Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/802A021E680611EDAF16233DC4F9AE02.roa
File: 802A021E680611EDAF16233DC4F9AE02.roa (raw, json)
Hash identifier: Pmu1Yq3CeRvO16bXnaxPGIKxhWBzSeCgsGOR7xGit8I=
Subject key identifier: 68:71:59:1E:22:61:08:AF:E6:D1:12:E7:5E:4E:C0:60:F0:87:49:A8
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 02
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/802A021E680611EDAF16233DC4F9AE02.roa
Signing time: Sat 19 Nov 2022 12:34:25 +0000
ROA not before: Sat 19 Nov 2022 12:34:25 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137449
IP address blocks: 103.41.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Nov 19 12:34:25 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6378cd51-3c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:dc:6d:e1:80:0a:40:88:1b:4e:79:9d:69:
8b:03:fe:d9:a1:70:cb:4b:71:69:6e:83:86:63:9a:
e5:07:95:58:5a:2f:1f:ba:e2:86:05:33:01:c7:e2:
40:36:e7:24:84:59:aa:7b:3a:9f:6e:87:a5:88:97:
34:21:ed:3e:01:33:96:e2:77:e9:1d:1d:8c:83:fc:
e0:2c:be:ae:ab:35:5f:a9:32:2c:78:01:ff:55:a9:
4b:aa:97:fd:05:1b:10:54:d8:65:f2:a4:e3:c6:6c:
b0:48:23:1d:aa:19:68:b7:2d:7a:a4:0a:97:71:4e:
41:c1:8f:34:a0:96:07:c4:77:92:29:f6:67:7d:a4:
83:e6:89:cd:25:60:c9:2e:ce:4f:c8:fd:87:cf:92:
2a:f3:3b:f4:0d:ce:93:8b:e1:50:6e:09:05:d2:d4:
6b:ae:37:7c:fa:10:6f:b0:15:0a:65:38:43:85:b6:
0e:b4:22:ff:d7:d4:5f:f7:cc:bc:5a:4b:1a:3b:85:
ba:df:55:31:e6:bd:24:47:7b:3c:21:01:d4:46:a5:
ec:37:43:2b:85:bf:62:2b:de:1b:b5:61:d2:50:24:
b1:fb:bd:3d:61:40:50:e1:6d:6b:6a:42:5a:2e:95:
36:6a:44:43:55:fa:52:7d:80:da:e1:fd:61:93:c3:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:59:1E:22:61:08:AF:E6:D1:12:E7:5E:4E:C0:60:F0:87:49:A8
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/802A021E680611EDAF16233DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
99:44:18:a5:e4:45:37:d3:8f:bd:50:4a:8a:62:96:b8:22:50:
e5:56:6f:ba:ce:ba:52:7e:53:7f:04:6a:ae:8b:60:78:62:39:
13:cb:37:24:7e:6a:6a:5d:46:eb:13:ea:75:fe:1a:9b:55:1f:
eb:63:80:53:31:ff:af:75:fc:6d:95:21:2c:1b:1a:cf:44:a1:
64:28:8c:da:ac:7e:ed:2d:f2:bb:0f:6f:e9:ee:47:85:08:14:
a2:83:95:64:45:83:6c:52:35:7f:e7:84:4f:7f:2f:a0:ca:e2:
cb:1a:e6:c4:72:76:b2:78:95:5f:40:7b:61:ac:31:97:6c:04:
be:d7:c5:00:f7:84:d4:31:e3:fa:0b:4c:7f:1a:55:e5:a7:1d:
90:b5:35:3f:db:ac:c7:11:2a:31:1f:8f:0b:0c:2c:d1:09:1d:
96:ff:6a:e5:95:e7:ea:dc:0f:f1:48:6e:55:20:c5:9f:4f:89:
84:07:11:c3:36:b9:a0:4c:1c:b1:cd:c2:eb:09:78:64:e2:a7:
d1:36:a6:ba:94:b5:ae:96:14:44:6f:45:2f:10:0a:ed:65:fe:
fe:0f:31:41:17:e9:d6:97:71:f3:97:18:a4:60:af:06:8d:73:
f1:c9:4b:d2:25:df:e6:6b:2d:a4:24:22:00:be:22:f2:f0:bc:
e6:95:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org