:64:3d:d1:e6:48:68:
39:b8:e5:64:3c:dd:44:57:cb:aa:64:e3:98:0a:b0:
1e:ed:4d:cd:ab:03:37:77:78:84:61:2b:14:28:e3:
5d:8b:f9:e8:f7:6f:9c:41:84:bf:74:c9:d3:fd:79:
c9:25:94:96:3b:96:05:fa:73:a5:00:08:fa:19:61:
50:fb:35:82:9e:db:21:ba:dd:ea:a4:50:74:ec:b2:
27:2a:91:6f:70:57:6d:ba:f6:15:80:5e:98:65:5f:
40:d1:a3:49:c0:06:a0:90:9f:1e:84:df:da:59:db:
eb:e1:13:13:13:29:10:68:2f:22:0b:23:0c:4f:4b:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:D1:60:72:E8:24:62:01:35:AD:C7:8C:3B:84:38:E4:EA:A9:92
X509v3 Authority Key Identifier:
keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/CA810CE2994611ED8083BB73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:60:65:f0:cb:9d:6e:b9:a1:5d:3d:fd:a4:26:21:d1:86:fc:
68:b3:18:54:e5:55:a2:66:30:3a:35:02:fd:01:08:02:a1:1b:
74:28:de:8e:2f:5b:7a:ed:a7:7b:09:c4:a1:e7:e8:4d:19:71:
88:94:e4:ff:bb:30:99:96:68:c1:99:1f:60:ba:83:2a:d3:c1:
c7:59:89:e5:9b:0f:7a:10:f0:ae:bd:10:6d:2b:c7:84:5c:f6:
8d:00:9b:6c:f8:c2:dd:ab:af:2f:db:7c:3d:47:7b:17:f8:73:
d5:1c:4f:b4:24:0d:da:97:51:8c:fe:b5:e9:a7:92:ea:f9:15:
99:37:8b:64:4c:ea:87:42:53:ea:34:b0:a8:79:7c:58:17:e1:
07:dd:3b:ed:fd:32:f4:68:be:23:9d:4d:dd:1f:94:d4:1a:ed:
f6:cc:dd:b4:77:13:99:63:66:f0:26:56:f5:62:5c:56:84:13:
4c:64:d7:4b:41:23:92:4c:c8:3d:3e:bb:77:86:15:bf:1e:90:
70:2d:b9:e8:8d:72:80:da:46:68:e2:a6:35:8e:2d:05:27:c8:
14:4e:bb:2b:78:93:ec:24:69:07:34:9f:ad:0e:f3:49:d9:b5:
75:45:fb:2c:97:38:cd:dd:f9:ee:de:48:59:21:57:b2:58:6b:
88:62:a3:c7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD
NkI2NzkzNUEwHhcNMjMwNTAyMjIxODU3WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxOGM1MC1lZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm27pAWtanCiO2dRKZWfstdHao5WTld6AJXb64xqp4RDW1DX904XhLp/2OD2B
MU98JY3jHZIjCLaJmSbJdF5zs4k4y5GXwR/Bz/QXe0thygBjaUhJhuhS+/+Xl4Et
bVHvYBz34F+1+UWkxvoe+J5t68aDKTv4cfXMZ5XDxD/DUM1kPdHmSGg5uOVkPN1E
V8uqZOOYCrAe7U3NqwM3d3iEYSsUKONdi/no92+cQYS/dMnT/XnJJZSWO5YF+nOl
AAj6GWFQ+zWCntshut3qpFB07LInKpFvcFdtuvYVgF6YZV9A0aNJwAagkJ8ehN/a
Wdvr4RMTEykQaC8iCyMMT0toDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBo70WBy
6CRiATWtx4w7hDjk6qmSMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF
NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFBQzcvODFBNEM0RDY2RTQzMTFFQTk0OUQ5OTIyQzRGOUFFMDIvQ0E4MTBDRTI5
OTQ2MTFFRDgwODNCQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlPMwDQYJKoZIhvcNAQELBQADggEBAA9gZfDLnW65oV09
/aQmIdGG/GizGFTlVaJmMDo1Av0BCAKhG3Qo3o4vW3rtp3sJxKHn6E0ZcYiU5P+7
MJmWaMGZH2C6gyrTwcdZieWbD3oQ8K69EG0rx4Rc9o0Am2z4wt2rry/bfD1Hexf4
c9UcT7QkDdqXUYz+temnkur5FZk3i2RM6odCU+o0sKh5fFgX4QfdO+39MvRoviOd
Td0flNQa7fbM3bR3E5ljZvAmVvViXFaEE0xk10tBI5JMyD0+u3eGFb8ekHAtueiN
coDaRmjipjWOLQUnyBROuyt4k+wkaQc0n60O80nZtXVF+yyXOM3d+e7eSFkhV7JY
a4hio8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org