Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/96E7A7FCB66E11EDBE257415C4F9AE02.roa
File: 96E7A7FCB66E11EDBE257415C4F9AE02.roa (raw, json)
Hash identifier: 0AySfiyEjoUu0VMhV6WYOhXp9IfZ5qhfH8xGCkeldIg=
Subject key identifier: 90:D4:07:BF:7C:58:7B:55:4C:98:7C:75:4F:58:55:58:AF:94:1E:3D
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 0274
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/96E7A7FCB66E11EDBE257415C4F9AE02.roa
Signing time: Mon 27 Feb 2023 07:16:01 +0000
ROA not before: Mon 27 Feb 2023 07:16:01 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149418
IP address blocks: 103.179.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Feb 27 07:16:01 2023 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=63fc58b1-bab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:44:fe:c8:86:25:ac:2a:f2:e7:63:fb:1a:
18:65:25:1e:42:66:14:e2:61:12:a4:4f:23:e0:a9:
df:5b:fc:06:bd:40:91:6a:13:39:e9:b8:44:05:58:
f0:10:b0:c3:c9:f9:39:f7:1e:63:ea:66:c8:39:d7:
d1:0e:11:a3:da:8d:0d:70:ee:f9:53:52:a9:b9:a0:
38:6a:6e:49:2e:a9:7b:4e:47:7f:5a:ad:6c:74:ef:
aa:95:7c:a0:cb:33:71:b4:96:d8:43:9a:54:e1:c6:
1e:6f:08:f2:98:10:2e:b8:e7:ed:54:ca:8f:c8:3d:
e0:e6:8e:d0:7f:d4:9d:5c:4e:ee:b2:76:7b:a5:4d:
e5:f1:14:c9:d1:9a:71:99:1a:ad:21:b5:f7:16:6b:
4c:07:20:86:c4:a2:5f:24:d2:81:fa:26:8d:37:35:
91:54:9c:dc:01:47:14:d1:1e:4d:6a:c8:03:a5:e7:
37:35:06:50:d4:3f:66:4d:01:f4:d3:a3:d7:09:da:
58:84:94:d4:f2:ed:ca:8b:9c:d6:f1:64:c1:ee:86:
e3:71:df:10:51:4d:d6:40:cb:36:bd:44:77:c1:c7:
ea:9d:c8:e5:7f:08:d3:5a:58:d8:82:f0:5d:78:43:
8c:29:09:47:b5:66:ad:48:95:9d:c9:48:ee:09:e4:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:07:BF:7C:58:7B:55:4C:98:7C:75:4F:58:55:58:AF:94:1E:3D
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/96E7A7FCB66E11EDBE257415C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.14.0/24
Signature Algorithm: sha256WithRSAEncryption
29:77:e3:a3:42:8a:11:66:e1:a8:bd:18:ba:79:5c:b6:cc:49:
3a:86:d4:b3:1b:7e:27:2c:4b:1d:2e:26:d4:fb:90:9c:c7:e4:
de:7a:8c:c8:e0:bd:b1:ee:47:c1:79:ee:5e:9e:5f:ad:57:c8:
6c:43:13:ca:da:d3:ee:28:3d:9e:87:21:43:c4:7e:9f:a1:a4:
86:91:ba:49:56:75:94:4c:98:ed:d1:b6:45:e2:32:2e:2b:34:
91:74:f4:c3:45:3a:91:ca:98:8c:5a:c2:14:e7:a3:d5:3f:75:
a4:23:a1:43:85:8f:89:e7:26:4e:eb:69:6a:5d:62:81:2f:cf:
dd:42:82:87:00:1d:ea:70:18:25:73:c9:1b:d9:1a:35:7e:a0:
83:e5:e6:5e:f9:2b:99:f9:00:5e:11:a1:81:9f:eb:e8:f7:e5:
a7:2f:b8:ad:06:55:16:3c:2b:0e:6c:75:15:af:e8:4f:ec:d6:
4b:2b:f0:53:f3:97:b6:69:f7:d9:86:b2:ce:bd:ba:07:68:11:
47:20:09:11:3c:06:a0:f4:85:2a:8d:f2:cb:72:e6:bd:1d:db:
8f:03:84:1e:b8:47:3d:a9:a5:62:cd:e6:fb:66:cf:12:4f:9c:
ca:11:2d:cc:f6:de:8e:8a:fa:d0:a9:bd:e5:c4:65:fc:81:92:
db:61:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org