Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/80D6259E680611EDAF16233DC4F9AE02.roa
File: 80D6259E680611EDAF16233DC4F9AE02.roa (raw, json)
Hash identifier: E23lHkBArVL+JCnbFVMgGiDkO66FO2wtKtLycDN95Hc=
Subject key identifier: 1F:78:74:F3:66:EC:64:AE:36:EA:E0:7A:25:72:5E:F9:AE:93:26:85
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 03
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/80D6259E680611EDAF16233DC4F9AE02.roa
Signing time: Sat 19 Nov 2022 12:34:26 +0000
ROA not before: Sat 19 Nov 2022 12:34:26 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 150435
IP address blocks: 103.41.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Nov 19 12:34:26 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6378cd52-78f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:9e:f6:e6:20:56:0b:8c:ec:56:fe:16:81:
9b:67:11:8a:14:fd:b9:fa:87:9e:b0:4c:6b:af:81:
f8:db:70:ce:54:30:78:fa:3a:56:ea:ef:8a:7b:b6:
a4:60:4e:b1:39:e1:a5:e0:5d:05:e5:1b:11:3d:6f:
da:1e:7b:da:c0:2e:6a:1d:6b:ce:89:58:2d:ed:4b:
5c:1a:ff:dd:ce:28:52:ac:8b:7c:e2:3a:1b:e9:54:
f7:fd:8f:cf:87:e5:70:15:db:47:40:4e:bb:64:1a:
6e:e2:f2:8b:ff:ee:30:cd:e8:a7:1b:53:ca:f5:e7:
da:7b:09:f4:46:ff:8a:1e:01:3f:47:c5:2f:50:9e:
b5:6d:30:d4:f0:ca:b4:c1:ca:51:15:b9:3d:11:5e:
e3:51:50:97:5c:31:85:00:04:12:d2:d7:b1:22:ec:
b9:73:5c:d0:23:0c:5a:7b:ab:de:6d:d4:b6:35:f1:
c3:a9:e9:53:f8:39:8b:e9:cb:d3:f3:eb:e7:b2:70:
48:ea:e0:26:d7:44:47:14:74:58:a2:02:13:11:56:
5a:44:e8:cf:28:28:82:49:3b:bb:04:ad:ba:db:32:
1c:d5:7c:77:30:7a:22:7d:bb:8f:00:3b:71:5e:9b:
bd:77:92:49:f4:39:cd:03:97:f3:d7:84:d3:0c:7e:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:74:F3:66:EC:64:AE:36:EA:E0:7A:25:72:5E:F9:AE:93:26:85
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/80D6259E680611EDAF16233DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:9b:50:e3:f9:e9:c3:0e:d8:23:43:d2:0f:48:19:4d:34:bb:
c1:d2:f0:57:e4:e0:f5:4a:6b:b8:28:3d:d4:3e:d4:d7:30:07:
6f:5b:d5:56:22:8a:e1:5d:55:dc:34:0f:58:7d:b6:8b:63:e7:
a0:25:63:9d:0b:ff:08:6c:45:6b:1f:b4:72:24:91:b4:12:df:
98:92:05:9a:d1:58:b9:09:94:0c:cb:86:60:b6:8d:0a:c0:bb:
59:84:f6:65:70:9a:ad:e5:29:db:0c:08:76:a2:2d:57:5e:6c:
d2:c3:78:3b:0c:cd:eb:21:8f:73:26:9e:5e:4e:54:77:38:9c:
bf:1b:6b:c6:35:03:f6:67:0f:80:9b:6a:ce:2b:28:5b:7c:6c:
8b:ac:fe:5b:51:87:73:e5:be:4d:8c:b3:9e:0f:b7:af:d1:4b:
7f:89:8b:b6:0a:43:be:c8:92:5a:0d:34:2d:07:bd:e3:43:ff:
da:94:2f:e0:a2:c9:75:92:cc:d0:ce:a5:b6:44:8d:88:18:7c:
cb:0c:58:48:b6:97:35:2b:45:db:21:43:26:ea:0b:ba:73:c1:
65:64:a7:a7:85:e8:33:be:11:f1:54:4c:8c:04:62:58:15:95:
b7:1a:cf:e9:b4:06:c9:bf:3d:0c:18:4f:b7:52:86:5b:2c:46:
4b:25:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org