Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/E30076DCB9A311EC85C7DD3FC4F9AE02.roa
File: E30076DCB9A311EC85C7DD3FC4F9AE02.roa (raw, json)
Hash identifier: Ft14BOK36729yS9KkHXwb+qWxWXZg+xXP7BywsrSGWk=
Subject key identifier: 38:DA:5B:CE:C7:D7:CF:44:65:D4:CA:EB:B4:D6:82:36:F8:51:1F:A6
Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial: 0558
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/E30076DCB9A311EC85C7DD3FC4F9AE02.roa
Signing time: Mon 11 Apr 2022 14:30:08 +0000
ROA not before: Mon 11 Apr 2022 14:30:08 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 63023
IP address blocks: 103.152.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Validity
Not Before: Apr 11 14:30:08 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62543b70-ce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:79:57:54:36:3b:04:1a:09:af:15:23:5f:
58:02:95:3b:01:75:9d:9a:a9:c6:99:ce:57:00:bf:
84:e6:a5:c8:4c:76:6d:58:47:86:b5:39:9a:57:a5:
a8:5b:24:6f:6c:2e:0e:fd:56:b1:5d:a3:0f:2a:5e:
5a:2f:b4:08:31:52:36:a9:78:78:3f:b0:e1:ce:e2:
cf:10:95:6a:b6:25:e9:73:3a:b8:3c:ce:b3:d9:3f:
5d:24:e0:e0:c0:33:4a:07:b9:eb:64:d4:e0:b0:30:
a3:36:5c:2e:16:8a:55:63:74:a8:d7:df:64:e9:df:
13:08:ba:93:eb:af:70:de:df:0b:0f:e7:1f:43:5f:
b5:86:71:5a:3c:b3:3a:c7:d0:06:07:2b:5d:13:3b:
a3:bd:3b:be:35:e7:7c:4b:32:73:42:22:79:6b:b7:
41:a8:79:34:dc:8b:e3:28:c6:c2:6d:08:f6:7f:74:
8f:f8:eb:b0:1a:6b:f2:94:a1:3c:9f:40:13:6f:d4:
22:b8:26:4f:2c:36:f7:ab:e4:a0:77:3f:f9:68:58:
d7:f0:6b:88:cc:d6:c4:b1:92:d1:30:05:15:da:39:
78:ad:48:d8:c6:5d:d3:15:ec:18:99:db:8f:43:d9:
74:b3:31:8d:c5:43:1d:c4:b3:0c:32:e1:b5:44:0d:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:5B:CE:C7:D7:CF:44:65:D4:CA:EB:B4:D6:82:36:F8:51:1F:A6
X509v3 Authority Key Identifier:
keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/E30076DCB9A311EC85C7DD3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:53:27:0c:82:4a:5f:f7:31:6f:ac:1e:df:f4:cd:a3:bd:75:
45:ab:1c:a6:70:57:97:cc:93:e6:f0:14:be:42:b8:50:2e:44:
3d:08:ae:0b:11:96:a1:73:53:39:44:eb:6a:85:e3:9b:31:1e:
7c:85:a4:f4:0c:89:2d:30:d6:51:a9:5c:ae:d3:06:7e:a6:4c:
a1:f4:03:ae:e4:8a:86:08:ac:8f:77:7c:2e:e3:67:11:48:0c:
5a:87:df:f8:07:fc:05:23:0a:c1:45:c1:34:8f:cb:ab:93:08:
ea:0d:8e:20:82:bd:f9:1f:7d:c7:ef:f8:96:ec:e5:67:86:d0:
0d:46:83:f6:91:24:3f:8f:66:39:5b:78:6f:88:c8:a5:24:23:
39:04:b9:d2:d0:1e:60:ce:bb:e4:cd:c7:c2:15:6c:62:61:2a:
84:19:6b:54:9b:14:76:f3:48:7b:d5:fd:cf:6d:3d:11:3b:8b:
a0:f8:86:51:4b:06:72:54:26:30:60:5f:38:5d:47:5b:df:da:
93:96:8e:da:6b:99:6a:fa:2b:bd:59:e1:4a:c5:0b:31:1c:b3:
36:40:ce:a3:18:5d:4e:61:89:24:14:87:ef:c9:73:41:94:24:
ed:b4:df:7a:d5:31:e4:c9:b0:13:7e:97:fc:0c:24:46:9b:bd:
7c:9b:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org