Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BBE38484D4E411EC976A7E55C4F9AE02.roa
File: BBE38484D4E411EC976A7E55C4F9AE02.roa (raw, json)
Hash identifier: 6+RZalRyXJkXmrc/jVCo0KC1f/k4Ql25p7ZfB578CV8=
Subject key identifier: 0E:01:EE:97:7E:6B:17:82:F5:96:76:23:8B:CF:6A:6F:D1:33:DF:88
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 02
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BBE38484D4E411EC976A7E55C4F9AE02.roa
Signing time: Mon 16 May 2022 06:52:21 +0000
ROA not before: Mon 16 May 2022 06:52:21 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 133916
IP address blocks: 103.187.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: May 16 06:52:21 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6281f4a5-22f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:27:1b:49:fe:3f:25:0c:e9:e3:a3:4a:1b:
ea:45:32:43:66:49:fd:b5:a1:f9:34:ca:ea:49:85:
fd:a9:f4:21:af:3a:10:65:9a:4a:2f:cf:e2:31:94:
f0:b9:35:df:e1:73:cd:25:cc:26:cd:72:13:d3:08:
1b:a8:d4:74:eb:b9:b6:0d:0e:57:71:52:6e:1e:bc:
28:ac:ea:8e:5e:7d:42:13:b6:b1:70:dc:f5:5b:5d:
cd:f8:6f:d1:42:4f:9e:91:a8:54:7a:e7:27:7b:dc:
75:fa:40:b2:55:da:8c:12:a7:a4:13:ca:8e:f9:aa:
46:06:56:a5:47:c7:8a:33:ea:c6:ed:2d:e1:56:93:
7d:a5:7a:cf:98:ed:17:26:2c:dc:5c:a9:61:81:c0:
35:43:94:13:7b:54:b4:b7:34:b8:01:3f:9a:13:2e:
d4:03:b8:81:61:3d:69:ff:c6:e3:c9:d9:b2:ae:2e:
24:e9:fa:f0:8a:91:c7:80:f5:48:0c:78:8b:4f:5e:
ff:e8:e5:31:77:35:3a:4d:40:57:64:93:a5:16:39:
a2:3d:7d:ff:4b:79:6c:0c:ff:c7:0e:47:18:e6:ab:
2d:81:af:dc:e0:51:ad:ce:97:07:0a:ea:38:00:e9:
ae:64:b8:bd:47:f0:38:b1:cf:b2:99:5c:eb:f6:76:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:EE:97:7E:6B:17:82:F5:96:76:23:8B:CF:6A:6F:D1:33:DF:88
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BBE38484D4E411EC976A7E55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.94.0/24
Signature Algorithm: sha256WithRSAEncryption
81:51:79:d7:b8:83:13:4e:09:7a:a8:07:d0:db:53:d2:9a:b9:
a4:a5:76:ec:0d:2b:45:2a:23:8c:8c:a8:c0:f9:20:95:7f:a0:
4a:c2:50:20:f7:1a:0f:ad:7b:e3:b8:45:ef:7d:61:b1:df:3b:
68:af:f4:fd:1f:f4:86:c7:47:9f:b3:8d:d9:12:eb:44:62:d4:
8e:19:7e:9c:cd:d2:9d:3a:59:66:bb:b3:c2:17:dd:b9:5f:1a:
fd:52:22:d6:8d:e0:82:0d:05:0b:8e:d6:b3:3f:91:c7:6e:a2:
d1:f4:54:40:d5:43:25:2e:c4:cd:9c:26:58:db:46:36:ff:8f:
5e:0c:57:61:d1:f7:ca:c9:93:a0:5f:b4:82:f5:b8:f8:e2:9f:
b8:fc:67:e3:6e:ae:9e:be:c9:99:f3:58:b4:a6:b5:57:af:a7:
74:3a:aa:e9:57:6c:1d:c4:1b:56:43:74:ef:c7:fa:63:64:a9:
16:b1:11:a5:83:9e:c1:85:60:ee:10:8f:e2:87:12:13:26:f8:
e3:71:5a:83:bc:c9:74:2b:b0:22:44:5f:11:71:07:cb:82:fe:
20:fd:06:7e:ca:24:37:12:1a:f7:0b:57:af:1e:7a:15:b4:91:
23:cd:80:b3:3a:ba:9b:17:d4:76:05:f4:da:16:d3:01:56:18:
13:8d:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org