Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D93E6/E53608E2488B11ECB3863F50C4F9AE02/D0481CE0C18511ECBE051C5CC4F9AE02.roa
File: D0481CE0C18511ECBE051C5CC4F9AE02.roa (raw, json)
Hash identifier: KmuMG9R60LSWJkOFs7S7kUsc2vNrGhcWxoRzJpuaUgI=
Subject key identifier: 02:2C:DD:37:09:6B:65:65:8B:22:B4:B4:FE:19:C0:0F:30:BC:3A:F7
Certificate issuer: /CN=A91D93E6/serialNumber=7CEF383C8978E23369AD05280EABDDE2DE6EE75B
Certificate serial: 013A
Authority key identifier: 7C:EF:38:3C:89:78:E2:33:69:AD:05:28:0E:AB:DD:E2:DE:6E:E7:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fO84PIl44jNprQUoDqvd4t5u51s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D93E6/E53608E2488B11ECB3863F50C4F9AE02/D0481CE0C18511ECBE051C5CC4F9AE02.roa
Signing time: Thu 21 Apr 2022 15:15:01 +0000
ROA not before: Thu 21 Apr 2022 15:15:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.112.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D93E6/serialNumber=7CEF383C8978E23369AD05280EABDDE2DE6EE75B
Validity
Not Before: Apr 21 15:15:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=626174f5-1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:e6:d8:0a:81:2f:59:f1:b0:01:53:96:af:
b2:44:54:4b:af:3c:41:9a:c9:51:25:15:ae:28:db:
72:3b:06:70:aa:18:62:6a:2f:9a:7e:93:67:73:d7:
66:33:2b:50:c3:5a:37:3e:45:b7:85:7b:dc:9f:71:
98:17:bc:28:cf:76:8b:3c:39:e3:4a:36:9b:6e:31:
98:42:e9:d2:62:45:8f:f4:b3:c6:9d:79:38:29:d1:
6b:86:89:f9:a6:98:f2:2a:0c:ee:4c:28:92:03:1c:
4a:5d:af:5c:dc:10:6f:7d:f9:c6:e0:25:a7:83:07:
fe:52:f9:71:66:c9:ef:35:2a:9f:e0:90:5e:13:f6:
1d:b0:58:9e:6a:89:97:09:2d:30:e6:31:ff:2f:60:
ac:62:d6:44:86:59:1e:12:c9:55:18:7d:db:52:9c:
6a:b4:11:2c:99:b0:a8:e2:d0:9f:a2:51:e0:7a:1f:
13:a3:32:b7:10:88:fc:5d:33:70:0c:fc:f3:50:4c:
8f:d5:cb:04:1e:35:b0:93:51:0f:9d:fe:51:0d:21:
53:26:66:b8:db:c0:1e:b5:f0:6c:9f:ba:84:da:9f:
28:d8:c2:e5:a7:ba:71:c3:b7:41:9e:54:2f:f1:6b:
c4:52:48:3a:91:b0:83:eb:cc:d2:57:3c:4c:48:0c:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2C:DD:37:09:6B:65:65:8B:22:B4:B4:FE:19:C0:0F:30:BC:3A:F7
X509v3 Authority Key Identifier:
keyid:7C:EF:38:3C:89:78:E2:33:69:AD:05:28:0E:AB:DD:E2:DE:6E:E7:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D93E6/E53608E2488B11ECB3863F50C4F9AE02/fO84PIl44jNprQUoDqvd4t5u51s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fO84PIl44jNprQUoDqvd4t5u51s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D93E6/E53608E2488B11ECB3863F50C4F9AE02/D0481CE0C18511ECBE051C5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.175.0/24
Signature Algorithm: sha256WithRSAEncryption
71:77:b5:a9:9c:02:8b:be:8b:64:f0:8f:11:b2:43:2b:65:d9:
7d:b9:39:fd:2e:fa:5d:cd:76:9c:0f:f3:ff:ce:ee:6f:b0:4c:
b5:ea:05:85:bd:68:60:70:54:10:69:e2:51:85:ae:44:9e:7f:
d4:2d:92:61:a5:b6:ad:b7:20:92:a4:53:f6:78:ad:77:ff:d9:
c6:02:e0:5c:35:87:10:04:f9:f9:06:ff:b1:50:18:63:a6:66:
85:1e:58:3b:3b:0c:10:0a:7a:40:2c:35:bc:50:1e:28:7d:c0:
a3:01:e6:7a:f0:7a:76:bb:b5:3c:41:08:9a:25:e9:b1:1e:c5:
d7:c3:21:3d:93:f0:a8:37:52:8a:90:f4:4b:a2:77:26:73:42:
4c:9f:0b:13:58:4c:5c:cf:0f:0d:df:e6:14:32:90:f7:8d:9c:
ef:20:76:60:1b:7b:07:88:c8:a2:25:71:40:1b:b0:65:70:2c:
6b:47:b1:81:d2:08:4e:ff:8e:3b:b6:e1:88:d1:20:7e:d1:c9:
6b:da:60:b3:fa:de:be:9d:f9:3b:f9:36:50:75:6f:f0:68:a9:
98:c1:2b:31:07:49:c4:2b:ab:5e:5d:44:23:ff:53:99:c1:3e:
6c:b5:ed:11:26:be:03:16:22:6d:ef:70:93:a2:ee:40:9f:cb:
4b:78:ad:d1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkzRTYxMTAvBgNVBAUTKDdDRUYzODNDODk3OEUyMzM2OUFEMDUyODBFQUJEREUy
REU2RUU3NUIwHhcNMjIwNDIxMTUxNTAxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjYxNzRmNS0xY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNjm2AqBL1nxsAFTlq+yRFRLrzxBmslRJRWuKNtyOwZwqhhiai+afpNnc9dm
MytQw1o3PkW3hXvcn3GYF7woz3aLPDnjSjabbjGYQunSYkWP9LPGnXk4KdFrhon5
ppjyKgzuTCiSAxxKXa9c3BBvffnG4CWngwf+UvlxZsnvNSqf4JBeE/YdsFieaomX
CS0w5jH/L2CsYtZEhlkeEslVGH3bUpxqtBEsmbCo4tCfolHgeh8TozK3EIj8XTNw
DPzzUEyP1csEHjWwk1EPnf5RDSFTJma428AetfBsn7qE2p8o2MLlp7pxw7dBnlQv
8WvEUkg6kbCD68zSVzxMSAwPmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAIs3TcJ
a2VliyK0tP4ZwA8wvDr3MB8GA1UdIwQYMBaAFHzvODyJeOIzaa0FKA6r3eLebudb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTNFNi9FNTM2MDhFMjQ4
OEIxMUVDQjM4NjNGNTBDNEY5QUUwMi9mTzg0UElsNDRqTnByUVVvRHF2ZDR0NXU1
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPODRQSWw0NGpOcHJRVW9EcXZkNHQ1dTUxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDkzRTYvRTUzNjA4RTI0ODhCMTFFQ0IzODYzRjUwQzRGOUFFMDIvRDA0ODFDRTBD
MTg1MTFFQ0JFMDUxQzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtcK8wDQYJKoZIhvcNAQELBQADggEBAHF3tamcAou+i2Tw
jxGyQytl2X25Of0u+l3NdpwP8//O7m+wTLXqBYW9aGBwVBBp4lGFrkSef9QtkmGl
tq23IJKkU/Z4rXf/2cYC4Fw1hxAE+fkG/7FQGGOmZoUeWDs7DBAKekAsNbxQHih9
wKMB5nrwena7tTxBCJol6bEexdfDIT2T8Kg3UoqQ9EuidyZzQkyfCxNYTFzPDw3f
5hQykPeNnO8gdmAbeweIyKIlcUAbsGVwLGtHsYHSCE7/jju24YjRIH7RyWvaYLP6
3r6d+Tv5NlB1b/BoqZjBKzEHScQrq15dRCP/U5nBPmy17REmvgMWIm3vcJOi7kCf
y0t4rdE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org