Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/6C71C92ED11511ECA3ED5749C4F9AE02.roa
File: 6C71C92ED11511ECA3ED5749C4F9AE02.roa (raw, json)
Hash identifier: tWdC4ZNFmhC2Cm562pQrQOrh+L4ZM896GFC8R8zTNQw=
Subject key identifier: E4:C5:C6:EB:9C:66:55:9D:72:7F:D9:59:95:BA:E5:21:80:E5:2D:16
Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial: 06B7
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/6C71C92ED11511ECA3ED5749C4F9AE02.roa
Signing time: Wed 28 Sep 2022 22:59:27 +0000
ROA not before: Wed 28 Sep 2022 22:59:27 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.152.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Validity
Not Before: Sep 28 22:59:27 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6334d1cf-6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:f8:15:51:22:1f:22:30:22:92:21:0b:c7:
2d:94:02:d1:b7:70:80:dc:43:a2:bf:04:37:57:ab:
7e:6d:b9:c1:2c:2f:49:d6:6b:d2:4a:2a:43:e7:43:
38:6a:8e:ef:e2:0e:75:38:a4:59:4e:73:27:7b:3e:
4b:e1:61:bd:a9:52:96:51:14:ee:50:b3:c7:91:a6:
9b:22:11:d2:39:70:3c:e0:27:d0:b3:96:42:0b:06:
dd:38:53:38:ba:b8:08:7e:62:a2:e9:76:57:da:33:
d4:78:d9:0a:69:2b:8b:b0:06:18:2c:db:bf:ed:04:
0d:73:6c:8f:7c:79:1d:6d:0a:c8:08:0b:98:73:1a:
8c:79:29:99:c1:1c:7b:23:f7:be:b9:a1:12:0a:ae:
24:dd:23:f4:f0:f5:0c:7d:e9:0a:a0:1d:4f:35:a1:
2a:62:f2:90:2b:71:ac:e7:c5:eb:ee:2d:c4:e9:85:
32:98:aa:fb:37:0d:13:f3:c0:b9:7c:05:0c:1a:c6:
be:c4:1c:20:3c:48:c4:a8:b5:ae:8b:28:7d:67:b2:
9a:e7:2e:32:f5:37:7f:d0:09:2e:87:03:f6:3d:97:
1a:9d:9c:bf:4e:62:db:89:c9:df:a1:34:08:d3:3a:
0e:52:a6:fd:b0:aa:d2:44:8e:ef:fb:b7:99:92:09:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:C6:EB:9C:66:55:9D:72:7F:D9:59:95:BA:E5:21:80:E5:2D:16
X509v3 Authority Key Identifier:
keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/6C71C92ED11511ECA3ED5749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.226.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:71:28:35:0d:fe:f2:e7:e6:87:7c:d0:3d:e6:1f:9e:79:
75:65:da:87:b2:b3:f6:15:5d:33:53:a5:a4:52:74:ad:3c:2a:
27:66:17:d1:c2:70:27:30:70:fb:cb:6c:fd:5b:7e:85:50:7a:
96:65:4a:55:c5:d0:98:f3:6c:0e:f8:e7:7c:d5:f3:27:d0:49:
c1:a2:6c:40:60:18:04:0e:00:88:41:52:7d:fa:ab:2c:fb:25:
dd:8e:f9:41:4f:f4:08:41:28:da:ec:61:fa:48:cf:38:34:ed:
8b:c2:29:a9:8c:4c:77:cf:81:a5:3d:b6:a8:ba:d7:26:28:26:
7c:56:ee:c6:21:5d:37:19:79:88:dd:7e:60:36:c7:32:71:e9:
95:4e:2d:2f:a2:77:d1:19:c7:3d:f7:cb:f1:63:1b:69:80:4a:
6e:d3:c7:de:38:c9:88:e4:b2:a0:d7:20:2e:82:0b:fc:1d:c5:
60:d0:9b:b0:d4:a1:6a:53:95:1b:77:1e:53:66:64:e3:01:47:
c1:2e:6c:bf:95:13:f6:62:b6:67:8f:4a:1b:8a:c1:ae:36:59:
6b:4f:96:1f:0d:01:e0:82:7f:f3:f5:94:6f:9f:bf:dd:88:6e:
0f:13:2f:71:6e:ae:5f:c7:a4:49:d4:17:7f:fe:cd:b2:57:eb:
4c:d1:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org