Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/749EDE0E813F11ED8940470FC4F9AE02.roa
File: 749EDE0E813F11ED8940470FC4F9AE02.roa (raw, json)
Hash identifier: dQeXEqGfvjF0E1Zzxt9Z42RRmRrHUXNBKrxHCsoF8Oo=
Subject key identifier: B0:38:76:50:77:1B:F2:56:C9:09:78:E7:93:65:64:D8:AD:7E:D3:04
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 0E95
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/749EDE0E813F11ED8940470FC4F9AE02.roa
Signing time: Wed 21 Dec 2022 14:55:06 +0000
ROA not before: Wed 21 Dec 2022 14:55:06 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9654
IP address blocks: 103.103.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3733 (0xe95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Dec 21 14:55:06 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=63a31e4a-ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:2c:00:0b:81:01:2c:e8:cc:a0:c0:3b:f9:
ea:5f:2c:e7:89:f3:63:cc:42:96:6f:2d:62:bf:fe:
96:7e:2a:00:56:8e:97:3d:a5:ae:f4:9f:83:ce:17:
c3:d8:4a:05:73:be:e6:30:56:40:36:0c:78:da:d5:
12:e0:7e:d3:4c:79:70:0b:4b:ee:0a:8a:73:6b:ab:
87:f5:fe:33:ca:8f:11:df:d7:a1:04:32:c2:de:45:
a5:2a:8d:46:6c:b3:3e:fd:11:da:e3:2e:b2:3d:b7:
ce:4c:6a:50:c3:34:ba:00:fb:f3:a0:56:b5:8c:4a:
62:bb:b5:7d:a9:1c:de:5e:97:ba:23:c2:1e:cb:0d:
18:31:01:f0:c9:73:0e:ff:3e:0d:77:25:7c:05:31:
9a:b9:e3:02:39:7d:a8:0e:82:d1:4a:f0:38:70:7c:
c2:0d:c7:14:5e:47:34:ca:d6:4d:e8:b2:11:4a:89:
a5:d7:4a:68:c9:9d:c2:c8:0a:94:bc:d6:0f:48:ef:
e7:31:f5:f4:9c:99:00:32:f3:b2:19:6c:aa:64:19:
7e:53:5e:a2:58:e9:9f:32:b0:fc:cc:f7:4c:99:d0:
fa:d2:67:e3:99:60:83:fc:30:a7:a5:cc:cf:db:d8:
d4:e8:da:44:15:a0:77:c5:0c:20:1a:7d:16:64:09:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:76:50:77:1B:F2:56:C9:09:78:E7:93:65:64:D8:AD:7E:D3:04
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/749EDE0E813F11ED8940470FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:fc:ca:78:36:a3:57:fe:a3:f1:6b:ed:a7:55:28:23:9e:
80:00:b8:c0:72:99:6a:01:5f:33:c8:e0:13:f7:73:a6:bd:98:
3e:7a:9f:fe:6e:2e:27:7e:70:b4:35:e5:36:80:0f:32:b0:3b:
3b:ee:ec:aa:cb:11:70:4f:02:07:8e:ec:f3:ad:ec:84:78:fe:
0f:b7:ea:29:50:76:e8:9b:8d:ed:2d:e5:85:e7:78:03:c9:67:
87:2a:3a:1b:ae:79:5e:c6:ee:23:b4:78:31:c7:0c:cd:05:de:
e0:27:25:38:a6:8b:d4:7e:f4:27:b5:c1:17:3f:68:4b:94:dc:
91:00:15:ff:95:e1:a5:70:91:d8:8f:61:37:dc:f1:60:1f:c4:
6d:32:b0:2b:5c:f8:24:bf:6e:68:b9:6d:a3:0d:ef:68:06:93:
a2:ec:9c:3b:3d:a7:f3:d3:49:c1:0d:85:8c:d3:a3:85:5e:8e:
fc:6b:d9:06:e3:a2:8d:5c:4e:3e:20:f3:31:62:db:18:06:3a:
a8:f4:d5:46:1d:fd:9a:94:e5:be:73:86:8e:8a:fc:fe:49:1c:
6b:3f:7f:30:97:07:41:f7:83:de:43:9e:52:c8:96:84:ab:8f:
60:96:f8:1c:65:a5:20:e7:f2:af:19:2f:6d:b5:c2:0b:7e:d2:
87:67:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:26 2024 by rpki-client on console-ams.rpki-client.org