Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
File: B0DEFBDE188911ED9319027DC4F9AE02.roa (raw, json)
Hash identifier: EfdaUkmW0Lkh5BSJxV4McELZkE6gVa2n2XKCSz98t+A=
Subject key identifier: DE:D6:A2:BE:FF:BF:F8:28:D9:68:B7:28:40:E9:22:B5:D8:CA:B8:86
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 027B
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
Signing time: Wed 10 Aug 2022 08:51:58 +0000
ROA not before: Wed 10 Aug 2022 08:51:58 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 147050
IP address blocks: 103.174.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Aug 10 08:51:58 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62f371ad-f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:47:e3:a8:f4:ec:3f:6b:b9:48:99:66:d5:
ee:81:26:3a:7c:3a:9a:2f:67:8b:a8:54:4e:83:52:
93:fa:95:ad:95:7f:d7:87:e2:3e:98:58:6b:84:5e:
48:b4:ad:7b:bf:6c:75:f3:71:4c:c8:86:6e:ab:57:
a2:84:b8:7f:8d:76:e2:ab:eb:e8:1c:9a:9f:38:de:
fc:9d:32:09:f2:2a:ff:3f:f4:55:e2:74:fc:97:e3:
c1:41:a2:ac:e1:a4:72:d4:90:ec:66:99:8f:17:22:
70:b6:ae:2b:38:4a:96:8c:2c:ca:0e:52:90:c5:da:
c7:66:d6:55:7f:dd:a6:8d:62:c1:ba:14:7d:6d:65:
0d:e6:0c:19:30:f3:21:4d:a6:42:06:65:f3:f8:33:
ae:42:50:30:96:ac:b9:a5:b2:45:98:20:fb:ab:52:
33:0d:94:1d:2c:98:24:e6:64:19:ee:13:8b:ef:44:
d2:b9:e0:25:fb:45:8c:d5:5b:9a:77:f3:70:37:bd:
02:48:71:1e:1d:22:7c:44:c7:3f:98:57:b9:7f:0d:
a3:25:be:ac:b5:9c:f5:d2:12:ba:cd:8b:95:eb:b2:
0b:85:d0:46:98:20:d2:62:71:dc:93:4a:c1:f2:ae:
f8:21:1a:79:93:09:e2:1e:fe:85:a2:02:b9:a7:ac:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:A2:BE:FF:BF:F8:28:D9:68:B7:28:40:E9:22:B5:D8:CA:B8:86
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.47.0/24
Signature Algorithm: sha256WithRSAEncryption
94:68:9f:6c:1e:6b:76:8d:13:79:13:e3:95:a3:f7:23:c2:72:
ec:59:16:6a:cb:6d:05:06:45:8e:84:76:de:7f:77:5b:19:ee:
cc:e9:bf:35:16:7d:74:37:77:bb:f2:d9:08:83:07:21:a5:f1:
60:82:b2:be:c9:a9:35:0b:7a:05:4e:8b:50:77:4f:96:6a:21:
a2:52:9f:dd:d9:49:c6:68:38:fa:42:38:58:37:04:58:b8:c3:
5a:3f:4f:21:d9:66:63:03:1a:f8:0c:f2:fb:83:b5:e6:b6:77:
b3:81:00:3f:40:29:e2:7c:a5:90:93:51:60:5a:e4:85:ef:69:
63:36:f3:69:9f:6a:e3:07:2d:e9:65:cf:a7:08:d8:f8:6f:1a:
ad:fa:71:4a:a9:52:80:f4:d3:81:d3:19:e6:0c:7f:ad:7b:da:
39:61:b4:30:92:e8:ed:8a:52:51:ad:a0:ef:66:98:0f:da:55:
18:c7:47:0a:c0:d7:2b:8d:52:7a:3b:3b:50:1d:0e:dd:24:54:
bf:21:06:33:28:f1:ae:05:60:f7:fa:d9:b9:36:ab:0b:b1:9d:
be:3f:1f:df:79:e7:3a:b8:38:10:52:ea:56:ab:cb:86:fc:6c:
7d:a0:0c:79:1c:03:5e:84:f8:ba:50:60:40:9c:6f:a3:c4:84:
a8:26:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org