Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/7637655A8D8011ECB49BDF7FC4F9AE02.roa
File: 7637655A8D8011ECB49BDF7FC4F9AE02.roa (raw, json)
Hash identifier: xpC/mhqnbTkMOpxps0VjlnJ2V0BzHXzV8kHyKrn34+A=
Subject key identifier: A9:24:40:B2:01:70:2E:17:00:22:15:BA:0D:4C:12:AD:C8:C2:45:A7
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0A13
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/7637655A8D8011ECB49BDF7FC4F9AE02.roa
Signing time: Mon 14 Feb 2022 10:25:42 +0000
ROA not before: Mon 14 Feb 2022 10:25:42 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 19437
IP address blocks: 103.83.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Feb 14 10:25:42 2022 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=620a2e26-bd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:10:ed:fd:b7:c5:1c:9a:33:76:ea:e2:f4:
68:fc:0c:58:8f:82:95:07:27:c4:da:d5:52:45:4d:
fb:e3:23:bc:d2:cd:c4:ee:06:ce:44:10:92:2a:5c:
17:a8:20:6d:24:02:72:8b:ec:ce:9f:ff:c9:26:7b:
8e:7b:b1:85:c2:eb:ae:8d:09:ea:24:82:00:cc:18:
ba:cb:72:dc:25:80:e6:46:77:6f:46:50:bc:44:da:
2f:ee:85:35:2e:b3:18:72:74:29:24:b2:94:6a:c9:
ea:ca:9a:99:25:37:37:fd:f7:eb:9a:ff:13:5f:c9:
3f:c8:d4:00:02:73:4f:8c:ed:75:e6:9f:62:86:fc:
86:70:f1:79:4f:b3:cd:c4:df:b2:db:d9:0b:31:68:
91:a8:52:25:28:69:52:a6:50:d5:90:79:8b:bf:e5:
a1:3b:7c:72:b5:38:be:f3:12:17:ab:91:21:ce:4f:
2e:12:df:81:e1:9e:d3:93:6a:cb:13:b9:3c:58:73:
c6:10:7f:e3:f0:f9:71:53:68:7f:13:c0:50:82:0f:
15:66:47:78:b6:e9:e7:32:20:42:0b:f9:15:11:c1:
a2:d2:bd:d5:2a:7c:91:5e:a7:6a:ec:63:ab:70:76:
69:94:c2:b7:27:f1:1c:da:41:be:20:dc:1c:3e:83:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:40:B2:01:70:2E:17:00:22:15:BA:0D:4C:12:AD:C8:C2:45:A7
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/7637655A8D8011ECB49BDF7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:aa:7b:ba:9d:b6:7f:83:1d:ae:16:3a:32:0d:c2:29:95:94:
82:1d:7b:88:4a:86:34:d4:12:b4:a1:a2:2f:73:d9:4c:7d:5a:
80:96:44:33:78:b7:dd:b1:b3:68:74:2e:f6:e0:df:33:e2:ac:
ed:5b:a3:53:b9:ee:9a:59:36:65:2f:b0:8a:f4:3d:aa:18:86:
88:47:56:c5:fe:69:ba:8b:e1:51:66:c9:6a:87:de:70:5a:a4:
e2:3d:f2:f3:79:95:42:cd:1d:a3:4f:df:c3:a4:bc:90:f5:a6:
32:c9:6a:df:fe:7b:65:c3:92:ff:df:b4:82:f6:f5:24:77:f7:
47:63:75:25:4c:63:4c:23:1c:70:61:cc:fb:34:59:12:d7:4e:
19:03:ec:8e:16:f7:ca:e0:6f:9d:fc:f2:02:fa:2b:77:7f:7a:
00:cd:e9:ad:e3:3b:84:80:0e:3e:68:b7:6c:19:12:e4:68:fe:
e3:b6:94:47:b6:29:77:5a:d6:5e:8e:6c:c1:69:d1:85:2b:7f:
91:a6:81:45:2a:e5:4a:b3:4f:3f:6d:30:3f:b9:75:17:0a:ae:
f8:9b:4b:6f:d0:5c:dc:cf:4e:51:99:41:4c:53:6e:e7:2f:5f:
45:d7:8a:57:cc:56:ec:d9:f6:8d:fa:e4:89:42:11:35:3a:32:
87:4c:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org