Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/A64A2DBCA8C511EC8F560C42C4F9AE02.roa
File: A64A2DBCA8C511EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier: xpRxOJcRAtBcgMnphcQ7zmyoz9LV4j8uR6dQoK8GdGE=
Subject key identifier: A5:F4:72:BF:5D:5C:05:19:EB:AE:FC:BB:5B:DF:6D:45:11:5B:75:ED
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0C
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/A64A2DBCA8C511EC8F560C42C4F9AE02.roa
Signing time: Mon 21 Mar 2022 03:18:59 +0000
ROA not before: Mon 21 Mar 2022 03:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45250
IP address blocks: 103.183.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Mar 21 03:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6237eea3-73f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:90:24:e0:e0:bf:46:9a:0e:cb:9d:6c:1b:
22:1e:5f:ce:cd:b8:6b:bd:89:6d:66:3b:e1:02:92:
66:ad:9f:d1:65:f1:3c:2b:d0:0d:e0:65:ad:9c:f7:
92:ac:d2:4a:80:ed:0c:03:08:50:f7:55:eb:39:4a:
1b:fd:b8:e6:c9:29:a6:26:ab:d8:8b:a1:13:b5:5c:
ea:3f:2c:42:3f:20:8f:d9:80:8b:8b:fa:35:fe:82:
17:1c:ae:72:80:07:80:f6:cd:c8:46:2b:de:30:64:
41:4a:e5:f7:24:36:5c:b1:dc:64:48:b9:ab:53:7c:
3b:47:dd:d0:ff:0f:5f:96:89:70:8d:ed:d2:a3:c7:
dc:6e:ca:9d:e2:d3:1c:e7:3f:76:f6:67:c6:66:63:
9a:45:69:e8:21:46:d7:b6:7b:78:67:05:86:8b:0f:
ef:7e:da:f6:5c:07:4a:d5:82:ce:2c:fa:9b:cb:c2:
14:55:db:f3:4a:9a:33:41:6f:1c:59:69:46:30:7e:
83:e6:fe:8e:07:0a:24:e0:63:8e:28:fd:53:00:62:
84:a2:37:03:f5:b4:b2:93:51:8a:46:44:98:eb:53:
76:27:27:99:16:7d:8f:a3:29:06:5f:b2:ce:0d:b6:
e7:15:12:a8:85:07:bf:f9:87:d5:06:8a:1a:de:78:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:72:BF:5D:5C:05:19:EB:AE:FC:BB:5B:DF:6D:45:11:5B:75:ED
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/A64A2DBCA8C511EC8F560C42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:db:f8:b5:8d:bc:bd:6c:77:4e:13:09:2b:74:3a:d5:4c:ac:
1f:c6:64:21:22:e7:f3:bb:7b:83:74:6f:91:62:c5:52:5d:5f:
95:b1:ca:d3:6a:cf:c9:5b:6c:1f:dd:14:b6:b6:cc:8a:b6:f8:
86:ea:20:da:9e:e7:32:39:07:9e:df:49:a1:24:8b:53:27:e1:
fd:ff:da:37:81:f0:a6:f3:f3:e7:4d:6f:03:c6:4f:6a:83:f4:
aa:19:47:4d:86:24:f2:5e:7a:d6:5c:73:80:0c:bb:84:3d:28:
0d:20:94:22:8c:fa:d1:20:52:af:5b:bd:fe:dc:1d:a1:d0:e7:
78:22:d8:3d:93:20:9d:a6:e0:7f:b7:70:a0:53:25:9b:31:d0:
d5:e1:df:cd:18:fd:29:07:0d:80:58:1c:4e:1b:e9:ba:da:8e:
40:52:2b:cf:a8:ec:1e:00:d8:89:b3:aa:45:7d:ea:6a:f3:70:
00:45:ee:6f:09:3a:47:d1:b2:be:ef:23:6b:37:92:24:03:dc:
8c:c7:32:b9:13:35:24:87:e5:95:bb:fe:3f:13:ab:f1:56:d0:
2c:f3:33:c1:70:6e:70:e9:46:4d:3a:21:05:aa:29:ff:1b:ac:
de:03:fe:27:85:17:7d:c7:48:e9:4b:47:eb:35:a1:26:5f:1a:
c3:e4:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org