Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/DBC919ACD11B11ECB6115370C4F9AE02.roa
File: DBC919ACD11B11ECB6115370C4F9AE02.roa (raw, json)
Hash identifier: gfHRMu/vubHKjlP9bgQ9adUtR4/oLWNEEBTb8WPdxyg=
Subject key identifier: 39:67:A0:05:90:C8:36:13:E2:92:34:18:C2:41:2F:27:46:B9:05:81
Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial: 02
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/DBC919ACD11B11ECB6115370C4F9AE02.roa
Signing time: Wed 11 May 2022 11:16:52 +0000
ROA not before: Wed 11 May 2022 11:16:52 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 149829
IP address blocks: 103.187.66.0/23 maxlen: 23
103.187.66.0/24 maxlen: 24
103.187.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Validity
Not Before: May 11 11:16:52 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=627b9b24-725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:51:42:40:c5:df:97:60:df:a0:d2:20:4c:
7c:8d:c2:8b:25:01:2f:a5:5c:56:78:91:72:17:20:
57:03:f8:12:a6:9f:02:b1:8f:ad:f9:2b:90:b5:2e:
ad:88:08:4a:59:22:44:d8:16:de:86:fb:e4:15:83:
f4:9d:db:78:d4:19:56:d1:4d:50:50:25:71:9f:fe:
d9:13:38:a4:b6:87:7f:47:41:9d:28:a8:7c:fc:d0:
7f:41:0b:28:1a:a4:a7:02:ad:77:4f:ae:cd:5c:3d:
ff:01:0e:d6:a6:70:8c:82:e7:63:00:c2:7a:69:d1:
b7:e6:8a:ad:af:91:9a:3b:59:6f:3f:5b:e8:63:48:
9f:dc:2b:81:84:c1:b0:6c:1d:5a:37:a6:1f:bf:64:
97:6e:fd:f5:8c:b2:3c:a5:69:66:85:c3:a3:b6:18:
98:07:16:f8:f7:2f:63:eb:c1:32:db:48:fd:07:e7:
59:6e:52:4a:ff:08:f5:0f:37:13:bd:77:70:04:a0:
2e:a1:81:a3:16:df:20:e7:68:31:60:32:57:ea:bc:
1d:63:2a:cd:3c:0c:f3:80:d6:97:38:82:bb:d4:b1:
55:bb:ed:1e:f3:cc:51:1a:13:cb:73:55:b4:a1:f9:
5c:ad:6f:68:f8:0d:40:54:c5:c0:28:25:4d:60:9d:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:67:A0:05:90:C8:36:13:E2:92:34:18:C2:41:2F:27:46:B9:05:81
X509v3 Authority Key Identifier:
keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/DBC919ACD11B11ECB6115370C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.66.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:46:2c:d3:1e:d3:21:14:6b:16:bc:2b:72:17:46:82:e1:0d:
cd:38:c0:29:ba:95:3a:6a:5b:a4:cd:23:81:f3:8a:b4:ef:15:
c7:84:44:d9:25:f2:07:71:2d:49:78:84:83:74:f7:99:b8:d4:
e3:89:dc:bd:5d:05:bb:e7:2e:de:63:16:21:85:c9:bc:50:7a:
14:41:dc:06:dc:20:7f:a6:38:75:bf:94:bc:40:ff:f3:01:4a:
50:5b:7e:9c:93:c3:da:fe:2e:53:c0:e7:7e:62:d7:c3:15:6e:
56:86:aa:e9:4a:05:b2:23:01:48:09:c1:99:a9:e0:1e:04:16:
79:e3:9a:fd:da:af:05:1e:2f:71:98:ce:9f:46:98:30:1e:f7:
c0:20:60:1c:b4:dd:f0:9e:a8:ad:94:17:bd:a8:2a:a5:3e:bf:
55:66:a1:9f:08:60:af:96:84:bc:43:b5:b6:d9:ea:cb:72:2f:
c7:43:42:10:df:88:1b:42:84:27:85:07:9e:47:5e:be:d5:a0:
0d:c7:26:e5:81:5c:ea:4a:dd:ff:b8:5c:20:b7:a2:d5:3d:95:
8e:82:bc:f5:18:40:34:02:0c:fa:35:5d:c5:d7:35:5a:6c:41:
1f:53:64:cf:34:02:0b:e1:8e:b3:f8:3f:6f:d0:a0:d2:d3:96:
a3:2f:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org