Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A477230418DD11ED90A41A17C4F9AE02.roa
File: A477230418DD11ED90A41A17C4F9AE02.roa (raw, json)
Hash identifier: 3C6OIfSe8Zl+A1UqnHD5E02c615qjhmiiDEjH4QsqXs=
Subject key identifier: 75:1A:34:8E:91:89:B4:BC:E6:1E:8D:CE:82:95:5D:56:59:DC:EF:EA
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: BD
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A477230418DD11ED90A41A17C4F9AE02.roa
Signing time: Wed 10 Aug 2022 18:52:55 +0000
ROA not before: Wed 10 Aug 2022 18:52:54 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 138619
IP address blocks: 103.187.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Aug 10 18:52:54 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62f3fe86-bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:17:8d:50:32:3c:6e:53:bd:f2:b2:71:3d:
24:80:45:50:50:50:2e:2a:84:52:ab:26:d8:2e:d4:
ad:86:58:21:14:b8:c9:39:60:9b:db:97:39:a3:29:
a6:e1:82:d3:21:cc:39:b1:75:13:81:a5:65:6a:1d:
e3:de:ad:16:b2:c8:d6:2a:8d:25:c4:f7:7c:67:49:
62:87:3a:00:bb:50:35:47:e0:e2:ad:c0:af:50:e7:
b0:bd:16:3a:0a:56:eb:c4:81:4d:62:77:66:f3:c4:
c6:20:ba:90:f2:25:78:5e:b6:2f:e6:68:ff:ae:6c:
d9:5e:f3:df:46:ca:d1:44:60:61:c6:8e:0e:93:3c:
21:d5:d1:a5:cb:7f:5f:df:85:17:f9:a0:31:80:a9:
09:58:f4:43:ff:c2:44:ed:e2:8e:05:9a:ec:51:3b:
4f:ed:bf:e5:d6:c1:88:b7:3b:e0:dd:09:a7:53:9f:
67:4e:c9:66:6d:c7:d0:00:9d:4e:fe:c3:49:c8:88:
54:b8:cd:23:7c:f7:4f:5e:f0:29:f5:ff:6c:c9:39:
cc:f0:23:7a:64:61:e0:88:37:3e:59:a3:93:86:49:
25:a1:89:74:c5:9c:f5:79:e7:ca:74:ec:c3:d7:84:
12:c9:03:60:c0:fc:24:cd:cb:42:10:b6:ff:90:9c:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:34:8E:91:89:B4:BC:E6:1E:8D:CE:82:95:5D:56:59:DC:EF:EA
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A477230418DD11ED90A41A17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8a:56:a3:56:0b:5f:1b:8a:b0:15:ef:93:08:f5:57:c9:c1:
67:4f:41:46:20:4f:fd:2b:c9:f6:05:30:ab:5a:ba:50:3d:3a:
6d:10:e0:00:66:42:d1:22:3c:7f:6d:c2:4e:5b:f2:d4:d2:74:
e9:d4:75:07:cb:e6:b4:ac:ab:b3:fd:97:83:c8:68:cd:b7:aa:
fe:7a:d5:b2:16:66:d1:c8:e7:d8:bf:c6:e5:7d:89:38:24:0f:
e5:a3:12:c8:f0:06:bc:34:dd:a6:a3:56:56:b5:32:ab:fc:53:
1e:d5:00:f6:9a:b6:c9:90:b6:02:51:5f:5a:64:05:9e:8e:24:
6c:a0:e9:b5:b8:4c:88:8c:54:bc:df:c4:b6:4d:11:ad:86:ba:
bb:5a:ae:6a:c7:6e:cf:e8:40:32:45:47:dd:f0:37:14:24:79:
79:75:6a:8c:b4:58:f3:65:24:40:27:6e:b3:a2:4a:d2:6a:90:
1e:79:43:2d:f9:b0:f2:cd:01:63:af:35:c4:56:24:50:18:26:
e2:2b:e5:29:6e:a3:d7:0d:e9:3d:bc:a8:60:67:32:91:9e:db:
c3:43:f4:6e:ab:3e:79:66:2e:91:53:87:fb:62:47:53:84:5c:
34:35:8e:f2:97:9e:21:22:72:ed:09:53:a5:a9:15:9d:60:8e:
9e:03:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org