Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/D61DAF025E4011EC932E835BC4F9AE02.roa
File: D61DAF025E4011EC932E835BC4F9AE02.roa (raw, json)
Hash identifier: fvJ8ttljqduJXSa1DIdRaxgAI6cIYbpp/TQgiinvhvQ=
Subject key identifier: 73:6D:24:AF:F4:94:4B:82:50:92:FF:93:02:60:8B:1C:3B:44:BF:93
Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial: 02
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/D61DAF025E4011EC932E835BC4F9AE02.roa
Signing time: Thu 16 Dec 2021 07:21:51 +0000
ROA not before: Thu 16 Dec 2021 07:21:51 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139461
IP address blocks: 103.178.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Validity
Not Before: Dec 16 07:21:51 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bae90e-524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:ce:10:ea:be:63:c7:8a:db:ea:cc:86:d1:
4e:46:a0:8b:8f:e9:67:31:05:9b:dd:09:94:10:22:
58:50:34:07:26:7b:1a:f5:a9:14:92:81:02:7c:b1:
2d:b4:1d:ed:26:8c:46:ae:50:65:2f:e9:02:d9:50:
af:85:e5:19:2e:c3:86:b9:56:9c:99:96:f0:d9:6c:
60:bc:19:e8:ce:ec:06:2b:44:dd:81:01:65:df:5e:
5f:c7:19:86:78:6b:dd:af:41:8c:7b:44:85:e2:39:
53:b0:0e:98:97:49:0a:ab:12:5a:5e:1b:fe:cb:a7:
26:d7:4b:37:8d:b3:27:0f:f5:b4:36:54:08:b4:9a:
55:82:c1:31:3a:5d:4d:7a:bf:81:d2:93:70:a6:a3:
31:8a:d8:b7:b0:d8:ba:98:d8:3f:9c:7a:c9:31:28:
58:29:6a:bd:e8:16:97:01:5e:12:a3:bb:76:53:3b:
2e:5d:99:34:3d:e1:3b:e7:c9:9a:5e:75:3b:27:2b:
1a:0d:d3:b8:18:8a:2e:8c:47:93:47:38:a3:a6:ae:
2d:81:f7:ca:67:dc:89:1a:d3:28:50:80:73:96:db:
dd:f4:5b:62:13:21:54:8a:02:cd:3c:15:eb:59:da:
eb:a4:61:af:7a:8d:c0:86:68:e3:2d:2e:30:e7:bf:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:24:AF:F4:94:4B:82:50:92:FF:93:02:60:8B:1C:3B:44:BF:93
X509v3 Authority Key Identifier:
keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/D61DAF025E4011EC932E835BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.30.0/24
Signature Algorithm: sha256WithRSAEncryption
47:86:f2:71:4f:90:60:65:30:70:f1:21:ca:90:8c:b3:64:db:
db:08:e7:39:27:ff:7a:5f:90:6a:bc:e1:3a:a7:4d:ad:a1:2a:
25:8d:11:97:43:3f:d2:b8:d4:fd:f7:aa:16:c3:26:c7:c1:f8:
0d:da:1c:d0:32:85:a3:a6:60:52:ca:1c:26:7b:a8:14:c9:55:
4b:f0:c8:ec:65:a0:8b:cc:86:1c:50:2c:f3:8e:4b:d5:89:a6:
6d:d9:18:7c:e1:20:16:b6:ff:fa:2e:96:27:72:69:db:43:1c:
21:9a:eb:bb:52:0c:0d:b1:89:4b:6f:41:2a:1e:fc:43:2f:a7:
9b:74:65:30:c0:ea:99:87:fd:6a:2a:27:1c:6d:87:50:95:0b:
11:4e:f9:03:f5:bf:51:46:c6:0f:f0:1d:eb:af:2f:b5:f2:96:
17:ba:1d:1e:36:97:86:33:8d:7d:04:6f:f4:fb:4f:a4:a2:ba:
45:70:96:1e:84:5b:bc:da:80:fd:70:48:c5:28:94:47:b9:ec:
09:1f:ae:bd:e9:c8:12:bc:44:63:dc:60:3c:b4:0b:3b:c4:9a:
ba:82:05:63:2f:e2:74:f2:ef:1b:84:e5:f0:0c:c0:e6:49:8a:
4f:71:97:d7:4b:8a:f3:b8:ae:5d:b5:30:e8:da:0b:17:4c:68:
91:7c:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org