Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/48590474B18211ECB668C94EC4F9AE02.roa
File: 48590474B18211ECB668C94EC4F9AE02.roa (raw, json)
Hash identifier: kHRHxmgYLbP3ig/TbQFRXH8vOJgC2pxBSnhGVgfKzV8=
Subject key identifier: 88:9C:B6:9C:55:75:9C:7B:21:25:CE:85:71:06:38:28:B4:9C:E1:EA
Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial: 0541
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/48590474B18211ECB668C94EC4F9AE02.roa
Signing time: Fri 01 Apr 2022 06:09:26 +0000
ROA not before: Fri 01 Apr 2022 06:09:26 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 32167
IP address blocks: 103.152.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Validity
Not Before: Apr 1 06:09:26 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62469716-2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:c2:99:17:bf:5e:27:5f:dd:58:1e:5d:74:
45:15:ff:02:fe:57:b5:22:4f:8a:1b:44:ee:22:5e:
1b:a1:e2:38:7f:08:0f:02:95:c2:fe:cd:87:b3:e3:
20:1a:78:3c:e6:9a:a8:01:2f:7c:4a:83:93:03:4f:
9f:32:56:85:64:3e:4f:06:ab:87:5a:0a:10:83:ec:
a7:fa:02:bc:14:25:2d:47:89:2b:9d:bf:f0:b8:83:
a7:8b:3f:22:67:77:48:07:90:83:13:5a:9e:3c:24:
3f:29:18:43:06:fd:56:c9:4d:47:18:8a:52:a1:23:
d8:07:98:1e:41:ea:1c:e2:19:61:78:87:c3:f7:53:
a1:a4:7b:da:ac:e1:da:b6:7a:cb:74:06:7b:6f:0a:
a1:c7:b7:3d:69:1d:14:56:a3:73:6b:1a:33:e7:5e:
a3:c2:34:a3:9d:29:bc:e2:b3:04:8e:fe:35:5d:0e:
65:f8:5e:84:24:2c:05:ee:5b:5d:30:71:0a:43:3f:
37:1e:20:f8:9e:f1:b9:2b:28:02:ac:54:51:a4:2d:
a4:cf:9b:a3:30:f1:53:ef:a2:a2:83:18:2c:e9:68:
da:73:aa:01:f0:0e:37:80:e9:4c:db:d9:37:89:91:
a2:18:aa:b6:ec:d8:b5:f1:65:06:2d:96:7a:b0:81:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:B6:9C:55:75:9C:7B:21:25:CE:85:71:06:38:28:B4:9C:E1:EA
X509v3 Authority Key Identifier:
keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/48590474B18211ECB668C94EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:bb:9b:0e:fb:7f:b1:a1:d6:13:f2:b9:e7:5a:3b:26:43:ec:
a9:98:f6:42:fe:bb:32:bf:00:51:a5:d2:08:a7:5a:6e:fe:41:
08:2b:e5:ca:9f:a3:72:e9:19:39:74:b7:b5:c8:f3:97:8c:2f:
be:87:6e:5c:a7:88:3c:39:ce:40:c0:a5:6a:91:63:e2:66:e3:
a0:7c:cb:d7:83:62:27:4e:9d:42:c0:7f:6d:5b:3e:a9:22:ba:
66:c4:b4:71:e0:9e:77:58:08:48:6a:81:21:95:5e:f3:e7:be:
a1:db:63:b1:f7:84:8e:94:94:72:93:9b:c6:39:8d:5f:6b:51:
a6:af:56:f5:d2:3e:3b:73:49:4a:57:a2:00:6b:2c:22:36:b4:
53:8b:1a:7c:50:e5:e3:a6:13:0b:45:cc:ba:0c:eb:48:92:2f:
f3:38:b1:9e:c4:6d:db:5b:40:0f:59:4b:87:c3:ef:a2:8d:2b:
06:7b:13:4e:33:b3:0b:26:41:b5:d1:56:35:a4:2a:2a:57:9d:
ef:26:52:29:36:22:3a:25:3c:7c:7d:ff:e8:1a:39:e9:5f:0e:
64:95:39:e0:55:1f:98:c5:17:30:40:b7:6c:3a:1a:a8:34:05:
9f:37:d9:a1:b7:85:d1:13:05:47:82:b5:e2:b0:b6:d3:c2:99:
21:51:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org