Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/6CA2E8B48E2111EDAD528466C4F9AE02.roa
File: 6CA2E8B48E2111EDAD528466C4F9AE02.roa (raw, json)
Hash identifier: PmgIxcDhFcjtwVu3N2CvAZZvx9cIG52mTpVD2MIq3/c=
Subject key identifier: AA:D7:BE:62:F7:B1:6C:61:8B:84:C2:C3:B1:70:64:79:E3:C0:04:06
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 02DE
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/6CA2E8B48E2111EDAD528466C4F9AE02.roa
Signing time: Sat 07 Jan 2023 00:22:53 +0000
ROA not before: Sat 07 Jan 2023 00:22:53 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 136969
IP address blocks: 103.174.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Validity
Not Before: Jan 7 00:22:53 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63b8bb5c-e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:0e:57:2b:97:fb:7d:b0:f2:3f:c4:b1:ad:
a9:52:d0:ba:43:da:d9:f4:8e:fd:a4:cc:2f:8f:db:
24:f9:84:7c:6b:ad:22:e7:05:33:17:d1:fb:f1:65:
0b:9d:2d:68:51:0d:e5:0e:31:ba:66:b2:14:4a:93:
bc:a3:6c:8f:6c:86:b1:47:0f:e3:4d:c7:6c:ab:ee:
f1:78:7d:84:48:9f:b4:d5:1a:c9:83:31:6f:c3:c7:
7b:13:a9:35:e0:89:fc:51:35:88:65:b1:f1:cf:03:
1d:77:70:a2:7e:72:09:62:7f:b3:b7:fe:31:6b:d5:
0b:11:95:0a:2e:67:6a:15:af:13:3d:08:18:9a:e1:
20:bf:fe:4d:43:7c:a3:ad:2c:d1:8a:1d:10:8c:d8:
02:95:89:26:10:e0:30:94:b8:d4:40:6d:5f:76:f6:
75:98:a1:f1:40:c5:da:68:6c:d5:fb:38:56:4d:30:
87:2a:fd:3c:16:0a:30:b7:a3:5a:3b:4e:b8:9f:1b:
61:88:24:23:8a:23:09:1c:79:d6:8e:fb:40:f2:26:
91:24:06:d9:70:5e:e5:92:c5:d1:00:8f:4e:5f:7c:
46:12:f2:d3:e7:06:e5:dc:c2:67:1c:66:d4:3e:f9:
c5:8e:ef:21:85:09:dc:2d:05:5c:6d:8c:1c:50:08:
f6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:BE:62:F7:B1:6C:61:8B:84:C2:C3:B1:70:64:79:E3:C0:04:06
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/6CA2E8B48E2111EDAD528466C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:21:1a:59:ad:6b:f4:a8:10:48:5f:59:c1:03:54:db:5b:95:
8c:5d:99:64:62:0b:5f:f6:21:f5:f4:17:b1:9d:02:45:3f:da:
b1:f7:0e:22:5d:43:70:74:c2:d0:b3:fe:a8:8f:6a:d4:95:db:
6b:41:ff:99:80:38:57:1b:07:c4:fd:9a:5e:d3:ac:8b:89:85:
13:62:76:64:9e:db:0b:1b:60:0f:09:9b:0d:1d:55:e0:04:40:
1a:53:0a:60:24:8a:94:a1:4b:a7:d3:2a:13:1b:c7:42:00:c1:
74:00:a3:59:10:7e:b2:6e:66:07:74:91:3c:8f:6a:8c:57:a6:
1e:19:9e:06:15:f7:9e:d9:3c:3d:c7:e7:82:19:ed:ed:e7:49:
06:51:f6:3c:c3:7e:08:d1:7b:37:48:57:cc:56:85:b3:3c:5b:
7e:34:3d:25:25:cc:ba:fd:52:a5:f5:0a:ea:b9:1f:2d:00:ec:
1c:8a:48:b1:99:4b:fe:42:3d:42:4e:66:f4:92:2c:b1:b7:4e:
16:4c:62:f0:1d:6d:4f:22:36:ea:cc:36:9d:24:f7:35:fd:f6:
5c:e9:10:0b:71:43:d0:b0:15:16:2f:a5:b3:3f:18:46:9c:96:
36:7b:11:d7:7f:27:4f:5e:75:8e:66:32:14:df:f9:e1:ab:9e:
18:9e:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org