Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/978A9CB6D35F11ECB033D81EC4F9AE02.roa
File: 978A9CB6D35F11ECB033D81EC4F9AE02.roa (raw, json)
Hash identifier: l2E8hBL5IdcamNDzGyyONQGqJDHRN4p+sGuWkIUz+CQ=
Subject key identifier: 5B:77:7C:7A:14:FF:69:EE:9C:2E:61:2E:5C:77:D1:4C:DA:04:17:ED
Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial: 0ABB
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/978A9CB6D35F11ECB033D81EC4F9AE02.roa
Signing time: Wed 26 Apr 2023 20:17:11 +0000
ROA not before: Wed 26 Apr 2023 20:17:11 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 59239
IP address blocks: 103.134.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Validity
Not Before: Apr 26 20:17:11 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=644986c7-bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:2b:6c:12:c4:87:94:1d:05:02:04:5f:9e:
41:f7:38:ce:83:a1:cb:01:df:ce:24:2b:a3:b9:ab:
54:0d:15:80:68:8f:9e:e6:dc:00:ff:ea:b5:9b:8f:
17:d9:04:9b:28:93:aa:90:ea:0b:bf:cb:29:60:6a:
78:d5:d9:ef:ee:2a:f2:8b:41:49:4c:84:51:8a:b5:
a5:9c:96:7c:0f:1e:1a:ce:a6:89:21:90:e5:eb:76:
37:ad:1b:e8:4b:13:9d:d0:63:7d:d7:21:3e:67:90:
ee:db:bf:4f:3b:6c:cb:18:11:c6:27:ea:9b:f6:19:
e6:27:fa:1d:9a:c2:ed:c1:b9:a7:d8:c7:91:38:41:
28:16:d7:21:de:1d:fb:b3:e6:7f:d9:e9:0a:11:4f:
39:40:07:05:fa:7a:e1:8f:e4:78:55:2d:d3:b2:28:
06:6c:b8:de:51:72:0b:40:6f:84:f7:fb:53:cd:77:
04:34:95:15:48:98:83:ff:15:8d:67:22:bd:3f:9c:
80:76:42:33:ac:b1:a3:2e:02:5a:02:4d:61:99:8f:
b0:ee:26:39:aa:c8:05:36:0e:24:3d:22:6c:09:e9:
92:db:59:f2:15:7a:ef:3e:c4:01:a6:e2:56:ca:b9:
b9:3f:d6:65:7c:3a:87:ef:a9:93:07:12:74:d8:31:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:77:7C:7A:14:FF:69:EE:9C:2E:61:2E:5C:77:D1:4C:DA:04:17:ED
X509v3 Authority Key Identifier:
keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/978A9CB6D35F11ECB033D81EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:57:a1:b5:45:bb:fc:15:0f:01:c3:8c:7d:0f:84:2c:ca:1c:
3e:ff:74:28:5e:24:2c:0f:01:ce:28:a0:33:7e:bd:23:ce:3a:
2d:48:1f:07:89:b6:0d:c6:31:c4:0a:72:e7:75:a1:f6:62:31:
4b:3b:bc:d4:cc:2e:8b:be:9c:d3:98:b4:cc:f9:30:39:79:a3:
e6:ea:52:1d:f5:1f:a1:8a:12:b1:0a:1c:6f:f4:7d:93:de:1b:
f6:d5:a4:d6:55:a7:7e:5d:65:a1:33:40:40:03:e1:bd:ec:10:
f8:7f:43:f1:cf:20:dc:53:7f:33:77:f2:05:54:63:13:11:84:
e5:1b:c4:8e:47:4c:b4:b8:c4:e8:de:e5:b2:a7:c9:1a:df:bf:
f9:9a:0a:95:6e:c9:8b:6e:16:48:d1:47:75:83:3b:f6:d7:6a:
dd:0a:6e:e2:88:3c:66:bb:cc:f1:35:af:0c:21:80:ae:86:4b:
7a:b0:59:d4:af:d8:04:86:04:b2:8a:d8:59:a8:04:d4:b9:aa:
5b:9d:67:d5:c0:a8:cc:8c:06:6c:4a:dd:34:a5:72:e9:67:d6:
85:01:97:1b:56:e0:ba:1d:f5:a3:91:af:9e:fb:47:db:ca:5e:
15:43:63:f0:cf:f7:d8:ab:3b:b7:c5:de:9c:61:fd:c0:48:e7:
2f:eb:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org