Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/30C7A352D36F11EBB46E4E78C4F9AE02.roa
File: 30C7A352D36F11EBB46E4E78C4F9AE02.roa (raw, json)
Hash identifier: BbRCbIQ6fd6O7e2gp3/1EF4pYGrNbTeXGgOMc6eyDbs=
Subject key identifier: F8:53:6F:63:52:E3:4D:18:9C:E2:63:06:E7:79:8E:82:E4:7F:C5:BD
Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial: 02
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/30C7A352D36F11EBB46E4E78C4F9AE02.roa
Signing time: Tue 22 Jun 2021 15:33:28 +0000
ROA not before: Tue 22 Jun 2021 15:33:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141992
IP address blocks: 103.164.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Validity
Not Before: Jun 22 15:33:28 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60d202c8-76d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:7c:99:62:02:df:ee:dd:83:37:c7:90:db:
de:df:f7:c0:8a:fb:ef:27:ad:e0:b9:b5:60:fb:ac:
da:43:58:a0:d4:70:03:fb:50:74:55:4e:c3:5b:f7:
e9:ca:5e:6d:5e:db:c2:48:e7:57:ad:dc:22:48:f0:
ce:fc:e9:14:8f:a0:86:ca:b3:56:27:2e:17:05:a5:
22:ed:2d:98:a4:c4:d0:d0:59:5e:09:af:f1:df:b3:
28:ca:7a:fb:ab:fb:4d:bf:d5:71:e8:b5:e4:94:3f:
28:e8:06:a1:0e:2d:78:5c:84:c9:bf:5f:e6:72:f5:
5e:fc:6b:2b:8b:ec:56:a1:6c:41:23:c5:96:d6:75:
79:6d:61:c3:d5:de:4c:d7:3f:b8:f7:09:0e:06:6e:
e2:29:dd:60:cd:56:b7:c7:e0:94:46:8b:28:cb:e4:
70:21:7a:24:d0:85:d3:29:b8:b7:a2:dd:d2:0c:08:
6a:36:2f:ad:a1:31:15:53:62:0e:32:53:5a:c3:0e:
18:ef:10:6c:71:de:f4:50:32:50:d4:0d:8b:a7:9f:
87:55:99:4f:e0:c3:28:df:71:04:be:7c:9d:cc:97:
e0:08:dd:71:ff:86:53:f3:1d:6e:96:92:28:79:c4:
c5:5a:14:98:d2:ce:1c:62:8f:e5:44:c0:ae:ec:3d:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:6F:63:52:E3:4D:18:9C:E2:63:06:E7:79:8E:82:E4:7F:C5:BD
X509v3 Authority Key Identifier:
keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/30C7A352D36F11EBB46E4E78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.30.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e1:75:24:6d:60:22:f0:bd:2b:6f:e8:85:91:12:41:50:7e:
2a:7f:f1:ce:e5:d5:12:64:ea:74:e5:ab:c8:6c:ac:5c:62:ef:
52:f3:4e:78:5a:ff:d4:40:a2:c5:80:3e:19:45:fa:c9:de:a8:
89:1a:14:a5:90:bb:2c:4a:20:1e:3c:5b:b3:92:fd:ba:f5:bd:
fa:c1:9a:c8:cc:8b:db:fd:e4:80:e9:ac:9e:ef:a6:7e:f9:cf:
2d:8a:79:b0:55:40:6e:9b:40:bd:c8:b2:fb:dd:2a:4c:87:94:
eb:51:c3:5f:ad:69:40:be:9a:05:07:52:05:2f:f3:ac:87:7a:
be:99:54:15:bb:18:69:7e:f3:e6:21:99:2f:46:bd:2c:53:f7:
a7:f3:dc:7f:e7:fd:14:fa:d8:bd:df:c6:38:fa:2f:a2:04:16:
0e:2a:70:71:35:d6:1c:50:85:c0:ce:1f:b0:71:94:b4:1a:fd:
f3:51:4b:6a:2f:4d:fd:7c:6b:f2:9b:c3:32:a1:9c:f6:13:03:
d7:fd:5f:d9:84:fb:da:12:37:de:c3:a1:ab:ea:de:26:99:a1:
31:f9:2f:d3:8b:9d:de:6a:40:9f:d3:38:ff:0f:96:30:2e:69:
42:b3:cf:e2:f1:b7:00:ae:f8:d8:ed:3a:4b:23:aa:d4:e9:ce:
53:d6:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org