Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
File: 07F4286ED06D11EC8D683336C4F9AE02.roa (raw, json)
Hash identifier: aDSISrRUyaTcU/6PmcPd+l1TezHUAH8T6jmqLh78F1A=
Subject key identifier: 5A:BB:61:BF:4E:31:81:40:C7:C6:7C:41:75:B9:93:8E:FE:03:C0:F5
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 0F90
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
Signing time: Mon 25 Jul 2022 03:24:41 +0000
ROA not before: Mon 25 Jul 2022 03:24:41 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 140096
IP address blocks: 103.102.4.0/22 maxlen: 23
103.102.4.0/24 maxlen: 32
103.102.5.0/24 maxlen: 32
103.102.6.0/24 maxlen: 32
103.102.7.0/24 maxlen: 32
182.255.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: Jul 25 03:24:41 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62de0cf8-76c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:4a:d2:75:51:c3:9f:f8:10:d4:c7:32:c5:
29:32:0a:d5:3e:f2:98:09:cf:4b:2b:a9:b5:40:72:
40:0f:95:ac:10:61:12:a5:20:30:d1:3c:1e:bc:31:
e5:fc:ba:55:9d:2e:56:5d:a2:42:d0:d6:09:ce:35:
5f:1d:e1:9b:d9:5c:3e:33:a0:9a:2b:b5:7f:6b:8d:
c2:a0:ac:06:37:79:48:a9:4e:79:d6:00:3a:8f:ff:
b3:9c:8f:54:bf:7d:7c:77:da:40:a3:dd:5d:07:74:
c6:0b:19:e6:7a:6f:93:4d:7e:16:46:43:ad:a1:86:
bb:81:b8:1f:ce:57:01:82:e6:12:d2:d7:69:5b:a9:
2e:ed:e8:32:d7:28:76:f0:96:1c:07:6e:0c:73:86:
35:bd:91:fe:d6:6c:c0:6d:0a:d2:78:5d:66:32:60:
6a:6f:0d:82:42:2e:19:4d:8b:cc:ae:5d:a3:b8:e6:
76:96:75:04:17:1f:4f:dc:7c:04:88:b6:eb:66:8b:
6e:66:6d:19:c0:ad:94:f8:b3:2c:47:45:52:7e:71:
2b:b8:82:b8:b1:23:13:8a:05:87:43:95:cb:a9:71:
12:11:a8:21:c6:d1:2a:ea:0b:9a:3a:53:9a:b3:84:
4a:4e:17:aa:1d:6d:ac:ac:01:58:dd:b8:5a:bc:ad:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:61:BF:4E:31:81:40:C7:C6:7C:41:75:B9:93:8E:FE:03:C0:F5
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.4.0/22
182.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:02:29:49:62:bb:05:c4:32:47:eb:d5:5b:0b:05:34:4c:7f:
5f:b7:95:da:44:fd:71:f9:7f:50:0d:e7:b7:47:d7:b9:d8:b9:
55:ac:49:74:f4:b1:53:7d:1f:9a:3f:88:9a:c9:10:21:98:d5:
33:cd:77:28:bd:54:93:14:dc:2c:0c:de:94:6d:0d:05:63:1d:
13:31:0f:88:72:05:23:da:d0:82:8f:c9:32:4f:5f:19:f1:d0:
73:cc:2d:5b:81:90:84:d4:aa:c9:b4:be:5e:f4:33:c5:6e:ab:
5e:95:bc:1b:ee:81:5e:8b:55:07:b1:60:76:4c:4b:6a:fc:ff:
94:2b:75:39:3f:bb:ee:43:5c:2f:37:15:95:09:21:ba:bd:a1:
33:c9:d3:87:24:d5:dd:6d:ce:5e:3d:71:13:f4:db:92:b3:2c:
4b:f3:38:e9:bf:b6:a7:6f:9d:ac:0d:21:2b:cc:ca:3a:57:40:
3c:f0:d5:38:38:24:03:b9:70:47:f5:af:09:a0:6f:32:c4:e6:
c3:8e:23:28:9b:c4:0c:86:16:eb:db:68:bc:0d:96:31:63:16:
19:8c:03:56:94:31:bb:a1:f1:ba:66:8f:ae:17:42:a9:81:4c:
df:93:8d:de:0a:dd:54:9c:98:b1:f4:f8:bf:2a:6a:da:4e:be:
f5:dc:89:6b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB
NzNDQjQ4MTIwHhcNMjIwNzI1MDMyNDQxWhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmRlMGNmOC03NmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFpK0nVRw5/4ENTHMsUpMgrVPvKYCc9LK6m1QHJAD5WsEGESpSAw0TwevDHl
/LpVnS5WXaJC0NYJzjVfHeGb2Vw+M6CaK7V/a43CoKwGN3lIqU551gA6j/+znI9U
v318d9pAo91dB3TGCxnmem+TTX4WRkOtoYa7gbgfzlcBguYS0tdpW6ku7egy1yh2
8JYcB24Mc4Y1vZH+1mzAbQrSeF1mMmBqbw2CQi4ZTYvMrl2juOZ2lnUEFx9P3HwE
iLbrZotuZm0ZwK2U+LMsR0VSfnEruIK4sSMTigWHQ5XLqXESEaghxtEq6guaOlOa
s4RKTheqHW2srAFY3bhavK3aDQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFq7Yb9O
MYFAx8Z8QXW5k47+A8D1MB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5
QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E4QTQvNzkwRTYxMENFOUMzMTFFOEE5Q0VENjQ4QzRGOUFFMDIvMDdGNDI4NkVE
MDZEMTFFQzhENjgzMzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnZgQDBAK2/yAwDQYJKoZIhvcNAQELBQADggEBALkCKUli
uwXEMkfr1VsLBTRMf1+3ldpE/XH5f1AN57dH17nYuVWsSXT0sVN9H5o/iJrJECGY
1TPNdyi9VJMU3CwM3pRtDQVjHRMxD4hyBSPa0IKPyTJPXxnx0HPMLVuBkITUqsm0
vl70M8Vuq16VvBvugV6LVQexYHZMS2r8/5QrdTk/u+5DXC83FZUJIbq9oTPJ04ck
1d1tzl49cRP025KzLEvzOOm/tqdvnawNISvMyjpXQDzw1Tg4JAO5cEf1rwmgbzLE
5sOOIyibxAyGFuvbaLwNljFjFhmMA1aUMbuh8bpmj64XQqmBTN+Tjd4K3VScmLH0
+L8qatpOvvXciWs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:41 2023 by rpki-client on console.sobornost.net