Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
File: 087F6CD6BB1811ECB6D3E21CC4F9AE02.roa (raw, json)
Hash identifier: TWPVRH8Dg9vak5Vj9xnFACsriopw6DAapeeDeIzBhRc=
Subject key identifier: FD:A5:5A:23:BB:FB:78:D3:B0:77:9C:86:8D:3A:31:E2:2E:86:E0:4B
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 0183
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
Signing time: Wed 13 Apr 2022 10:54:04 +0000
ROA not before: Wed 13 Apr 2022 10:54:04 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 147050
IP address blocks: 103.174.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Apr 13 10:54:04 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6256abcc-5f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:be:0c:1e:b3:e1:82:74:03:b5:72:a7:89:
c8:ea:ca:d8:5c:8b:14:f7:ad:77:69:61:7b:a7:54:
63:af:47:63:ea:94:eb:4f:bf:78:11:27:8e:84:20:
18:af:7b:e5:b7:5a:31:9c:2a:ce:46:0e:6a:ca:39:
d4:7d:b4:85:33:71:a2:8d:bb:2b:f7:94:55:21:8c:
98:55:42:0a:e3:bc:9c:3e:ae:50:9a:47:90:1e:5b:
c2:7d:4d:8a:ae:b5:25:2c:12:d3:b0:35:5d:68:57:
4e:02:a8:e2:75:1f:0d:cc:5d:96:f7:49:14:42:91:
57:e1:cc:0f:04:8f:4c:67:92:25:34:9f:ec:fc:07:
94:ea:e1:33:f8:8e:84:f8:58:cd:f9:ac:cf:98:10:
b1:00:3e:83:7c:cf:42:bb:87:41:5a:e0:2a:54:5f:
51:5d:28:ab:dd:8b:0c:5f:30:8f:30:c6:54:dd:4f:
35:fd:9a:b6:12:6e:1d:27:8b:32:19:7c:0b:72:f7:
9c:cb:ee:34:83:4c:0c:95:ea:b7:3d:f7:a5:fa:c6:
35:7c:cf:66:76:d8:f5:d7:4c:fe:e7:b7:e2:76:38:
4e:72:b6:07:fe:6d:0c:f9:e1:17:03:d5:5f:16:76:
f4:b1:11:56:59:2c:3f:48:28:4c:a5:eb:9d:d2:99:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:5A:23:BB:FB:78:D3:B0:77:9C:86:8D:3A:31:E2:2E:86:E0:4B
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.47.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8a:f6:95:be:cd:a3:30:fe:e1:48:da:cd:36:d9:82:38:64:
7b:d6:6b:52:c5:21:a3:ec:5a:df:fc:20:ea:e0:52:2a:23:35:
10:d5:88:48:52:2e:b7:31:df:80:65:94:8d:3a:d8:00:c9:a1:
08:01:11:65:73:f6:77:fd:52:f1:bb:f6:d3:6d:8f:37:2b:0f:
ac:67:4a:e7:e2:e1:2a:c6:c6:e1:52:07:55:c3:08:77:46:63:
ea:eb:d9:24:7f:b1:ca:86:99:e0:b8:6d:eb:6b:e3:43:12:ea:
ee:b1:1e:f2:e3:29:28:a2:8f:4c:22:45:60:4a:a7:68:76:cf:
92:09:24:ca:73:cd:1a:91:ce:4f:81:58:10:38:7c:f8:a4:fd:
71:4b:e5:2e:24:00:61:a4:db:b4:64:f8:b5:f0:0a:67:8f:ad:
b2:b9:38:13:19:43:1e:4d:38:a8:a2:f1:6e:45:85:f4:5f:73:
63:a4:25:f5:7e:9b:9d:21:6f:a5:b3:7f:c1:b7:4d:6d:03:6b:
13:20:d8:bf:b9:93:8d:fb:85:e1:f0:4e:4d:46:4a:1f:37:79:
52:4d:32:83:f6:b2:08:03:34:be:93:e6:ae:2b:9a:87:a5:47:
9c:f1:08:d4:a2:19:a5:05:75:aa:27:0c:ad:36:65:fe:98:1a:
18:9a:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org