Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EECF250E2FC611EE8A3BCC3CC4F9AE02.roa
File: EECF250E2FC611EE8A3BCC3CC4F9AE02.roa (raw, json)
Hash identifier: p/Jy3zOCMiQ8dZgojOlafkr6FMpSshE41qCd2ssd5kE=
Subject key identifier: 4F:85:F9:9D:5D:21:52:7B:F6:47:F0:1D:6B:D5:5D:6B:74:54:FE:96
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 93
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EECF250E2FC611EE8A3BCC3CC4F9AE02.roa
Signing time: Mon 31 Jul 2023 17:23:15 +0000
ROA not before: Mon 31 Jul 2023 17:23:15 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 151080
IP address blocks: 103.41.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Jul 31 17:23:15 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64c7ee03-fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:e3:f5:85:f3:6d:b2:ad:07:12:2f:3a:ba:
58:d3:50:80:ec:66:b5:a1:3c:61:3c:6c:a8:80:7f:
98:ad:51:5e:9e:4c:81:c6:2c:e3:33:a0:4f:d0:00:
dd:fa:85:50:f6:42:dc:93:da:43:c5:eb:0d:64:59:
5a:a7:0c:96:fa:c4:6e:82:27:f5:a6:bf:5f:5c:91:
16:bc:61:1e:f5:68:5f:49:3b:31:a7:4d:2a:66:3e:
dc:3b:e8:91:9e:d2:d7:31:72:24:83:3d:4a:59:7d:
06:9d:fe:b3:35:e1:ff:35:e6:93:30:f3:6d:02:aa:
00:be:3b:a7:dc:27:ba:97:9b:45:a2:99:d4:10:1c:
cc:14:40:8c:9a:66:96:c9:f5:cf:34:69:fc:e6:d3:
de:55:1c:51:8d:7f:40:e9:3f:37:a4:a3:24:b3:17:
90:cd:85:b3:c5:97:5a:dd:be:01:69:e9:13:58:3d:
e4:f9:50:08:f9:c0:35:65:3b:d4:fe:2a:3b:3b:fc:
8a:b7:4b:12:6d:75:28:2f:8f:57:58:81:d0:4b:9c:
5c:59:1a:8c:50:b2:16:2e:aa:fe:22:48:02:aa:d7:
39:f0:b5:22:0d:d7:9d:7d:b0:42:77:99:9d:a6:88:
e2:04:63:20:d5:dd:2e:c6:5c:8b:52:09:4e:ec:86:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:F9:9D:5D:21:52:7B:F6:47:F0:1D:6B:D5:5D:6B:74:54:FE:96
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EECF250E2FC611EE8A3BCC3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.94.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:6d:ff:e2:25:70:4d:4f:a9:87:cf:6d:9a:3e:1d:ce:3b:19:
18:b7:5f:70:34:fe:27:be:79:0c:cb:a2:11:f6:a1:dc:7f:89:
65:cb:de:94:bd:47:95:8b:e9:18:a5:41:f8:2c:63:e2:9b:38:
64:d7:82:f6:85:e5:8c:55:67:09:0b:20:78:be:58:a8:2c:a3:
6c:4c:02:71:e4:f0:49:7c:a1:f2:6a:58:e6:aa:68:79:24:c3:
1c:33:aa:85:5c:57:8d:04:75:37:b9:0e:c9:0a:c1:50:3d:65:
c9:f9:45:e9:43:bb:72:aa:c5:54:86:83:87:75:11:e8:72:ba:
c0:2b:68:11:da:66:e6:73:e7:74:ff:43:fe:24:46:74:8d:51:
a6:41:3b:1a:1a:96:0e:1b:c8:34:ea:36:90:87:57:e0:ca:bc:
08:79:95:0e:55:b6:79:0a:1a:85:36:8d:ac:85:38:21:e3:d1:
27:ed:a2:fd:0f:70:51:4b:82:6f:5f:b6:c2:d0:5c:93:3d:1f:
70:5e:89:59:54:ac:b5:20:5e:55:39:4d:a7:5e:08:1e:dd:80:
0b:99:52:d7:db:62:1a:68:b9:89:ba:39:a5:9f:b3:96:d5:01:
68:a5:67:20:8b:8d:ee:c4:3f:ca:d7:77:6a:ed:c5:81:a2:83:
d7:ca:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org