Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
File: 01A750843E8C11EDA0D15634C4F9AE02.roa (raw, json)
Hash identifier: iXTQ+oLfdEjwJlw2tz0NCW2IiEVP76LQMQPNzS4G1DE=
Subject key identifier: 78:86:82:A3:CF:5A:10:17:32:83:4B:20:BD:22:0D:E0:A6:2F:8A:B2
Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial: 0197
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
Signing time: Tue 27 Sep 2022 17:44:16 +0000
ROA not before: Tue 27 Sep 2022 17:44:16 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 142615
IP address blocks: 103.170.230.0/23 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Validity
Not Before: Sep 27 17:44:16 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63333670-353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:50:b7:89:28:58:e8:a6:12:5f:fb:4e:4d:
78:71:c7:11:40:7c:ff:59:3f:20:cc:23:90:d5:34:
5b:2b:18:ad:cd:c7:b0:2f:64:e3:04:d6:07:8a:64:
e4:a4:5f:fd:2c:3e:74:ad:1a:09:73:e9:f0:03:88:
7b:21:9f:0d:6e:6e:15:70:4b:18:ec:89:80:2d:db:
b5:87:40:38:2f:bf:11:68:c2:7f:e2:55:0e:79:16:
82:cf:50:17:a7:90:a9:5e:55:42:47:07:42:b1:e6:
7f:25:4a:92:63:40:cb:f3:2c:8e:7d:ee:16:ba:5f:
b5:a7:2d:c4:6b:e4:63:88:d7:21:69:29:e6:ac:0a:
22:80:a7:3c:a4:ef:96:84:92:06:60:9b:86:76:ef:
38:29:21:cf:55:6d:63:35:82:f0:72:af:23:62:02:
85:2a:89:4e:01:64:ac:a0:b7:12:6e:c0:d2:57:0e:
b7:52:f5:9c:28:49:48:4c:52:0f:fb:27:83:6a:64:
30:ce:2f:42:3a:18:09:c3:09:f1:73:3c:0b:14:7c:
e6:88:8b:20:d9:a8:f4:a1:7f:26:e2:53:aa:1b:6d:
61:6a:6e:43:9f:a7:db:ee:3c:80:39:36:9d:c8:89:
bf:71:c3:ee:71:fe:3d:fa:30:51:23:8c:4b:00:db:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:82:A3:CF:5A:10:17:32:83:4B:20:BD:22:0D:E0:A6:2F:8A:B2
X509v3 Authority Key Identifier:
keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5f:78:88:5c:e8:60:aa:aa:9e:ff:8d:14:6e:2a:83:57:f6:
6f:7a:21:82:70:22:1c:e1:c5:77:78:b6:aa:e0:4a:c3:3b:72:
d0:4a:e3:f6:71:75:24:df:6a:78:65:a9:2c:0b:e8:0a:05:48:
fd:fd:c4:ad:a2:40:d5:e6:21:3d:27:be:4c:07:24:ba:3b:ca:
9f:17:75:ca:58:04:e3:1d:15:4c:1a:b3:64:49:18:28:ca:ed:
25:4a:9b:e7:9d:3d:92:f5:0e:b0:e0:9b:be:c5:9c:47:b6:69:
3d:7a:d8:87:64:f6:29:14:f5:89:f6:13:35:91:e3:bf:9a:cc:
4c:35:33:f3:95:8e:ec:83:de:cf:3a:78:32:9e:cc:f6:c0:88:
b9:db:66:b8:a0:60:b6:51:50:2d:84:9d:13:01:1c:93:dd:c8:
e3:27:8f:ae:78:62:28:f8:b8:af:d9:45:e1:c0:fd:c5:68:d9:
b6:f5:d6:63:73:09:b5:67:1c:20:35:fd:91:19:cf:71:19:67:
f5:c0:af:44:88:85:63:69:0a:5a:87:10:8d:20:ff:20:e2:d8:
01:db:18:a6:4f:53:ea:18:a8:ac:fa:c7:f8:a2:ec:92:d1:50:
70:b6:93:90:4d:bc:ba:eb:c7:b8:79:df:05:14:53:df:94:ad:
c4:15:d9:e7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyNjYxMTAvBgNVBAUTKDYyRDExMTlGMTg4RTNGN0MxMzU1RjY1MzlFMDY0MzZE
QTI2OEZGOUQwHhcNMjIwOTI3MTc0NDE2WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzMzMzY3MC0zNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqBQt4koWOimEl/7Tk14cccRQHz/WT8gzCOQ1TRbKxitzcewL2TjBNYHimTk
pF/9LD50rRoJc+nwA4h7IZ8Nbm4VcEsY7ImALdu1h0A4L78RaMJ/4lUOeRaCz1AX
p5CpXlVCRwdCseZ/JUqSY0DL8yyOfe4Wul+1py3Ea+RjiNchaSnmrAoigKc8pO+W
hJIGYJuGdu84KSHPVW1jNYLwcq8jYgKFKolOAWSsoLcSbsDSVw63UvWcKElITFIP
+yeDamQwzi9COhgJwwnxczwLFHzmiIsg2aj0oX8m4lOqG21ham5Dn6fb7jyAOTad
yIm/ccPucf49+jBRI4xLANtWUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHiGgqPP
WhAXMoNLIL0iDeCmL4qyMB8GA1UdIwQYMBaAFGLREZ8Yjj98E1X2U54GQ22iaP+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI2Ni8yN0JDNTBDNEEx
M0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Azd1RWZlpUbmdaRGJhSm9f
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l0RVJueGlPUDN3VFZmWlRuZ1pEYmFKb181MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjUyNjYvMjdCQzUwQzRBMTNCMTFFQzgzNDM3NTdFQzRGOUFFMDIvMDFBNzUwODQz
RThDMTFFREEwRDE1NjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnquYwDQYJKoZIhvcNAQELBQADggEBAI5feIhc6GCqqp7/
jRRuKoNX9m96IYJwIhzhxXd4tqrgSsM7ctBK4/ZxdSTfanhlqSwL6AoFSP39xK2i
QNXmIT0nvkwHJLo7yp8XdcpYBOMdFUwas2RJGCjK7SVKm+edPZL1DrDgm77FnEe2
aT162Idk9ikU9Yn2EzWR47+azEw1M/OVjuyD3s86eDKezPbAiLnbZrigYLZRUC2E
nRMBHJPdyOMnj654Yij4uK/ZReHA/cVo2bb11mNzCbVnHCA1/ZEZz3EZZ/XAr0SI
hWNpClqHEI0g/yDi2AHbGKZPU+oYqKz6x/ii7JLRUHC2k5BNvLrrx7h53wUUU9+U
rcQV2ec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:48 2024 by rpki-client on console-fra.rpki-client.org