Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/A4CD70A2860E11EEBC665D37C4F9AE02.roa
File: A4CD70A2860E11EEBC665D37C4F9AE02.roa (raw, json)
Hash identifier: 0G0ZRmwCsTt91L2arb1dynBdEM8TObIVrtrtPCyABns=
Subject key identifier: A7:C2:06:62:7A:57:A0:86:DA:9F:39:13:4B:B4:31:A8:30:6C:01:E9
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 030E
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/A4CD70A2860E11EEBC665D37C4F9AE02.roa
Signing time: Sat 18 Nov 2023 12:33:15 +0000
ROA not before: Sat 18 Nov 2023 12:33:15 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.179.36.0/24 maxlen: 24
2001:df0:45c4::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Nov 18 12:33:15 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6558af0b-f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:cf:fd:5c:41:24:0e:12:fd:13:d2:7e:01:
9b:64:42:1c:ef:90:63:28:d5:47:1f:72:c1:f8:1b:
9e:91:fb:be:41:ee:b3:07:f7:71:93:79:aa:f2:dd:
2c:9e:2b:df:e8:79:12:61:81:a4:dc:15:92:4d:2c:
cd:4a:73:4c:d8:31:f0:4c:9a:26:c6:19:2b:49:ca:
af:78:72:99:9a:88:da:ba:ce:22:f0:33:ba:55:74:
77:0d:01:da:7b:13:8b:17:46:9e:c1:aa:69:d2:5e:
9f:38:b3:cf:3b:0d:69:10:23:f0:e4:74:cb:2d:f3:
95:84:d0:c4:0d:21:74:64:f3:e7:17:e1:33:df:69:
1a:ae:c9:fc:8f:02:42:31:6e:eb:eb:71:05:b3:1b:
eb:6e:0c:73:5d:ec:71:f8:0c:01:61:21:33:7a:dc:
9b:bd:bb:be:f6:12:a8:1e:88:de:bc:ae:07:65:14:
76:22:5c:29:8f:f2:63:7e:e0:f3:53:cd:6e:87:c3:
1a:bd:11:80:ac:31:11:1d:f7:32:0b:76:89:b3:52:
0f:26:54:89:bc:77:f7:17:08:bf:04:45:48:e8:33:
0d:d0:d9:1d:9c:d9:5f:17:a2:84:46:ce:25:5f:0d:
35:92:15:ef:cd:86:91:90:3e:d9:c8:1f:19:7c:e2:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:06:62:7A:57:A0:86:DA:9F:39:13:4B:B4:31:A8:30:6C:01:E9
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/A4CD70A2860E11EEBC665D37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.36.0/24
IPv6:
2001:df0:45c4::/46
Signature Algorithm: sha256WithRSAEncryption
54:cc:14:b9:55:6f:67:f4:1b:f7:cc:61:a9:3b:51:f9:1d:12:
ee:d8:27:bb:98:89:d6:2b:eb:f6:77:c1:8c:ae:c0:43:2f:0e:
fb:ec:76:d2:7b:3e:9b:7d:83:2a:74:32:51:4a:9f:5d:9f:4f:
a3:cd:f6:9d:21:38:b8:d1:6e:4e:8f:04:1d:85:20:78:be:c3:
9e:3a:ff:99:13:b1:a3:03:60:de:d5:19:06:5b:e9:22:f4:0f:
ab:02:d0:29:c8:8b:a8:50:ad:10:38:20:d8:9c:d9:f8:39:8b:
a9:2a:98:68:cd:2e:cf:68:f9:08:33:36:db:2d:22:e3:bc:01:
ec:6e:03:34:da:0b:a5:93:32:47:3c:c3:d2:bf:46:d0:49:54:
4d:36:48:2f:e7:04:c9:d0:1b:ca:5a:81:2a:ae:e2:b8:2a:66:
44:4f:d0:a1:76:85:d8:cb:45:7c:92:38:3f:86:63:e0:90:80:
b7:94:ac:42:32:91:50:19:c2:be:2d:64:89:9b:0a:1f:da:32:
dc:3c:b4:00:46:e7:ed:9c:60:f4:35:44:75:e2:4f:16:67:e5:
c2:5c:da:b1:07:54:d0:6f:ab:7d:5b:e9:11:75:0e:fd:ad:8c:
37:c8:3b:b6:60:34:9d:ab:36:8f:7b:9f:73:b1:e7:2f:8e:62:
a1:cd:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org