Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/ED7DA84A1D6311EDB5F9A726C4F9AE02.roa
File: ED7DA84A1D6311EDB5F9A726C4F9AE02.roa (raw, json)
Hash identifier: bLxZpI/0b5CYJM6+2+88AtPRHhM3PinV0nmPZ4jFIok=
Subject key identifier: C8:08:5F:59:A4:73:F9:07:EF:9D:A8:F7:05:9C:20:FC:D0:F3:F7:ED
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 32
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/ED7DA84A1D6311EDB5F9A726C4F9AE02.roa
Signing time: Tue 16 Aug 2022 13:04:14 +0000
ROA not before: Tue 16 Aug 2022 13:04:14 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 150130
IP address blocks: 103.191.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Aug 16 13:04:14 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62fb95ce-a4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:5e:2a:73:a1:41:69:bd:2f:cf:a5:04:44:
6e:a2:e6:b8:16:b6:36:80:07:43:15:a3:71:da:28:
8c:dc:9b:d0:87:e3:51:5a:5e:ec:a7:4c:ab:2e:9f:
cf:bf:e0:50:f7:f3:93:5c:ed:24:00:91:01:ff:39:
90:b5:1b:1e:99:82:df:0e:fc:70:28:7c:66:9a:6b:
ee:ec:03:28:70:ed:9c:55:35:ff:f3:34:ee:9c:c3:
3f:5d:d6:99:e8:1e:74:6a:9f:86:24:d1:26:66:8e:
f6:92:5b:46:32:f2:b6:98:0e:92:95:55:d8:bf:4e:
e7:99:ee:64:a2:55:81:33:62:37:76:bd:fd:b3:22:
35:5a:38:09:33:2a:09:84:52:86:42:89:35:26:b2:
a9:7c:61:e4:71:a1:4b:c3:ff:a2:d7:08:02:dd:4b:
ab:a5:e6:7c:52:a4:97:65:a5:aa:88:a1:35:33:4e:
93:b0:b2:e4:e8:4c:c3:36:4c:b8:58:3d:c6:19:1f:
f9:76:d5:92:1f:7a:fe:c2:2f:c2:fa:d4:38:ea:78:
94:f2:49:7b:46:e7:b6:04:d9:48:0d:57:a4:a8:27:
2c:fe:ec:ca:ee:97:90:2d:af:39:70:37:d8:87:35:
a9:d4:a7:96:ee:a8:d3:04:81:b7:37:88:bf:9d:44:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:5F:59:A4:73:F9:07:EF:9D:A8:F7:05:9C:20:FC:D0:F3:F7:ED
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/ED7DA84A1D6311EDB5F9A726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.119.0/24
Signature Algorithm: sha256WithRSAEncryption
74:27:b4:64:c4:a3:8f:e9:b1:83:94:8e:f7:15:0b:96:02:80:
9b:59:51:59:34:bb:d0:18:63:5a:ef:0b:7e:7d:d8:75:3c:a6:
85:ee:cb:2b:6a:c3:88:e2:ad:52:86:d7:63:a3:56:20:89:f4:
14:af:60:e1:79:ed:bf:1e:e0:dc:98:25:10:25:3f:36:ae:c3:
71:45:af:64:d8:54:84:bd:d0:94:d1:b2:02:d5:b7:77:71:34:
09:1b:15:72:1f:3f:50:21:6c:4f:a7:55:65:e6:c9:60:9c:55:
49:c9:52:a7:b0:0b:ce:0d:6e:65:3a:10:d5:cc:50:f7:91:45:
7b:c1:4f:6b:64:6d:50:6b:c8:66:2b:e9:71:ac:fe:80:9f:53:
48:c1:3f:7b:85:77:8f:f9:41:c1:c8:33:ca:73:20:68:4c:0d:
b1:07:69:d1:05:d7:c4:e4:dd:08:ff:9e:af:b3:42:aa:45:1f:
6e:66:0f:27:9d:94:74:7b:f0:d3:a0:a9:19:13:21:b7:84:cb:
00:98:d6:fe:f5:67:48:4b:6b:c2:6f:ab:c8:cd:17:8d:ae:cc:
78:7a:cd:af:72:80:56:7a:4f:16:8c:08:2a:44:52:8d:55:c7:
59:c5:d7:1b:51:7b:d0:66:8b:0a:8e:ba:5b:cf:c5:8b:ff:32:
68:28:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org