Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/FCFD88601B8F11EDBC68484CC4F9AE02.roa
File: FCFD88601B8F11EDBC68484CC4F9AE02.roa (raw, json)
Hash identifier: 6frxjuCq9gbN48mj4FTVvRKSNuxInTA16KvhmLWN4zQ=
Subject key identifier: BE:C3:28:46:13:27:18:D4:37:32:5F:7F:4E:85:92:7F:B9:CD:2C:E5
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 02
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/FCFD88601B8F11EDBC68484CC4F9AE02.roa
Signing time: Sun 14 Aug 2022 05:14:36 +0000
ROA not before: Sun 14 Aug 2022 05:14:36 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 136800
IP address blocks: 103.176.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Aug 14 05:14:36 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62f884bc-75b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:92:01:ee:b7:59:f1:a3:8f:81:66:3a:56:
a5:7b:22:f0:c0:83:9b:6c:1f:67:e1:82:ed:35:fd:
91:97:ff:3f:da:ff:f0:00:b1:77:63:a5:0c:57:ee:
4e:52:b4:6c:52:22:24:c7:08:01:d4:8f:a9:c0:05:
c0:4c:03:62:af:e0:d5:6d:58:f7:01:d8:56:d1:d1:
19:14:31:9b:26:ff:48:a3:f6:35:38:b0:1d:24:a2:
d2:a3:18:3e:3d:1d:78:69:a5:72:9d:4e:fd:9a:b7:
c6:6f:69:ef:36:7f:aa:7b:d8:22:57:be:98:30:a8:
d9:13:ce:04:d9:c7:b9:80:c1:cb:1a:6b:3a:4d:da:
62:3a:c4:44:d1:5f:bc:e1:70:f4:86:40:0e:14:cf:
9f:2f:9d:82:e6:6e:7e:02:53:95:54:88:5b:10:b9:
67:df:a4:9a:9d:d3:a4:6d:a1:46:ce:ed:7c:85:5f:
78:4d:b9:0d:72:59:3f:7c:e6:1b:c7:d1:18:fb:cf:
20:e7:dd:fe:be:70:76:41:42:e3:19:cb:e8:46:05:
48:d7:bd:f6:33:62:57:a5:15:37:05:0d:86:d6:03:
35:9a:41:a9:e1:f6:f5:33:ee:1b:1e:8d:d2:73:b5:
74:f6:15:58:8f:d0:28:96:2e:75:fd:8e:a5:20:b8:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C3:28:46:13:27:18:D4:37:32:5F:7F:4E:85:92:7F:B9:CD:2C:E5
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/FCFD88601B8F11EDBC68484CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2a:b1:c2:aa:f3:ca:00:36:eb:d2:96:b5:6e:1f:7d:6f:01:
2b:fa:11:10:ad:f2:24:0b:b2:ca:70:50:1c:7a:0e:89:03:f8:
68:82:fb:d1:64:0c:0a:0d:5c:5d:54:97:b7:82:78:af:29:ef:
fb:9b:79:0a:c0:9c:b9:2a:95:64:62:da:82:19:6a:74:dd:8a:
8e:d1:7d:fd:52:b4:f1:09:b8:a1:b1:45:e6:2e:3c:b0:1c:ce:
59:72:f1:dd:72:53:8b:b0:9f:84:30:b4:63:bf:d8:d7:fb:b4:
4c:07:0f:f0:8f:22:90:43:fa:95:64:a5:7c:eb:85:93:e7:c0:
0a:73:f8:5d:c7:ca:84:c0:e0:89:f4:50:3e:45:b9:02:94:b2:
a5:11:4f:7e:d6:88:c4:95:6e:12:26:be:c9:ff:a5:d7:ea:6d:
13:9e:ef:e8:9c:4b:6a:51:d0:93:41:af:00:74:0d:dd:68:2f:
ac:a9:30:c4:b7:5c:5e:81:da:6b:e8:57:63:8c:29:8f:53:c1:
c1:ca:7f:20:2a:40:80:fb:dc:ac:71:2c:be:6e:f8:fd:d7:e1:
c3:e7:2f:31:6c:a5:13:31:4f:a8:34:cd:d4:2f:f0:2d:e5:e1:
a8:1f:00:d2:90:5d:ea:d3:b8:ba:b7:2f:9f:0a:c5:31:30:c1:
d1:39:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org