Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/157605A4099B11ED8A62781AC4F9AE02.roa
File: 157605A4099B11ED8A62781AC4F9AE02.roa (raw, json)
Hash identifier: rxzWNQxL/iEkCRYvkAdsFTg28GLEN4R+SEM8HII8ug0=
Subject key identifier: AE:32:6A:7B:AB:E6:5A:95:A2:49:E9:07:85:28:AF:B1:A3:F3:B5:7C
Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial: 07E6
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/157605A4099B11ED8A62781AC4F9AE02.roa
Signing time: Fri 22 Jul 2022 08:48:40 +0000
ROA not before: Fri 22 Jul 2022 08:48:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136205
IP address blocks: 103.149.50.0/23 maxlen: 23
103.149.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Validity
Not Before: Jul 22 08:48:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62da6468-84bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:99:33:6f:15:87:b4:c0:1c:75:ce:fe:f2:
07:cc:5a:c2:70:02:8f:cb:f8:19:66:d5:78:6d:fe:
cb:02:56:e7:fe:32:d6:96:94:ce:82:d6:7b:b8:ec:
0c:3e:ff:df:44:7d:43:ac:8d:33:16:ca:f6:81:7b:
5a:a6:f8:75:ec:31:d9:bf:d2:85:4e:b9:45:ff:10:
f9:ce:17:01:54:63:01:da:90:44:5a:06:74:38:52:
20:15:03:a9:87:1a:2e:ab:ee:42:59:d3:c2:ca:63:
f7:ee:64:9a:4f:bb:c7:e9:74:b2:1a:ae:ba:36:70:
60:fe:4e:5a:32:e9:df:7f:f0:b8:6c:6a:33:40:d3:
8d:32:82:90:c5:f4:7a:65:e6:04:8a:9b:3c:e1:e9:
0b:05:1e:12:8e:80:39:91:68:3f:de:d7:44:90:dd:
19:c4:61:c5:07:60:2d:bd:6f:5c:fe:3f:4f:6e:fd:
7b:99:7a:b1:41:67:4d:c9:c0:b8:71:19:af:b0:01:
49:7c:84:ca:58:f8:cf:5e:0d:6a:43:2b:e3:dc:47:
a7:80:73:02:3d:28:39:dd:14:2a:25:db:61:39:8f:
fc:40:29:74:b8:d5:a2:78:2c:7d:92:0b:21:5d:dc:
f7:3f:7c:89:f0:b9:89:2f:e2:a6:4f:31:2e:1e:56:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:6A:7B:AB:E6:5A:95:A2:49:E9:07:85:28:AF:B1:A3:F3:B5:7C
X509v3 Authority Key Identifier:
keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/157605A4099B11ED8A62781AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.50.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:cb:4b:8e:58:23:3b:26:fe:4b:25:b0:5b:36:fb:05:65:67:
46:86:01:5f:8d:c1:69:45:c8:aa:c7:36:7b:85:24:10:c5:a7:
0f:b3:02:a1:09:17:fd:2e:fb:10:1f:42:dc:05:7d:99:0e:7c:
22:02:42:f1:57:da:19:83:03:34:75:90:4d:33:66:34:e9:96:
4b:16:95:87:e5:17:fa:2a:4a:84:27:d7:4f:fc:48:e3:c6:be:
f9:ca:7a:86:64:b1:68:9a:6c:6f:c7:e2:b7:5d:ab:25:09:5d:
6b:23:ea:e9:ad:62:b2:91:1f:10:94:59:60:8e:3b:e5:62:e0:
25:9c:f8:c4:0b:77:87:56:b7:d3:49:a5:e4:09:04:19:6f:0a:
77:83:b2:e7:a0:96:06:26:93:74:40:08:c1:f2:c5:78:12:4f:
d9:ea:47:7b:20:64:4a:68:11:db:b8:c2:4a:e9:ca:2a:e3:9e:
46:4d:cd:b1:bb:19:25:34:d7:23:7a:f9:da:20:54:a3:bb:44:
3b:57:f4:99:49:58:63:c6:4d:e5:73:24:f9:be:1d:bb:fa:82:
6b:07:7c:64:e2:57:0a:05:7c:d4:30:bf:df:99:77:90:28:10:
d3:09:0b:9d:c6:69:97:6f:86:22:a0:72:1b:ed:74:bb:d1:c9:
52:d5:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org