Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B84BD1BC8FFE11EC9BB3480BC4F9AE02.roa
File: B84BD1BC8FFE11EC9BB3480BC4F9AE02.roa (raw, json)
Hash identifier: p/EoCtbLnPuKkpxcuMlnzdHjRZUJu00riJGQE8D040k=
Subject key identifier: D6:73:5E:38:73:D5:2D:73:10:8C:1A:B1:25:14:3F:08:F1:99:1F:58
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: 86
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B84BD1BC8FFE11EC9BB3480BC4F9AE02.roa
Signing time: Fri 04 Mar 2022 13:13:29 +0000
ROA not before: Fri 04 Mar 2022 13:13:29 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149414
IP address blocks: 103.178.220.0/24 maxlen: 24
103.178.221.0/24 maxlen: 24
2001:df0:3e40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Validity
Not Before: Mar 4 13:13:29 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=62221078-1339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:0d:ab:64:dc:03:d9:9c:1f:05:54:9b:84:
be:df:dd:42:df:b3:a1:3c:e7:16:1d:24:0e:1e:b5:
79:3e:fe:e5:1f:40:74:ce:c3:6d:1b:12:c6:0c:c9:
63:60:9c:0d:32:e2:b3:a0:a1:6c:f7:9b:91:17:e4:
0d:2a:ae:a1:11:59:21:95:ce:25:10:a7:30:5f:2e:
0d:33:c3:32:6c:ae:96:14:dc:39:24:dc:e7:b6:28:
5f:23:f6:e4:3d:47:80:6e:cb:e4:54:12:f5:4a:96:
83:f4:97:da:d6:1d:69:85:b3:64:16:80:87:51:bf:
a0:c0:50:17:14:a5:b0:c9:99:1a:a3:d0:7e:36:eb:
a4:38:8a:8c:c3:93:85:fd:ae:b0:d5:42:69:eb:3d:
55:df:a5:34:01:ba:19:15:ae:26:ca:ee:4b:27:07:
40:cf:a3:51:14:49:9f:ca:e3:e2:7b:9d:e5:df:3b:
82:c3:e2:33:d5:c3:d5:10:c1:7f:58:df:65:5d:cc:
bc:a8:c3:15:9e:f9:07:4e:45:01:c5:a8:00:b8:f4:
43:c1:06:43:f0:da:b2:da:b6:47:c1:c4:86:aa:05:
bd:e2:ba:cc:d0:b8:d9:7a:f5:e2:3d:ee:c1:6a:67:
3e:6f:5b:4b:ef:e8:9b:c5:32:01:06:ce:07:7d:7d:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:73:5E:38:73:D5:2D:73:10:8C:1A:B1:25:14:3F:08:F1:99:1F:58
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B84BD1BC8FFE11EC9BB3480BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.220.0/23
IPv6:
2001:df0:3e40::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e1:de:b7:c5:1f:68:0c:b9:c3:cc:6e:59:79:99:59:55:c1:
8b:4b:26:75:ca:f0:fb:ce:3a:69:ba:12:63:f8:55:b3:cf:c4:
8c:40:da:4f:b2:d0:ef:75:81:11:30:0c:91:83:51:6c:0c:5c:
c6:e2:ea:1f:ba:0b:6c:7f:5e:4a:94:01:4a:de:7e:c5:c2:a0:
9a:ee:08:40:97:a5:f9:c9:23:ce:7e:ae:00:3b:a0:70:cb:c0:
71:1a:cc:3b:60:6e:57:0f:74:06:45:1b:79:62:f6:55:a7:e2:
5c:45:81:a8:1f:2c:ac:c0:35:02:98:36:03:90:fd:af:f4:da:
73:59:1a:67:3c:b0:db:09:02:50:82:0d:9b:10:c2:d3:b8:23:
08:13:7e:3e:6c:db:e4:10:e8:76:77:a5:3f:5b:0e:86:9f:af:
4d:92:e1:41:cc:09:bd:29:43:3a:10:dd:55:91:fc:65:07:02:
ac:67:d0:57:4a:25:6c:f0:da:57:0d:fa:36:f7:2c:19:34:84:
4d:b0:4b:b2:61:5f:a3:d8:ce:b2:03:2c:7e:78:ea:b2:0a:24:
af:c9:b9:5a:0a:a9:be:1f:18:32:da:df:d7:2c:06:67:25:4a:
f2:1c:78:ad:7b:f6:d0:6b:c7:c1:3d:bf:bc:06:f9:36:d8:c2:
99:f3:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org