Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/D3CE611C999811ED90F75480C4F9AE02.roa
File: D3CE611C999811ED90F75480C4F9AE02.roa (raw, json)
Hash identifier: a88Ynt3EiBKMsfZqaeSf7Qkt9blCEqg3JyOB5npP5/s=
Subject key identifier: DF:DA:8D:36:46:88:29:3F:67:3F:02:9D:A3:AB:34:AF:3D:41:05:2C
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 02
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/D3CE611C999811ED90F75480C4F9AE02.roa
Signing time: Sat 21 Jan 2023 14:35:19 +0000
ROA not before: Sat 21 Jan 2023 14:35:19 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 133148
IP address blocks: 103.66.228.0/23 maxlen: 23
103.66.228.0/24 maxlen: 24
103.66.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Jan 21 14:35:19 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63cbf826-6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:e2:fc:6c:db:d1:b6:b0:15:37:66:7f:ca:
c1:af:b5:d6:67:b3:71:43:53:38:7f:80:53:d2:d7:
0c:4f:ce:d9:d8:e4:a9:d5:6b:c4:b0:58:b4:49:0c:
e9:38:30:cd:55:44:25:11:be:21:d7:1f:b2:f5:16:
66:7f:8b:43:be:41:70:6a:3e:79:27:75:e9:3c:40:
69:e4:40:f5:4e:66:0d:3e:de:a2:a0:12:d4:40:9c:
19:29:b6:d9:14:55:70:b6:be:33:db:9b:49:44:c5:
8a:0c:c5:cc:52:85:99:81:11:b4:a5:bb:56:f6:36:
39:23:0f:96:6c:64:5e:9c:ec:4a:4b:7c:f9:7e:9e:
fc:a8:db:d0:ec:f0:10:49:98:2c:8b:87:e7:a3:d7:
61:6a:c5:d4:5a:7f:ae:7a:02:d8:8c:3a:46:15:10:
9b:d7:e2:7c:67:f0:1f:38:43:d0:02:a7:84:67:88:
11:8d:28:75:e8:54:62:4e:f7:96:02:28:1e:02:e9:
c1:71:84:9a:a2:2c:ee:7d:54:ea:03:93:37:e7:71:
c3:53:e6:cb:4c:3e:ac:75:06:d3:a3:b3:60:cc:c1:
12:f1:60:9b:1d:e6:ee:91:e0:84:58:21:7c:7d:3c:
12:a7:fb:8d:33:6c:63:e8:35:22:a3:87:63:6e:a3:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:8D:36:46:88:29:3F:67:3F:02:9D:A3:AB:34:AF:3D:41:05:2C
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/D3CE611C999811ED90F75480C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.228.0/23
Signature Algorithm: sha256WithRSAEncryption
32:bf:1f:32:67:8b:b6:31:da:6f:ce:04:5c:96:62:53:d5:18:
28:61:fa:7f:4b:52:b8:ba:d9:dc:1b:62:b0:43:f7:f0:de:27:
0b:dd:bb:5a:06:d4:c6:95:ad:3a:8d:86:62:76:a2:bc:77:58:
57:c3:d2:98:81:a9:d2:b1:51:11:af:82:b4:ec:27:00:4f:e8:
64:3a:93:29:59:b3:cd:39:70:8f:a1:d2:d5:70:d4:5e:28:e1:
18:41:8d:e5:7e:2b:3c:0a:3b:82:62:32:25:63:43:19:95:fc:
8e:82:d9:e9:e5:59:83:b7:cb:43:a4:f4:09:c2:ce:e0:22:d3:
38:e3:c8:61:ef:a2:43:5a:1b:8b:cc:92:ae:f4:2c:d0:65:ba:
f8:cd:dd:28:44:fd:cb:5e:7b:1a:0d:a4:5c:bb:85:e2:79:96:
01:04:45:bd:a2:dc:9f:42:a9:0c:6a:0e:8d:e9:44:8c:cd:3e:
43:73:32:c1:6f:58:63:7c:0b:1e:d1:1d:ae:40:f1:d3:78:dd:
c4:a8:01:2c:49:ca:51:72:8e:23:12:79:ef:ee:79:c9:c8:d1:
6a:10:64:e0:cd:0a:95:7c:b2:fd:1d:ed:9c:ef:57:bb:91:1c:
b5:dd:a4:d1:32:03:f5:e5:16:6e:6d:f9:a4:92:e1:18:9d:16:
a0:c2:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org