Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/2B9993687CF611ED97C7AF1BC4F9AE02.roa
File: 2B9993687CF611ED97C7AF1BC4F9AE02.roa (raw, json)
Hash identifier: pUWWUfT8/+CnB6LZHEaeKmHOq6gTojmz3a/AaS6grVQ=
Subject key identifier: 7D:B3:5D:41:41:5B:57:46:83:1A:CD:91:FF:49:38:3D:1F:E4:4F:77
Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial: 04B4
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/2B9993687CF611ED97C7AF1BC4F9AE02.roa
Signing time: Fri 16 Dec 2022 04:00:25 +0000
ROA not before: Fri 16 Dec 2022 04:00:25 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 150180
IP address blocks: 103.163.30.0/24 maxlen: 24
103.163.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Validity
Not Before: Dec 16 04:00:25 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=639bed59-4d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:9f:c9:e2:9e:1d:38:7f:4a:88:2a:fb:64:
b2:28:7a:d5:36:74:fa:49:bb:fd:fb:d8:1d:e9:f1:
14:46:29:82:42:08:63:85:8d:96:f2:63:85:01:38:
fa:4b:d1:34:c9:45:57:8a:93:2a:c4:0a:48:2b:55:
a7:e5:a7:83:bd:14:22:00:00:d8:14:cb:b4:e1:dd:
4c:a2:1e:11:5a:35:5b:80:9c:dc:06:5d:d8:1b:83:
9b:7f:45:f9:d1:80:1c:97:06:68:88:3a:04:3f:8b:
3b:1e:c2:04:d5:bd:c7:2a:fd:31:29:b7:75:1e:0a:
39:96:35:d1:6b:b1:ea:f5:b0:76:41:ab:7b:f5:37:
e7:e9:4a:80:e4:44:61:12:2f:1e:d7:21:df:b5:40:
0c:3b:cb:02:1a:1b:ac:46:1e:b2:3a:7b:67:55:21:
13:ee:2f:26:76:f7:3f:d2:e3:b9:79:ab:53:ea:10:
67:e0:b2:73:92:22:d5:29:1e:01:3c:f6:4a:37:42:
f7:b7:6a:cb:e3:e7:f6:f4:80:11:b9:49:a1:95:dd:
f2:a3:3b:e2:0a:7d:26:e9:4b:cc:cb:8f:14:0b:e0:
fe:7e:c1:e8:30:98:e4:6e:87:5d:f0:42:58:c6:02:
8f:cf:cb:81:05:97:d4:5f:f3:96:d9:0b:4f:7d:7a:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:5D:41:41:5B:57:46:83:1A:CD:91:FF:49:38:3D:1F:E4:4F:77
X509v3 Authority Key Identifier:
keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/2B9993687CF611ED97C7AF1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.30.0/23
Signature Algorithm: sha256WithRSAEncryption
90:83:34:e2:db:9f:2a:f8:48:81:a5:47:f5:14:26:67:92:0c:
f3:5a:4d:75:f2:49:7f:73:5f:b3:1f:55:22:ad:37:82:87:a7:
ce:ce:d1:d8:25:d7:f4:bb:b9:3e:cb:37:47:11:76:9b:eb:d5:
8a:50:fa:9e:e9:5a:f9:74:43:e6:c3:dd:41:56:c3:9d:19:dc:
a4:1e:55:a7:4c:c9:61:84:87:97:72:fb:2f:83:ca:04:ec:bd:
2e:ae:3f:42:a3:64:bf:dc:a8:3b:80:24:08:7c:4c:f6:10:e6:
ee:a3:f9:a6:21:ed:6c:85:e0:c9:ca:f5:e0:9f:51:a1:b9:d6:
a8:9a:6e:83:9d:6f:28:6f:59:0c:41:da:3d:b5:9f:69:01:0b:
fe:e1:fc:06:36:b4:18:6c:df:38:90:f7:c4:dc:30:1a:16:4f:
ae:33:69:6e:78:07:53:55:9f:14:5e:6e:6d:47:22:30:a1:89:
36:7d:2e:35:e0:f4:91:50:a2:ee:05:72:1d:58:a9:63:44:ae:
90:77:43:c6:d3:3d:5e:1a:7f:50:b7:ea:b7:14:a7:d2:f7:ba:
f6:31:0f:6c:8c:00:b1:43:50:17:ec:3e:f8:e9:bf:29:8f:f2:
ea:cc:15:61:0e:8d:31:6e:c6:b2:f9:b1:d9:3c:0b:96:d1:2e:
73:0c:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org