Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/0337FBF60E3F11ED984C551DC4F9AE02.roa
File: 0337FBF60E3F11ED984C551DC4F9AE02.roa (raw, json)
Hash identifier: FYrepOPWUqwksgmTT2LuKaAdzEB5U+cD3iZB0s26g9U=
Subject key identifier: C5:41:85:58:3A:34:DF:C3:BE:E5:68:23:AA:07:FD:01:1A:C0:E8:72
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 025C
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/0337FBF60E3F11ED984C551DC4F9AE02.roa
Signing time: Thu 28 Jul 2022 06:32:12 +0000
ROA not before: Thu 28 Jul 2022 06:32:12 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 147050
IP address blocks: 103.174.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Jul 28 06:32:12 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62e22d6c-b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:9d:5b:45:e6:61:a0:8a:23:3b:db:33:4f:
28:93:c7:61:b2:3e:d6:93:2f:42:9a:85:5e:33:12:
2e:ed:49:c9:bf:f0:23:a1:d4:2d:a9:26:99:f7:96:
d7:5a:25:9c:d9:a4:d1:0d:53:e7:7e:f6:f9:fd:76:
85:f5:29:24:b9:75:4f:01:36:68:e9:7e:1c:36:1a:
23:c9:c7:a9:54:67:f3:95:9c:4a:df:05:1b:56:c7:
55:67:89:b2:26:94:d6:0d:62:64:a0:0e:ad:2e:1d:
62:95:c6:34:c3:06:df:16:01:51:d6:ca:33:3c:00:
c6:87:9c:95:aa:18:05:9c:35:d3:dd:74:3e:ed:97:
2b:b7:1b:11:be:f3:9c:8b:69:9d:f3:48:8e:5c:5a:
4b:03:ce:f9:f7:7a:60:10:e3:79:4c:ec:7c:bd:58:
80:ad:1a:c0:51:90:2c:f4:59:e8:da:7e:2b:e0:47:
49:53:7d:76:bc:69:76:e1:49:5e:3e:88:50:e6:20:
36:a5:f0:58:e4:6f:58:cb:98:30:49:3e:4e:59:ac:
b1:f5:e5:90:f6:be:14:1d:7f:3c:48:e3:b5:97:11:
9b:91:6e:d6:59:8e:a6:45:bb:dd:4f:61:cb:b2:9a:
d4:81:01:4d:80:d3:b2:fa:89:14:08:7d:4e:8d:0a:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:85:58:3A:34:DF:C3:BE:E5:68:23:AA:07:FD:01:1A:C0:E8:72
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/0337FBF60E3F11ED984C551DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.47.0/24
Signature Algorithm: sha256WithRSAEncryption
28:27:2b:5f:d4:a8:53:72:93:d6:d7:5b:2d:61:17:22:cb:d0:
b9:ac:f1:ab:13:19:cb:d2:a0:fa:62:45:8a:4f:50:68:58:53:
a0:66:9c:22:41:06:28:bc:aa:2e:d2:45:3e:e6:7e:d8:f3:32:
ca:2b:85:eb:2c:61:f5:68:45:2e:da:fd:41:52:ed:bf:b7:d9:
c1:41:4f:fc:f2:97:97:80:5f:41:88:5f:2c:d0:6a:eb:10:df:
a4:31:62:cc:88:05:2c:57:99:4f:24:6b:63:50:9c:45:00:93:
05:db:00:d9:af:e9:d7:dc:06:de:8f:5c:f9:57:01:8b:38:a4:
b6:ac:5a:bb:93:c0:f6:6b:5c:d7:98:99:8a:da:e3:06:66:3f:
9e:29:47:f4:d6:92:7e:84:e7:70:a9:cc:f6:73:7f:36:6d:16:
d3:58:53:eb:da:b3:48:0b:64:b4:cc:99:09:5e:92:57:e7:64:
1b:8a:5e:cc:10:0c:7d:02:b1:28:e0:c8:8c:ca:c8:bf:1d:fb:
b5:68:36:ba:3b:99:b4:d5:65:1c:40:a3:c0:15:2b:5c:38:7d:
00:4e:b8:d7:16:80:56:ee:f2:52:9a:bf:f4:69:79:d4:f3:4a:
42:62:33:b0:d8:f2:0c:a2:86:e2:cb:eb:05:f3:fa:c1:f9:b4:
15:e9:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org