Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/327EAF24192811ED81F7A264C4F9AE02.roa
File: 327EAF24192811ED81F7A264C4F9AE02.roa (raw, json)
Hash identifier: dLyyK8EKsxchbrerbSFnjysitDTYdgj3CENDSJZ032M=
Subject key identifier: 6B:89:91:E3:4F:7A:79:9B:45:B2:70:B0:F8:8D:93:DD:42:1A:47:29
Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial: 0983
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/327EAF24192811ED81F7A264C4F9AE02.roa
Signing time: Thu 11 Aug 2022 03:46:36 +0000
ROA not before: Thu 11 Aug 2022 03:46:36 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 137434
IP address blocks: 103.138.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Validity
Not Before: Aug 11 03:46:36 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62f47b9b-eeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:d6:b6:33:35:de:17:ff:42:06:4c:5e:0b:
3d:68:6b:3e:f5:0b:7b:0e:c1:c3:00:4b:62:92:9f:
05:e3:3b:4b:0d:59:a3:30:94:14:e5:f3:82:49:44:
84:c3:0c:c6:c9:85:e0:30:fa:eb:fc:a3:b0:ed:3e:
16:85:6f:f5:78:8e:e1:55:9c:f2:fb:a2:aa:7a:d3:
82:b4:93:71:c7:e8:b3:12:4b:7f:3c:fc:af:da:28:
64:25:2b:ac:ba:f4:a3:0f:7f:c3:00:d5:aa:df:83:
d1:59:b4:be:77:db:a2:c0:75:74:19:af:e7:0b:79:
bd:0f:bf:74:25:f2:13:38:e1:fc:04:05:02:49:6e:
d1:ec:72:3e:ab:3f:f3:95:7b:bf:0f:ea:6a:f5:da:
44:73:da:54:0e:82:64:5a:7a:f1:21:67:ca:c7:62:
68:c8:08:7e:18:b5:33:f2:8a:4c:78:97:48:06:b9:
dc:a0:ec:35:15:64:0a:f0:5d:aa:a8:8c:c6:b7:1b:
a6:b8:29:1c:ce:eb:35:98:8b:33:1b:96:8c:8c:43:
e4:98:a9:68:ec:e1:b9:4f:eb:2a:96:b1:93:c8:4b:
79:b5:21:64:42:9c:4d:23:b0:f0:6f:7b:c5:90:64:
1b:d4:20:5c:32:d7:61:55:f9:c8:14:c6:3d:40:dd:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:91:E3:4F:7A:79:9B:45:B2:70:B0:F8:8D:93:DD:42:1A:47:29
X509v3 Authority Key Identifier:
keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/327EAF24192811ED81F7A264C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.165.0/24
Signature Algorithm: sha256WithRSAEncryption
08:be:22:b5:01:cb:4a:80:57:23:b5:95:82:fc:20:a2:97:9e:
c7:e3:a7:cf:5c:0b:b8:63:ed:00:cd:fc:36:b4:7c:d1:fe:fa:
78:7d:64:56:7b:ca:7f:1c:04:ca:73:f0:2d:65:70:aa:85:25:
56:25:52:0a:f7:5f:30:1e:db:69:5e:27:a7:1e:05:47:a6:fe:
99:07:25:7a:65:e3:ee:0e:4e:41:7e:b8:de:3b:b0:6b:bf:9c:
37:22:5a:77:bd:09:07:5b:69:b3:da:5c:a1:1f:6b:7a:a7:61:
50:8a:05:3e:71:fb:ed:40:48:e1:25:59:aa:4e:e6:ab:81:30:
cd:50:ed:e6:a9:a9:51:66:b0:18:72:dc:44:f3:39:60:79:34:
93:ca:8c:c8:49:d6:43:82:7c:0e:1c:bd:a0:2d:ec:02:fb:2e:
af:ff:84:be:b8:a2:3d:e0:cf:98:09:87:ef:e3:4a:c8:2c:ef:
c5:af:02:f1:ea:e9:3d:35:18:48:1f:82:fd:83:8d:01:86:14:
0e:ea:4f:18:7e:74:c1:9e:f1:b2:df:91:90:e0:4f:bb:7f:bb:
e3:b9:5b:50:62:b0:96:37:ec:0f:81:b2:17:c7:b9:bc:71:41:
65:31:49:f1:5d:f4:ad:53:79:97:ad:02:02:d7:eb:27:37:b1:
4c:45:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org