Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/6FD65A1A534B11EBA72BCE0EC4F9AE02.roa
File: 6FD65A1A534B11EBA72BCE0EC4F9AE02.roa (raw, json)
Hash identifier: pUvLg45bbU0aI68+4nQdcqniZTHSLrn6WFmSIgeIODU=
Subject key identifier: 64:56:F6:4B:1A:BD:D6:A0:3F:63:16:9E:FF:08:42:15:B9:22:DF:E8
Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Certificate serial: 04E5
Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/6FD65A1A534B11EBA72BCE0EC4F9AE02.roa
Signing time: Sun 10 Jan 2021 13:55:03 +0000
ROA not before: Sun 10 Jan 2021 13:55:03 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 138346
IP address blocks: 103.146.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Validity
Not Before: Jan 10 13:55:03 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=5ffb0737-6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:6a:13:d1:cd:72:38:3f:12:89:10:3d:93:
83:42:ac:52:2a:4c:3e:bd:9b:8d:33:53:fa:6e:74:
71:19:c0:12:d2:39:8e:95:f6:3a:b0:1b:60:0c:47:
75:e1:22:59:ad:87:40:81:1b:ff:02:8b:9f:f0:49:
84:7b:e7:5e:54:a0:19:85:e7:15:f9:d4:27:56:34:
9e:6d:cb:4e:47:b6:44:cc:3e:e5:b2:83:2a:b1:e8:
2f:88:44:ae:d5:a4:07:56:32:24:78:74:52:f2:a1:
c8:24:68:11:dd:c3:6d:73:43:f4:84:f6:c4:f1:d4:
0a:39:b3:dd:98:da:c1:49:73:f8:46:c0:03:58:14:
3b:00:2d:7c:49:5b:d8:0a:68:b3:ac:cd:8d:73:d0:
01:23:01:28:7f:06:0c:cf:b6:c8:23:d1:41:37:1d:
66:5d:06:94:53:ce:09:3b:d9:55:a9:aa:23:06:b0:
6b:bb:b7:32:f4:a2:ab:91:79:ce:79:03:cf:0c:43:
96:94:e3:fb:9c:d1:85:24:d4:25:f7:5a:33:12:ae:
6e:03:40:fc:22:94:9f:3f:cc:d5:5e:7c:0d:bc:0e:
29:2e:d3:a7:3a:16:1d:7b:1e:bf:fd:09:30:9f:60:
db:1e:49:3b:c0:68:a6:d2:e7:78:4a:af:9f:08:0f:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:F6:4B:1A:BD:D6:A0:3F:63:16:9E:FF:08:42:15:B9:22:DF:E8
X509v3 Authority Key Identifier:
keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/6FD65A1A534B11EBA72BCE0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.151.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c4:fa:c9:dd:c7:86:19:f8:26:6e:55:5e:59:53:45:32:7c:
dc:b9:99:5b:51:89:2e:7d:4f:2e:0b:75:ec:f2:86:2f:a4:f3:
e0:d2:8e:43:70:75:ad:e7:7d:dd:5b:05:89:6d:cf:3e:c8:67:
16:f7:c9:52:dc:65:fd:6a:fb:6f:87:44:0c:34:e5:8e:9a:2e:
8a:b0:30:2e:cd:28:1b:2e:a3:f4:12:86:92:74:7b:c4:31:02:
21:0a:8f:39:60:1c:49:a3:90:7d:52:12:50:ac:fd:2e:71:04:
e3:2a:1c:99:a3:b8:16:be:1f:98:08:c7:ae:61:18:89:60:0e:
5d:13:99:2e:fd:57:ae:a0:40:36:51:72:33:52:86:cc:3e:17:
17:e3:69:77:6a:62:7b:a4:37:23:bb:d9:f4:17:91:67:6f:7a:
62:05:4a:98:3f:b7:5a:64:bb:4a:4d:1f:1b:00:fb:7f:9c:df:
61:a9:a8:08:83:de:65:15:ef:14:6b:61:1c:c7:8d:ae:19:e6:
65:02:80:10:5d:70:41:60:d8:fd:b3:ba:2e:6d:d0:fc:b6:d1:
82:35:8f:76:5b:22:34:01:a3:b7:75:3b:60:57:92:d4:38:20:
3a:3b:37:41:39:7e:3f:7d:e7:9e:da:c6:63:c9:8d:73:57:87:
51:8a:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org