Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6844570A1E611EDABFD7D7FC4F9AE02.roa
File: C6844570A1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: nNmfewqlr66K8xGqYMOL/HEUVioBpvZoqLJPs1SO+vU=
Subject key identifier: E5:41:E9:B2:4D:CC:DA:AA:48:80:BE:79:38:CF:50:B9:56:2F:E2:00
Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial: 0299
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6844570A1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sat 11 Feb 2023 03:53:12 +0000
ROA not before: Sat 11 Feb 2023 03:53:12 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 139461
IP address blocks: 103.178.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Validity
Not Before: Feb 11 03:53:12 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63e71128-2655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:41:3c:0f:f4:80:63:79:21:c1:82:e1:8d:
44:6b:9d:ef:8f:b1:d6:02:da:b0:32:7f:12:94:14:
ab:aa:53:7b:d0:6d:ea:97:8d:64:81:80:9a:24:69:
a0:f2:67:36:20:ec:ae:a2:1d:bc:d9:af:be:bd:7f:
42:1b:0c:31:57:d2:f7:4b:87:93:9d:e6:81:b6:c4:
5e:ef:ab:f1:e2:92:da:04:37:8c:f4:d1:30:40:a1:
ea:93:d7:7c:1c:07:09:df:0c:30:6a:d2:a5:fc:67:
e0:c8:84:66:41:98:0b:53:12:f6:88:bd:0f:26:35:
f4:5c:b1:79:37:2b:c6:41:1b:9a:be:8f:27:1c:6f:
6b:cb:c3:9a:e7:59:22:b5:a9:08:82:73:aa:ca:48:
07:cf:70:88:26:a2:df:38:70:dc:d0:34:17:39:ff:
3a:7b:85:62:94:f5:73:89:5f:61:5c:03:30:2f:b8:
99:35:14:93:c3:67:30:80:a7:86:94:ea:6a:04:8f:
38:a8:8e:c1:3b:14:7d:26:44:d0:74:b9:a3:db:f9:
63:90:61:fb:5b:b4:cf:27:35:66:7e:7e:5e:83:32:
92:36:a4:0c:20:b3:0f:c7:8a:4d:e2:05:56:b4:68:
7d:ed:e7:47:e2:ab:9b:08:b8:ca:a4:f0:10:c8:18:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:E9:B2:4D:CC:DA:AA:48:80:BE:79:38:CF:50:B9:56:2F:E2:00
X509v3 Authority Key Identifier:
keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6844570A1E611EDABFD7D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1d:26:03:6b:57:97:14:c7:8d:8a:db:37:46:9a:63:7e:19:
7b:6d:b6:98:77:f7:31:d8:b7:aa:b5:0a:5c:69:d9:d5:d3:07:
c9:83:46:35:e6:a2:37:78:bc:df:c3:ee:d6:38:94:56:21:36:
8b:81:ba:55:d6:da:73:8f:5f:e4:a1:c2:fa:9b:57:09:6c:65:
db:30:78:13:b0:4f:de:5f:dd:fc:09:ef:fc:2a:d5:e1:a0:76:
41:d2:bd:54:ab:0f:3a:3a:7d:44:e9:6f:09:59:a5:4e:8b:b3:
b5:29:4e:b9:2a:21:b2:4f:22:5e:2d:5a:d4:67:e1:be:06:07:
82:d7:7c:d5:17:c4:ac:3e:12:31:ac:92:34:12:fb:28:1d:bd:
2a:ce:30:0b:8b:28:80:3b:ba:73:c6:c1:01:b5:9e:6a:dc:0c:
d2:7c:28:4e:3f:04:44:f1:41:18:88:1b:be:4f:e0:bd:87:15:
7e:87:ac:4d:a0:ec:7c:96:bc:5c:7f:99:cc:55:7b:6f:8b:5c:
aa:45:92:bc:b4:48:ad:12:eb:96:d7:cd:38:4c:d9:c2:ac:99:
05:83:f2:ee:0d:78:ef:11:72:0d:a0:dd:4f:86:3b:18:fe:ad:
96:4e:93:14:4f:1f:0e:c1:08:9a:1f:3a:fa:74:4e:1f:8b:e1:
31:84:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org