Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/566189F6019F11EEA6BDEC1DC4F9AE02.roa
File: 566189F6019F11EEA6BDEC1DC4F9AE02.roa (raw, json)
Hash identifier: nrmfFaH0VYa56YBuGKk1kSTjcRLUyzHS4YAOsqIGjkQ=
Subject key identifier: AB:B2:64:3C:7D:FE:31:CD:19:32:4D:C8:D8:B7:46:04:50:0D:BD:4B
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 025E
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/566189F6019F11EEA6BDEC1DC4F9AE02.roa
Signing time: Fri 02 Jun 2023 23:43:56 +0000
ROA not before: Fri 02 Jun 2023 23:43:56 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.179.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Jun 2 23:43:56 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=647a7ebb-577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:40:ec:cb:72:64:cb:d0:c3:91:66:c4:a4:
9d:27:29:cb:38:fc:bc:31:8f:94:88:11:55:0e:90:
e8:b4:a1:f4:9d:e8:f8:77:03:1c:3d:fa:f4:34:1e:
d1:b1:72:a5:8c:b1:ba:33:32:60:81:45:c6:33:f3:
8c:12:36:63:2f:1b:e7:2c:d3:43:ce:f7:ad:ef:0d:
fa:82:44:f8:e1:f0:0b:51:33:40:15:fa:d4:44:37:
9d:37:56:47:83:3c:2e:e3:fb:e0:fb:e1:23:79:a4:
13:28:2f:e2:b1:1f:0a:37:9e:cc:9d:8c:77:c1:a1:
9e:2d:db:41:07:5a:01:ce:64:81:93:3d:b5:d4:41:
61:e2:ee:f7:8e:7a:3c:b0:52:26:f9:5d:90:db:f5:
92:a6:1c:5b:7a:e8:34:2f:b1:8c:e8:8d:80:da:8d:
d3:86:e1:b3:4f:70:77:60:4f:78:97:9c:7f:4f:05:
2c:a5:6c:6e:5c:ce:fc:82:66:71:be:d9:47:a0:15:
2a:53:15:3d:14:8e:b5:9f:73:81:d4:de:f6:bc:b1:
0f:b1:7d:66:c4:8a:21:72:1d:16:fd:a1:2e:17:6d:
74:41:84:3a:13:8a:4d:e9:8d:bb:b0:07:c1:7f:13:
27:94:b6:ce:84:13:dd:20:30:23:fb:c1:9c:1d:2e:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:64:3C:7D:FE:31:CD:19:32:4D:C8:D8:B7:46:04:50:0D:BD:4B
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/566189F6019F11EEA6BDEC1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4f:a1:7c:57:ad:74:7e:5c:3d:79:31:88:c2:e6:c9:bf:25:
00:66:99:a9:02:44:7f:1b:d2:af:1d:8f:4b:09:80:ec:9d:36:
53:e7:b9:4d:d4:d4:7a:94:74:c8:99:07:4a:16:d6:f8:0b:59:
e7:72:79:15:37:35:52:34:f5:41:2c:49:d7:fa:0a:f4:6c:2e:
52:96:48:cb:2e:87:cc:a8:95:30:d6:19:38:16:8b:76:88:99:
7c:d0:48:e1:ce:16:69:c4:43:50:20:66:e5:35:24:c6:a3:f7:
75:af:cb:68:43:cb:a0:58:40:1c:2c:15:6e:61:33:b6:e8:dc:
62:3d:02:f7:de:99:aa:0f:b0:77:9e:b3:73:2b:c3:54:a0:86:
32:f4:f8:33:87:34:d8:b6:fb:4f:09:de:21:fd:9b:06:bb:ff:
69:a8:f6:2f:f5:58:0b:b5:8e:f0:a2:9d:e5:da:01:f2:f8:6d:
c9:ff:f3:74:d3:b9:f3:06:29:23:47:e0:22:4f:8f:ec:79:8c:
1a:8f:72:fb:5e:2e:d1:da:60:e2:64:78:6b:58:bf:24:50:db:
67:18:d5:7c:d7:0c:6c:72:ea:e9:97:5f:2d:4f:03:30:00:16:
28:d4:12:3e:62:3a:4e:20:78:0c:c8:65:78:12:70:08:2d:6c:
45:5e:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org