Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/3B291C825DC511ECB613BA30C4F9AE02.roa
File: 3B291C825DC511ECB613BA30C4F9AE02.roa (raw, json)
Hash identifier: nuSI12JiOMg24ZLnflenzepF+HMSY4HIhgzbO8jl1is=
Subject key identifier: 16:00:BC:54:2C:9E:DF:C9:A5:90:EE:BA:CF:80:94:D6:13:B5:CB:C1
Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial: 076A
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/3B291C825DC511ECB613BA30C4F9AE02.roa
Signing time: Thu 31 Mar 2022 22:08:57 +0000
ROA not before: Thu 31 Mar 2022 22:08:57 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 30823
IP address blocks: 103.148.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Validity
Not Before: Mar 31 22:08:57 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62462679-6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:75:0c:d8:db:a6:04:1c:a1:6d:f6:a0:9a:
48:04:7e:73:3f:fd:ff:3a:ef:55:f5:ca:35:2c:00:
2d:48:d4:a6:8f:cf:b1:d3:16:ab:70:e3:75:a2:4f:
70:96:0a:6e:43:27:85:43:ba:ba:a6:fb:cc:0e:25:
89:e5:40:24:ec:03:db:f1:2b:49:19:44:15:56:ab:
ce:f7:9c:68:21:ab:26:cc:50:2f:f1:53:ba:95:52:
e5:ae:b3:fe:45:87:27:b9:f0:fc:aa:cf:f5:b2:4c:
75:53:33:75:85:b1:bd:38:fb:ee:4a:ab:62:c0:1b:
5d:c3:d0:eb:65:31:17:66:22:6e:1b:17:b3:3c:20:
7b:3c:08:ff:f0:dd:85:a8:bc:8f:0b:a9:1d:8e:d0:
66:b2:78:61:e1:41:8d:0e:5b:69:7f:be:62:4c:84:
22:91:06:48:26:02:28:a7:44:cb:57:22:df:4a:7b:
86:8f:2f:a3:ce:ac:14:45:8b:bd:2b:db:f5:b5:8e:
8c:9a:78:b1:e6:4b:1d:e0:e0:08:ff:be:01:03:c3:
00:1e:b4:9d:a0:8c:4a:4e:1b:be:71:86:6e:62:bc:
df:61:59:7f:43:58:11:94:fe:84:c3:c9:21:e0:da:
f6:69:ef:63:3c:b3:ab:78:2c:fc:22:1c:b1:d4:f1:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:BC:54:2C:9E:DF:C9:A5:90:EE:BA:CF:80:94:D6:13:B5:CB:C1
X509v3 Authority Key Identifier:
keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/3B291C825DC511ECB613BA30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ae:6f:b3:c4:c5:a7:9a:60:24:46:4b:45:57:ab:e3:7a:a9:
c4:33:d8:a1:d0:39:78:4f:ac:74:82:08:dd:69:e2:77:09:4e:
1d:cc:30:36:7b:d2:96:d8:f4:43:a1:07:aa:d7:87:21:9d:d9:
65:52:34:d2:91:c8:32:96:2f:6a:b9:53:14:1f:52:5c:7d:1f:
aa:b5:dc:6e:33:8d:fc:02:63:9e:6f:fb:9c:59:49:92:8c:d2:
49:e2:de:6b:10:10:03:02:81:ff:76:d6:0a:fe:4f:8f:49:4d:
86:f9:96:df:b5:7f:a1:aa:88:33:dd:b5:cf:4d:65:c9:a8:50:
17:56:81:97:8f:af:bd:63:4d:0a:3a:9d:4a:fd:10:47:23:ea:
21:3b:f5:ae:ef:53:ce:48:60:e5:fe:de:9c:18:45:36:2c:21:
3b:76:66:78:84:b5:d8:88:6f:ef:81:c0:79:a1:5b:53:11:c2:
0c:3c:23:c8:e8:fa:46:e8:ae:fb:d5:80:1b:1d:00:28:ec:c4:
d3:4a:4c:2f:29:90:b2:cf:f7:07:55:2d:b2:27:95:48:87:3f:
b9:bf:98:ad:5b:b8:bc:82:f9:f0:d6:07:ab:fe:2d:7b:4f:4e:
51:49:04:c2:6f:11:35:d7:85:80:70:16:20:c0:2d:cb:69:50:
44:40:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:51 2024 by rpki-client on console-fra.rpki-client.org