Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/490801AABD1311EAA83D6412C4F9AE02.roa
File: 490801AABD1311EAA83D6412C4F9AE02.roa (raw, json)
Hash identifier: Q28ngc3DmMve039WtXVlcF57y2y2/mo02e975fp+Z1M=
Subject key identifier: FC:CD:AF:88:E3:62:1E:C4:09:9C:45:DA:8D:6E:64:9B:8E:07:71:3B
Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial: 03A9
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/490801AABD1311EAA83D6412C4F9AE02.roa
Signing time: Thu 09 Sep 2021 23:28:27 +0000
ROA not before: Thu 09 Sep 2021 23:28:27 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 24009
IP address blocks: 103.152.226.0/24 maxlen: 24
103.152.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Validity
Not Before: Sep 9 23:28:27 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=613a989b-94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:9d:da:e0:dd:9e:f0:c4:b6:fa:33:38:46:
be:84:c3:15:6d:0f:70:7b:76:f6:24:c1:60:4b:ff:
52:95:cc:7d:3b:55:c0:2b:90:30:d7:6e:7c:86:2e:
5c:c1:ec:a7:25:4b:8d:b7:15:87:a4:0b:d1:8f:7a:
79:13:68:0a:11:c8:29:5e:4a:24:66:9f:4d:6c:8c:
fc:73:1d:dd:e5:8d:21:75:5b:55:b7:a4:5f:f1:41:
e4:dc:0e:4e:ee:b9:6a:9f:e0:04:81:a9:3e:35:0a:
80:d5:c8:0d:44:ea:7d:eb:40:57:5c:f2:86:e8:d7:
22:3c:a0:1d:c9:01:1e:f8:95:86:0d:74:a8:5b:3e:
72:04:d2:ac:0d:3d:0d:c2:6f:06:c8:bd:df:a3:59:
a8:3f:59:1a:b8:21:92:9c:7b:19:12:5c:0b:bf:12:
62:9e:31:23:7f:6a:d5:f1:2f:08:70:39:3a:70:73:
67:19:4e:ca:53:f0:6e:fb:cb:a6:00:c7:bf:b6:12:
44:5d:92:d6:3f:b0:83:f9:43:46:b8:98:47:88:aa:
c8:a2:35:2f:dd:be:0c:27:b4:38:d8:72:6b:ea:c1:
fc:95:48:00:44:5e:8e:64:3d:93:0c:63:3d:c3:9c:
8d:20:01:0a:d5:79:e9:a8:3e:f2:cb:2b:30:32:fd:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:AF:88:E3:62:1E:C4:09:9C:45:DA:8D:6E:64:9B:8E:07:71:3B
X509v3 Authority Key Identifier:
keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/490801AABD1311EAA83D6412C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.226.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:7f:98:ec:5d:0c:a4:3b:d7:90:ff:a8:46:93:c7:83:91:23:
70:2f:ef:52:20:2e:cb:b4:6e:81:16:af:11:73:32:e1:b0:b6:
43:9e:ba:53:a6:28:f9:79:4a:b9:78:a7:0e:03:04:06:45:97:
c6:70:52:1e:8f:75:8d:8a:a9:37:e6:fb:e4:53:25:91:a9:12:
b2:3f:b1:2a:9b:5c:16:cf:7a:2b:9f:7c:d1:f6:46:c5:0e:ed:
6f:d4:da:66:9a:bc:54:d3:61:03:50:1f:33:57:5c:85:e2:a2:
69:e4:7d:2b:fa:02:67:ea:cf:b4:2f:f1:40:f8:7a:6b:74:10:
7b:47:1a:ec:dc:ad:5f:3e:d0:13:f0:65:cd:9a:56:4b:c0:33:
94:b2:a9:2e:e8:4f:5f:93:d8:8d:0a:e6:b5:c9:05:ba:9b:b9:
e2:9b:2d:cf:73:7e:a7:80:dd:78:99:89:7c:9b:e8:6f:8f:77:
d5:d2:93:d8:68:e1:e9:f8:8e:4b:b5:4b:dc:6f:ca:ae:22:e4:
30:ff:60:18:e3:51:f3:d6:86:4e:e7:bd:e4:53:96:c4:27:73:
66:8a:81:85:5f:bf:b3:03:fe:b0:fa:76:9e:d3:3c:dd:92:0d:
bb:04:d5:89:61:66:65:7e:5c:f7:72:05:9e:19:04:76:e2:24:
cc:88:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org