Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/DC24F64C552C11ED81EFA355C4F9AE02.roa
File: DC24F64C552C11ED81EFA355C4F9AE02.roa (raw, json)
Hash identifier: A9BM2jrYH33/Op4OY1n0r5o5WZwRGFnyQnxMy2nw93c=
Subject key identifier: BE:FD:1A:FB:11:68:6A:A7:BB:F7:E9:63:D7:6D:7C:BA:F4:8E:CC:9F
Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial: 0453
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/DC24F64C552C11ED81EFA355C4F9AE02.roa
Signing time: Wed 26 Oct 2022 12:51:08 +0000
ROA not before: Wed 26 Oct 2022 12:51:08 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 0
IP address blocks: 103.163.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107 (0x453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Validity
Not Before: Oct 26 12:51:08 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63592d3c-1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:54:d6:40:dc:13:b2:7d:a6:57:65:e3:6a:
06:ae:6a:e2:7d:fd:b8:39:53:53:c1:c2:cc:72:04:
53:19:be:6f:c2:57:32:ca:71:59:e3:ee:6a:02:11:
2a:53:37:78:35:2b:5c:6d:5c:dc:da:9a:b1:29:b2:
a7:1a:11:c6:a8:15:e6:1e:8a:28:2c:8c:4d:7d:ba:
39:5c:83:e2:4b:cb:8f:c4:cf:64:1b:2f:f1:a1:66:
9c:76:0b:55:a5:7c:33:75:71:f0:00:9c:d4:a6:b1:
49:3d:48:ba:e6:ce:c2:03:75:12:2c:ed:99:56:73:
ef:0f:c9:cc:db:64:70:dd:5f:2e:d1:14:9e:cc:48:
40:8e:4d:d8:b9:6e:44:57:53:53:77:74:42:da:80:
88:55:76:2a:d0:0f:4b:94:7b:c1:c1:75:f2:6b:97:
9a:3b:f6:17:cd:9c:49:2a:0f:68:4a:cd:c7:5c:20:
78:8b:cd:e7:75:49:be:62:2a:a2:75:ba:f7:21:4f:
b3:a8:7a:93:07:56:bf:67:7f:7f:53:57:b0:e5:49:
90:cd:32:9e:fc:1e:e5:67:d6:3e:7a:ea:51:4f:4e:
75:a4:8f:15:b7:5b:93:61:ff:3e:94:cd:79:92:09:
71:26:d2:d5:c6:17:8f:21:cc:39:90:a4:96:95:c6:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:1A:FB:11:68:6A:A7:BB:F7:E9:63:D7:6D:7C:BA:F4:8E:CC:9F
X509v3 Authority Key Identifier:
keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/DC24F64C552C11ED81EFA355C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.94.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e4:85:41:b7:ae:f9:ca:56:94:f9:96:37:4f:87:0d:47:42:
5d:28:a2:be:e4:b6:16:81:05:8e:30:7a:0b:71:83:58:44:7c:
1f:83:04:0e:9d:c4:94:65:a0:c1:77:56:47:60:fe:3c:8b:81:
8a:2d:24:57:05:3c:c3:99:63:d4:85:d9:3a:d8:fc:3d:0c:f9:
b3:bb:b4:08:4a:55:51:a3:f7:a9:95:09:ad:97:ac:af:12:58:
bd:66:85:ff:49:94:c0:fa:08:17:f5:3a:1b:5a:fb:fd:14:ba:
d1:b8:a5:05:a6:7f:00:8f:10:19:7a:53:b4:27:2d:52:39:48:
0e:f4:74:56:82:b8:b3:11:7c:06:2b:b0:fa:68:04:69:43:8e:
8d:60:29:30:ff:43:3b:5a:b9:61:ec:cc:97:fb:28:74:ba:18:
e2:a7:3f:39:fd:42:c1:16:72:72:48:e1:fb:c5:72:35:4d:49:
14:33:4c:2a:3e:3d:b0:12:c3:57:3c:52:80:c8:a4:9b:11:62:
16:8e:ce:d3:66:04:a5:3a:bb:0f:6a:41:f1:e8:5b:59:c0:63:
78:ce:f8:1c:7c:52:8f:82:e5:3c:60:14:93:4a:ca:36:85:7e:
c9:71:65:b0:95:08:f6:4d:9e:e7:be:a8:ad:8d:f0:70:17:54:
5c:f9:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org