Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/C6B96D7CE5F711ED8273323EC4F9AE02.roa
File: C6B96D7CE5F711ED8273323EC4F9AE02.roa (raw, json)
Hash identifier: eLIE9Ze3NWeuboXpzL0Zqktg0mM92VwSLmCKgGtziiI=
Subject key identifier: 3C:25:49:FA:55:B8:24:DD:87:A8:61:F2:29:22:47:62:18:36:83:77
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 6E
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/C6B96D7CE5F711ED8273323EC4F9AE02.roa
Signing time: Fri 28 Apr 2023 19:06:27 +0000
ROA not before: Fri 28 Apr 2023 19:06:27 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 142295
IP address blocks: 103.19.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Apr 28 19:06:27 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=644c1933-ebf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:7f:de:38:2a:97:ac:9b:e2:0b:14:0f:93:
57:fc:99:94:e1:da:f5:1d:7a:6c:70:50:f8:b6:2e:
06:29:53:d8:88:70:07:53:e9:61:dd:7a:7c:5f:8e:
f6:9b:4e:9e:3a:12:ea:a3:8b:34:3d:6a:28:e1:d4:
68:be:e7:3d:96:15:71:21:2a:44:bf:0d:fb:9d:fc:
37:d5:6f:cc:71:25:87:70:bf:9d:85:45:3f:0e:dc:
66:d3:ad:78:c6:9d:c2:a3:04:22:08:c2:d1:88:36:
7b:57:d9:fe:b8:9c:14:ea:d3:f2:27:23:1f:32:86:
5e:9c:03:c7:19:96:26:25:1d:e6:f8:03:c4:57:ae:
3b:ee:c3:68:9a:c8:f0:7b:4b:fb:47:bf:b4:06:62:
9c:0e:f1:d5:bd:59:a3:f2:2a:41:53:02:20:67:e0:
88:a4:4a:90:90:36:c0:1a:e0:f0:ca:bd:b3:69:e8:
5f:1c:79:d0:34:d8:86:a7:3a:51:83:13:aa:83:90:
65:81:3f:dd:af:f0:a4:9f:a2:a6:af:b4:58:bb:11:
85:d7:6f:b3:47:7e:c0:3d:95:5a:ed:3e:b8:34:88:
32:9f:2e:28:f0:9e:61:60:ce:06:9b:f6:b5:2a:91:
e0:35:1d:65:1b:8c:15:14:cb:ad:c4:b0:66:3b:0e:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:49:FA:55:B8:24:DD:87:A8:61:F2:29:22:47:62:18:36:83:77
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/C6B96D7CE5F711ED8273323EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1e:85:6c:56:a6:fe:26:51:8d:5b:93:b8:f8:51:d3:3f:65:
a5:31:c8:a5:dc:c0:e3:6c:3f:56:9e:7e:92:7d:9a:4f:2c:01:
bb:a9:e0:e7:81:c9:cf:32:ec:79:c8:3d:ae:2c:2f:14:f0:a8:
a5:f3:f8:6c:aa:25:d5:0e:ec:16:19:bd:92:a3:26:15:26:26:
38:c5:ba:42:9f:55:5e:d1:b4:aa:ce:bd:fb:ed:73:e7:1a:15:
2d:88:0f:0f:50:7e:97:5c:8d:a0:50:c3:f8:c7:8f:65:dc:39:
46:2f:b4:0a:d7:35:11:85:15:12:38:77:3e:bd:5e:bc:b5:d3:
10:4f:54:fd:f1:9e:1b:e9:42:86:e7:56:2c:29:60:af:44:81:
98:fd:b4:b0:19:a4:92:1d:65:9e:bb:8b:15:75:ad:fc:e3:d0:
ff:f7:92:c5:50:c1:5b:50:89:61:03:24:e0:fa:a7:01:25:e5:
f7:92:7f:39:1c:68:bb:38:70:e6:00:84:0a:23:7a:00:1d:cc:
fc:ec:ce:59:bf:90:6c:b9:e5:c7:b6:ec:d4:6c:42:fa:84:db:
08:ab:89:1b:f4:19:7a:84:2d:99:42:df:30:3b:5f:72:6c:44:
da:99:65:80:40:4e:1a:ff:35:3e:63:ff:34:e1:66:33:ae:55:
56:f6:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org