Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/504BFB642A7C11EDBD88A840C4F9AE02.roa
File: 504BFB642A7C11EDBD88A840C4F9AE02.roa (raw, json)
Hash identifier: K7mulknqAKzrjPoz5IbSFztyfhEZRcUUroQ7e+/LbJQ=
Subject key identifier: 89:50:FB:04:89:20:BF:2D:AF:CF:C6:A9:0F:44:D1:BF:D7:45:B7:72
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 04DC
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/504BFB642A7C11EDBD88A840C4F9AE02.roa
Signing time: Fri 02 Sep 2022 05:01:33 +0000
ROA not before: Fri 02 Sep 2022 05:01:33 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 253659
IP address blocks: 103.110.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Sep 2 05:01:33 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63118e2d-18c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:b3:ae:ff:52:62:6e:45:6c:0c:6a:81:db:
06:b0:4c:d5:73:76:df:bf:e0:4e:e1:23:fd:2c:26:
16:7b:e0:bb:a3:5a:28:d2:df:31:c8:6f:3b:83:7f:
a4:36:18:a2:16:8d:b3:23:07:fc:71:cf:17:f8:93:
80:04:46:43:b8:06:9a:93:b7:e1:b1:be:f5:22:e8:
09:40:18:1e:ee:6f:9d:d9:0c:f3:a3:c8:32:32:16:
77:ef:7b:34:57:d4:aa:c4:f6:49:99:87:e9:f6:65:
24:79:14:c4:22:69:b2:47:ed:dd:48:2c:39:75:a0:
de:16:6a:d8:0a:15:7e:a2:12:c6:5a:b9:d0:17:8e:
59:8e:c0:c4:02:ec:de:e3:b9:3d:fc:89:1d:58:e3:
56:49:8b:3c:c6:86:60:7d:2d:70:e1:e0:e2:0b:39:
19:91:c1:82:d0:c9:6f:d3:3e:3b:ff:55:d1:b6:d9:
09:46:08:c1:de:46:17:be:e2:49:10:be:52:0f:df:
84:9c:98:0a:71:20:8c:e6:a4:0a:c6:2c:44:04:b9:
50:88:91:ee:59:af:dc:bc:67:0d:66:5d:8b:f2:59:
d9:33:6f:2f:e0:d3:05:7d:1f:5f:91:72:5c:c6:6e:
3a:9d:e5:5b:83:7b:af:04:65:c8:e4:57:42:14:58:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:FB:04:89:20:BF:2D:AF:CF:C6:A9:0F:44:D1:BF:D7:45:B7:72
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/504BFB642A7C11EDBD88A840C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.105.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f6:e8:6b:b9:a4:4b:f3:8d:0f:24:bc:04:07:f0:d8:ec:0b:
71:51:11:fe:45:6f:63:f5:1f:8f:87:13:15:10:4b:32:dc:f6:
3d:cf:7c:fa:7d:ea:d5:02:4e:d1:d7:f2:ff:f5:7e:ce:d1:89:
f1:1f:26:29:4e:0c:c5:2b:65:2d:1c:55:97:22:94:f8:0f:d2:
5e:12:3b:2b:b7:f2:c5:b2:dc:2d:3f:59:61:b8:f0:46:d2:b9:
5d:fa:84:04:5c:3a:df:82:96:08:8a:70:3f:46:a9:3d:97:88:
d5:11:9d:f2:f8:e3:88:80:19:97:f9:a6:50:9f:3e:5a:3b:83:
50:f2:e9:fc:d7:89:5f:59:81:8c:ad:be:c9:93:fe:5b:e7:00:
92:8f:ae:b0:56:de:40:63:9d:cb:54:85:7b:41:11:93:ac:47:
d5:ef:95:4d:d5:89:92:8e:11:c2:56:5e:13:f9:0c:bc:84:b0:
a7:7e:9b:73:cb:fa:52:30:0a:77:67:b2:51:b0:ae:d6:3d:58:
88:65:f8:da:5d:c8:e9:a5:fb:c3:19:3d:5d:32:47:6b:10:31:
72:86:ac:ff:43:88:c8:df:37:5b:17:01:aa:f1:fb:85:90:42:
87:3e:f8:6c:f3:e0:dd:d6:b3:0b:78:f0:b5:a2:55:8c:78:dc:
f8:42:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org