Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BADA094823A711ED9B08FB0AC4F9AE02.roa
File: BADA094823A711ED9B08FB0AC4F9AE02.roa (raw, json)
Hash identifier: /WkzcbCNGZSre1TE2kUAQrH2u1sHmsBILIE0YpLjsWU=
Subject key identifier: 45:4F:5D:EC:70:AB:BD:36:E9:BC:DA:96:86:9D:44:4C:F8:9D:29:A4
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 2E
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BADA094823A711ED9B08FB0AC4F9AE02.roa
Signing time: Wed 24 Aug 2022 12:24:42 +0000
ROA not before: Wed 24 Aug 2022 12:24:42 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 150173
IP address blocks: 103.190.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Aug 24 12:24:42 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6306188a-ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:d8:e5:8f:c5:64:00:d1:85:04:44:fb:e5:
e8:92:ab:f7:7f:5d:6c:f9:7c:b5:82:c3:1e:8d:84:
da:54:9a:e7:c7:4f:10:9d:6c:da:6b:a9:ee:8c:4b:
11:d9:5d:1c:8d:a7:3b:3e:29:c9:e6:61:9b:1d:ab:
41:78:cc:6e:69:16:5a:a3:6a:4d:10:b4:39:16:f4:
48:39:30:dd:dc:50:e2:6c:05:ff:e2:ee:37:47:b7:
79:74:2d:75:63:db:4d:f8:bf:3e:5a:03:b5:44:f0:
c3:fd:89:d1:05:82:7b:90:c8:fa:78:9f:47:7c:72:
e9:c0:f3:61:1e:0f:9f:09:a8:29:df:13:6d:cb:40:
6d:55:91:25:15:32:81:cb:22:4d:60:58:97:6d:9b:
ab:9c:6a:e0:e5:63:b9:2e:c6:1b:92:0b:04:35:e7:
42:15:40:be:2e:ea:19:63:71:d4:58:4d:6d:d2:e3:
9c:6f:dd:17:20:a9:cf:ef:67:52:5b:bf:39:03:4d:
57:84:53:8d:7f:4e:b1:52:bb:80:c9:3a:25:dd:bf:
c5:62:57:d6:96:45:af:cb:c5:28:cc:cb:dc:d6:8b:
d5:77:29:78:ee:cf:2a:a0:e0:a9:72:05:3e:0d:d0:
01:01:c7:0f:6d:ba:42:0f:16:c9:36:e9:df:d3:5d:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:5D:EC:70:AB:BD:36:E9:BC:DA:96:86:9D:44:4C:F8:9D:29:A4
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BADA094823A711ED9B08FB0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.178.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1d:94:8d:ae:94:05:f0:ce:d2:cc:60:0c:49:c7:ab:0e:57:
61:fb:7c:07:ca:0d:b8:30:47:6f:bf:66:fe:6d:c8:8d:98:1e:
da:fb:ca:92:7a:06:ed:a7:22:5a:63:94:50:d7:c3:b3:6a:a2:
54:fa:49:06:48:2c:af:47:8a:1b:44:d4:4b:ba:ab:44:bf:b1:
d3:09:37:f3:c2:f0:1e:0e:04:8f:ca:96:ef:5c:a8:78:c2:6a:
29:51:ae:c5:90:f3:92:66:a4:c9:03:c9:60:ad:52:82:4f:71:
07:be:57:39:af:c4:52:93:37:64:12:fe:17:2c:cf:c9:a8:70:
2c:e9:64:8f:d0:67:b8:a1:fd:b0:f2:38:dd:87:f0:d8:99:2b:
53:2f:0f:f4:50:bc:af:f8:a6:b3:51:d3:78:21:41:b4:9d:78:
1a:fd:26:bf:ae:38:7c:1f:63:e8:3c:26:5e:b8:cf:20:c1:b4:
02:5b:74:20:7f:50:a6:49:ca:df:3a:b2:bf:52:5d:56:be:e7:
b1:16:e7:6c:7f:37:25:b1:1e:4b:77:a8:44:b8:3e:6f:26:e5:
68:0d:35:5a:df:6e:c8:9f:18:5a:0c:1b:16:b7:f3:f8:b6:19:
10:3f:d4:78:f6:52:5a:76:a8:1b:eb:fa:88:5a:7b:cf:3d:04:
9b:77:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org