Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/CF329C22E5C111EB940F6517C4F9AE02.roa
File: CF329C22E5C111EB940F6517C4F9AE02.roa (raw, json)
Hash identifier: I/E8T9ahyv7XMhFzgrxszCa2+grw2eVGPRUQ2VrAySE=
Subject key identifier: B6:DB:14:92:69:E3:EC:87:7D:51:E2:BF:E1:C1:98:7E:30:C2:13:00
Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial: 02F1
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/CF329C22E5C111EB940F6517C4F9AE02.roa
Signing time: Thu 14 Apr 2022 14:12:29 +0000
ROA not before: Thu 14 Apr 2022 14:12:29 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.163.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Validity
Not Before: Apr 14 14:12:29 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62582bcd-bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:4f:e4:bc:eb:e7:4b:27:1a:56:b8:2d:84:
84:ae:6c:40:39:67:4d:87:4b:b4:7f:60:4c:00:6b:
20:f5:dc:72:7a:91:f4:10:5f:67:ca:fd:51:ff:c4:
ad:f5:4e:a6:12:bf:a7:55:9f:91:ef:ff:1a:69:54:
66:5a:5a:2e:d4:ca:c9:23:34:2f:46:b4:ea:69:27:
f2:f7:18:5c:0c:dd:f9:7f:3f:17:60:7f:61:60:a0:
51:d6:0d:67:16:97:3b:12:ab:2c:b8:d0:78:ce:5e:
8f:bc:d2:43:ce:21:08:aa:31:f1:03:74:73:c6:ca:
78:92:b8:b9:c1:18:fe:cf:70:d4:c0:91:3d:cd:da:
9d:e5:e7:26:50:91:21:ca:04:ee:c1:f4:9e:57:58:
28:f1:93:8e:35:86:bd:ba:ab:56:ed:a4:e1:de:be:
08:37:b3:f9:ba:53:c2:27:b7:61:db:76:47:22:cc:
37:68:a2:cc:04:5b:a0:20:83:6e:fd:4c:5f:99:ed:
63:47:65:58:44:bf:8d:4f:9f:53:d1:ab:87:54:ff:
76:ac:a0:b5:2d:d8:6f:59:a4:f2:c9:23:84:39:2a:
5c:87:b3:a8:17:d8:b1:cf:20:9b:ff:57:6b:4c:1e:
2c:2d:98:89:20:bd:77:b1:94:00:07:46:d8:9f:44:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:14:92:69:E3:EC:87:7D:51:E2:BF:E1:C1:98:7E:30:C2:13:00
X509v3 Authority Key Identifier:
keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/CF329C22E5C111EB940F6517C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.94.0/24
Signature Algorithm: sha256WithRSAEncryption
76:50:2c:49:df:bf:4e:6c:cd:1f:08:f1:7b:57:94:66:ac:83:
d7:d9:88:1b:8d:2d:8b:0c:ca:d3:e6:f3:98:60:e5:f7:1e:30:
c6:b5:ac:fc:3a:66:04:c8:e0:6e:c5:1a:a4:32:84:bf:0b:00:
c0:8d:6d:52:db:93:f4:29:47:32:b6:03:07:e2:fd:3a:6a:3d:
fe:cf:d5:10:6d:6c:44:67:99:38:c3:4f:13:aa:f7:3c:fc:50:
83:37:87:c2:44:1c:b3:e8:66:e3:2e:58:3f:82:e3:f9:f7:ba:
1f:24:2e:a2:d8:58:53:d3:c9:7d:65:d6:86:b1:9f:32:bb:9a:
ec:c4:28:2a:08:60:f6:b9:b5:cb:5c:00:f2:bb:1c:94:85:12:
95:f2:45:47:e3:df:bf:75:14:e8:54:b4:13:4e:dd:24:5e:29:
23:9b:ed:55:85:b2:52:16:19:05:12:ca:fd:9c:a0:ce:bc:ea:
b8:49:a5:d5:fb:15:10:cd:78:04:5e:13:06:4b:3c:d0:f1:0e:
ce:e6:6b:60:b1:da:b3:7d:36:b6:10:53:ec:80:72:6b:c2:fe:
d3:84:a3:45:c5:5b:d9:7a:24:1f:1f:a8:d3:15:5b:61:8c:fa:
bd:60:2e:fd:df:9f:4e:1c:36:2e:ab:4d:5f:ea:ad:cb:14:16:
d7:af:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org