Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/ADC306EE597D11EEA217B11AC4F9AE02.roa
File: ADC306EE597D11EEA217B11AC4F9AE02.roa (raw, json)
Hash identifier: ckBcv7nGjJB9p8QwQezDosUvxXqWqi+f8v5IEV4tGOA=
Subject key identifier: FD:98:7D:28:99:AB:DF:D7:A7:B4:6A:20:02:82:8B:64:53:3B:23:2E
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 087B
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/ADC306EE597D11EEA217B11AC4F9AE02.roa
Signing time: Tue 31 Oct 2023 21:48:29 +0000
ROA not before: Tue 31 Oct 2023 21:48:29 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 55714
IP address blocks: 103.194.94.0/24 maxlen: 24
103.194.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Oct 31 21:48:29 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6541762d-b4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:77:8f:04:55:2c:15:16:b1:7f:9f:79:ea:
ca:1c:ca:c9:89:6b:22:f3:2d:04:0b:ec:ab:4b:29:
9c:ac:d9:26:11:61:e1:e3:df:a7:e5:47:c0:02:df:
04:cf:d0:a0:86:14:2d:6c:e4:5f:c8:2a:0c:b1:cf:
5e:46:95:cc:a0:ef:47:b7:4e:ea:5a:be:58:7f:23:
27:40:99:9b:4b:1c:be:f1:f0:ff:d2:14:6c:a0:a0:
fe:b6:6f:42:fe:7a:77:4b:a9:b7:47:05:23:df:5c:
ee:d2:4a:ae:23:3e:89:30:15:e3:bb:81:11:90:79:
65:7c:69:29:fb:02:f6:59:57:ba:f2:ba:2f:88:53:
d0:56:13:72:b7:fa:a3:b0:b3:06:f9:93:66:22:c1:
05:11:69:14:5a:bd:54:5e:98:d5:30:3e:6c:15:4b:
de:94:01:0c:78:a1:23:2b:77:e5:61:fc:31:b5:e3:
38:ac:8b:1b:6f:cf:27:1f:fd:0d:94:0a:0d:8f:76:
63:2d:46:e6:ff:39:71:8a:08:20:e4:5c:b1:b3:07:
4a:b1:ca:07:32:2c:5a:f4:9c:e3:5f:63:b5:fa:ca:
d0:45:f4:35:d4:37:5d:59:31:f7:9b:87:90:99:50:
33:c4:2e:f6:a8:8a:df:3d:99:75:74:ee:22:9e:a7:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:7D:28:99:AB:DF:D7:A7:B4:6A:20:02:82:8B:64:53:3B:23:2E
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/ADC306EE597D11EEA217B11AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.94.0/23
Signature Algorithm: sha256WithRSAEncryption
84:49:76:47:5a:6f:f8:5c:06:b6:0e:8e:dc:9e:90:44:53:ac:
19:6b:4d:a9:b9:f7:44:30:cd:09:a8:89:c4:b0:b9:3d:67:6a:
98:b4:92:94:e4:5e:a4:cb:6d:98:46:c9:00:6b:a8:97:e0:dc:
63:31:5d:0a:0e:d7:71:79:26:19:32:7c:bf:0d:65:29:e5:00:
f3:22:d7:cc:c4:2c:a2:0b:e9:91:c2:74:a2:b3:1d:f1:7e:2c:
43:f7:82:aa:18:5a:4f:8f:45:b1:f9:ee:f0:58:37:27:38:16:
b4:32:68:53:3d:26:16:91:65:fb:60:24:f5:c2:bc:e0:ee:df:
27:f9:8c:fb:e9:6e:11:d8:ee:8f:05:b5:40:ba:cb:45:2e:b8:
86:bd:db:64:82:67:c4:38:bd:f3:44:f9:dd:32:0c:6d:04:bc:
0a:be:ce:84:1b:62:01:6b:a5:1f:ab:ec:1e:4f:5c:a6:01:d5:
97:bd:04:01:a2:79:5a:dd:f2:b9:6c:64:b0:57:b3:b9:ce:44:
ff:46:f4:22:33:d5:37:e8:1d:64:0e:20:05:79:24:0e:eb:2d:
2c:40:7c:95:61:fb:23:e0:9e:3b:22:ce:f4:31:7e:6d:0c:98:
f1:6f:3a:8e:0c:d7:59:dc:00:59:16:b2:f6:11:84:2f:ad:5f:
a2:77:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org