Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/CDBB8884A50311EC9746F864C4F9AE02.roa
File: CDBB8884A50311EC9746F864C4F9AE02.roa (raw, json)
Hash identifier: arg8i820SQsCDzdgsdBGwRariE0OVWUQPo5B1zeA2Io=
Subject key identifier: 15:98:87:AE:3C:EB:C0:DC:43:8B:69:B9:11:B3:4E:4E:B7:1D:FD:01
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 02
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/CDBB8884A50311EC9746F864C4F9AE02.roa
Signing time: Wed 16 Mar 2022 08:33:50 +0000
ROA not before: Wed 16 Mar 2022 08:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134428
IP address blocks: 103.183.246.0/24 maxlen: 24
103.183.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Mar 16 08:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6231a0ed-0b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:68:e1:92:e4:77:f8:f0:99:4e:4a:a8:2d:
3a:31:ef:b3:14:0f:3b:20:1a:cb:04:dc:2f:04:3a:
d2:b8:e2:6f:09:69:fe:e4:08:8a:59:61:b5:89:f3:
3d:da:c7:5f:bb:22:fb:54:be:ae:ae:53:67:32:5d:
aa:89:87:63:21:c3:f9:21:bb:01:ac:74:9f:e3:1e:
47:b0:74:de:f4:a3:07:6a:f3:67:a6:ae:27:72:66:
43:84:2f:6f:ed:83:4f:f4:d2:94:d5:c7:4a:22:9f:
e4:f9:4c:ee:a6:cb:81:b1:75:a9:03:f3:65:be:ef:
ab:de:58:d7:58:8a:fc:79:1e:0b:e0:03:07:d4:22:
0a:16:80:f6:1b:9a:5d:f3:af:6a:2b:48:c8:47:c0:
86:fa:96:e8:5c:af:e7:b1:de:03:b3:c2:07:82:15:
9d:e1:26:52:08:76:f3:37:32:e2:3f:75:6e:6c:1a:
7e:bc:cc:2e:f9:68:a3:ec:ba:e4:12:8a:87:20:e3:
32:f4:b7:16:e0:2e:f9:d2:61:47:50:10:1b:43:b7:
9a:3f:ed:b0:d8:62:7f:a2:99:3d:cc:1b:b6:3e:ea:
c4:a2:d9:a7:05:03:d8:88:7d:89:a6:61:ca:b5:89:
2a:3d:6d:63:6f:eb:c0:d3:5b:a5:c2:1f:72:ab:9c:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:87:AE:3C:EB:C0:DC:43:8B:69:B9:11:B3:4E:4E:B7:1D:FD:01
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/CDBB8884A50311EC9746F864C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.246.0/23
Signature Algorithm: sha256WithRSAEncryption
14:75:93:a6:0a:2d:04:8c:4e:2c:0a:6c:8a:f0:dc:2b:3d:5a:
d2:f0:04:3a:b7:e5:ab:70:4f:a9:16:18:4f:58:4b:29:79:21:
ad:63:ad:02:fa:a6:b3:56:be:18:e0:5a:98:fc:61:65:28:7a:
89:1a:32:a2:14:44:4a:b6:d0:4f:f0:30:a3:b4:3a:73:07:02:
ad:7b:c1:a4:9e:ce:2f:4d:93:13:81:b0:30:95:78:ff:35:44:
d1:79:e6:c9:4b:35:13:fa:b7:0a:6f:12:5b:6b:ec:ac:d0:05:
f6:be:49:bd:0c:24:e0:88:b3:28:fb:d5:f2:44:54:88:08:0b:
cd:87:2b:b4:9f:0f:c6:de:55:2b:f5:c5:af:db:fa:6c:14:92:
e1:b9:35:23:df:52:13:ab:db:82:3c:bb:f4:e8:23:c9:0a:46:
6e:b7:64:57:46:8d:99:a3:5b:fa:97:4c:84:b5:fe:ec:c7:76:
50:9c:c3:49:ff:b4:98:ac:88:2c:e3:45:52:84:94:cb:0c:3c:
c6:9e:e3:94:f9:6e:d3:bd:3d:90:ff:00:c9:3e:13:95:6b:02:
21:2b:a2:e5:7d:63:dc:1d:1d:22:d9:da:55:93:85:0c:31:e4:
d6:90:16:6a:ba:70:36:33:b1:4f:bb:16:35:d1:aa:ba:40:1f:
54:7f:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org