Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/B54D56963BA511EC8737B534C4F9AE02.roa
File: B54D56963BA511EC8737B534C4F9AE02.roa (raw, json)
Hash identifier: sd/HTna8PqzuwCHNp3nzN1lPhs5oZOcf/cbumcz/YqI=
Subject key identifier: 1B:40:27:2F:36:7A:33:3E:8E:F3:F9:09:95:92:28:A2:C1:14:F6:99
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0A8B
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/B54D56963BA511EC8737B534C4F9AE02.roa
Signing time: Mon 03 Oct 2022 08:16:31 +0000
ROA not before: Mon 03 Oct 2022 08:16:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139053
IP address blocks: 103.214.82.0/24 maxlen: 24
103.214.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: Oct 3 08:16:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633a9a5f-71b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:04:1c:02:4a:21:1d:86:aa:cf:f4:de:ba:
d7:d7:d0:48:db:f2:9c:4f:e3:13:08:9a:70:1a:d8:
d9:93:2d:82:b9:e8:ed:5a:86:14:0e:05:f8:26:48:
f1:7f:d3:8f:e5:a1:f9:9d:6b:b3:e5:7c:df:bd:cd:
75:7f:8c:29:67:a6:92:b5:da:8a:61:8e:b7:55:8f:
db:48:1c:a6:b4:4b:3d:4f:bd:5d:dc:73:23:7f:4d:
3b:74:a8:25:7a:0d:8d:1c:b3:af:e3:6e:66:07:79:
57:b1:94:52:2e:23:26:e3:8f:1f:77:2c:60:66:e4:
b5:cb:cc:4d:b5:cd:c2:7e:57:5b:09:df:b7:bc:23:
d6:6d:ee:92:d9:b1:48:34:a3:1d:3a:c3:3b:86:b3:
48:51:0d:de:71:be:ee:ee:7b:76:5b:fb:62:c3:7e:
5e:4d:e6:74:88:4d:ef:11:60:45:8e:2c:86:00:b0:
58:e9:37:be:10:47:4d:dd:bb:95:07:e6:86:f9:8f:
10:b3:23:20:5c:0f:02:51:32:9e:93:01:18:d6:7a:
12:81:d7:10:8f:09:39:a3:8f:66:3e:4d:6e:f0:22:
d0:47:19:7a:49:9d:ab:02:c2:10:9d:f5:ab:eb:bb:
71:c2:bd:0d:f5:50:45:66:5b:1d:a0:d0:4c:bc:1c:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:40:27:2F:36:7A:33:3E:8E:F3:F9:09:95:92:28:A2:C1:14:F6:99
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/B54D56963BA511EC8737B534C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
17:01:5d:72:8e:7b:37:40:0d:b4:a3:35:b5:11:77:ee:6e:b2:
e9:fb:a8:88:3f:ac:34:32:ff:79:d5:32:d5:8e:11:68:68:d0:
7d:a5:79:ff:95:d4:e7:6a:a2:41:d5:66:a2:56:fc:42:27:08:
7d:dc:ab:2d:4a:06:de:b4:4b:97:21:70:b2:61:11:6c:54:ec:
49:7d:b0:78:29:b2:c0:f2:a8:3d:05:e6:e1:2b:ad:64:ba:25:
ce:a0:4f:81:59:60:e3:ba:cc:4f:ca:d0:c9:7f:ec:0b:4e:3c:
2e:4a:65:1b:c1:ac:bf:d0:d0:49:9f:43:f1:9c:60:64:e8:fe:
05:b9:88:ed:53:11:e7:c7:ec:a8:67:33:f9:99:0c:33:cf:68:
d9:91:a2:b8:ff:2e:82:b9:23:33:35:bd:4c:76:21:70:73:87:
a3:4b:c4:05:71:1d:9f:52:a1:1d:08:a5:1f:fc:e2:be:e7:ea:
85:4f:c7:62:f5:4f:05:a2:a6:4b:ad:b6:88:a0:d7:86:be:36:
cb:cc:06:13:49:a4:7c:cc:0f:61:f9:80:fe:0b:9b:3e:95:90:
5c:ac:33:b2:b6:40:46:01:e3:2f:0e:2b:6a:e8:bb:35:31:20:
e3:26:d0:60:94:07:e4:82:39:5e:a4:f1:60:b9:d5:77:fe:6a:
d0:ab:9c:89
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE
MTdGQTk2Q0QwHhcNMjIxMDAzMDgxNjMxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzNhOWE1Zi03MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA43sEHAJKIR2Gqs/03rrX19BI2/KcT+MTCJpwGtjZky2CuejtWoYUDgX4Jkjx
f9OP5aH5nWuz5Xzfvc11f4wpZ6aStdqKYY63VY/bSBymtEs9T71d3HMjf007dKgl
eg2NHLOv425mB3lXsZRSLiMm448fdyxgZuS1y8xNtc3CfldbCd+3vCPWbe6S2bFI
NKMdOsM7hrNIUQ3ecb7u7nt2W/tiw35eTeZ0iE3vEWBFjiyGALBY6Te+EEdN3buV
B+aG+Y8QsyMgXA8CUTKekwEY1noSgdcQjwk5o49mPk1u8CLQRxl6SZ2rAsIQnfWr
67txwr0N9VBFZlsdoNBMvBwRdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBtAJy82
ejM+jvP5CZWSKKLBFPaZMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0
NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCRTMvODBBRTEwQzYwNDUwMTFFQUJBODJDNDE1QzRGOUFFMDIvQjU0RDU2OTYz
QkE1MTFFQzg3MzdCNTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn1lIwDQYJKoZIhvcNAQELBQADggEBABcBXXKOezdADbSj
NbURd+5usun7qIg/rDQy/3nVMtWOEWho0H2lef+V1OdqokHVZqJW/EInCH3cqy1K
Bt60S5chcLJhEWxU7El9sHgpssDyqD0F5uErrWS6Jc6gT4FZYOO6zE/K0Ml/7AtO
PC5KZRvBrL/Q0EmfQ/GcYGTo/gW5iO1TEefH7KhnM/mZDDPPaNmRorj/LoK5IzM1
vUx2IXBzh6NLxAVxHZ9SoR0IpR/84r7n6oVPx2L1TwWipkuttoig14a+NsvMBhNJ
pHzMD2H5gP4Lmz6VkFysM7K2QEYB4y8OK2rouzUxIOMm0GCUB+SCOV6k8WC51Xf+
atCrnIk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org