Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/4F0EBD020CB511EDB2750F60C4F9AE02.roa
File: 4F0EBD020CB511EDB2750F60C4F9AE02.roa (raw, json)
Hash identifier: mWPLHJweNJYwiIPDO2I8PRdSFg+TJLB4WVe3CpwIy+4=
Subject key identifier: 5A:9C:A5:7E:95:0C:B9:6A:F8:BF:74:AF:F2:95:9C:4B:4F:CA:D4:BC
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 02
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/4F0EBD020CB511EDB2750F60C4F9AE02.roa
Signing time: Tue 26 Jul 2022 07:33:57 +0000
ROA not before: Tue 26 Jul 2022 07:33:57 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 150137
IP address blocks: 103.191.181.0/24 maxlen: 24
2001:df1:940::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Jul 26 07:33:57 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62df98e5-51cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:b7:f2:30:e6:c2:42:28:d8:66:db:da:b6:
81:59:ee:2f:4e:38:f9:c8:a5:a0:ae:43:c5:74:e5:
4b:e3:3d:be:fb:23:fd:4b:e0:1e:3c:a7:51:3a:ed:
fb:1c:01:11:7e:17:2c:ef:ce:f2:fd:02:7f:c1:d3:
c0:46:a7:7c:ea:eb:d3:43:f5:6a:58:70:b2:51:5c:
61:1a:ce:2e:57:9b:9c:e9:aa:f0:03:69:b0:2d:ff:
c2:91:e4:90:5f:6d:52:2d:bb:2a:25:1a:9d:35:f6:
f6:3a:0a:31:73:ec:eb:32:45:30:a9:28:f8:c8:7d:
67:0f:a6:ad:aa:07:04:4d:1b:87:c7:9d:e3:c0:ff:
c0:03:c9:b2:77:39:78:68:56:ec:94:c2:7d:32:6b:
6e:3f:a0:57:44:2d:00:73:04:3f:22:72:ca:5f:84:
3d:99:c9:3d:4d:8f:24:82:8b:c3:c8:16:92:02:24:
ee:22:ed:8a:0f:f1:50:74:5c:82:26:fa:62:91:23:
3d:58:0f:ac:22:b9:4f:d5:79:77:9c:60:c0:7c:20:
f5:da:81:14:af:e3:ae:60:35:80:fb:c9:7f:a8:14:
09:d7:eb:9f:f6:8a:95:f7:cc:ab:f4:b8:fa:ef:0f:
50:da:41:80:06:b4:c2:c9:14:4f:0d:91:c3:ca:ef:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:A5:7E:95:0C:B9:6A:F8:BF:74:AF:F2:95:9C:4B:4F:CA:D4:BC
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/4F0EBD020CB511EDB2750F60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.181.0/24
IPv6:
2001:df1:940::/48
Signature Algorithm: sha256WithRSAEncryption
2b:10:8b:9c:8b:1e:bf:ed:03:23:82:55:2a:2f:1b:29:1f:7c:
f4:c3:2a:d1:41:cb:8e:e5:90:30:e1:f4:7b:f6:20:11:fc:ac:
7f:1f:45:54:93:bd:7a:30:43:be:79:fb:d1:be:30:d4:7c:11:
9b:14:53:6f:a8:1b:c9:07:45:3f:ed:22:99:de:01:74:6a:ec:
29:12:c7:57:04:fd:c8:c6:0c:46:6f:56:97:01:02:c5:ec:16:
e8:e8:31:11:1d:73:71:17:3c:3b:b6:71:80:b0:7d:0d:cf:22:
9a:59:21:9d:60:2a:1f:76:bb:d6:a8:f2:d2:08:d6:87:99:bc:
ae:ea:1e:a4:19:9e:29:a0:69:44:a9:e2:4a:a4:c7:77:23:54:
eb:58:84:a5:09:1c:79:4d:75:88:b3:34:3f:ab:1b:d3:cd:03:
a7:a8:c5:da:50:78:16:fd:23:de:88:2a:b1:51:08:16:6f:8c:
4f:59:b2:fb:da:3d:77:16:3d:80:e5:e2:37:ea:5d:49:5d:80:
8f:f1:9e:e6:28:f4:e4:bc:df:f3:67:a2:00:e1:57:0d:07:52:
09:a7:17:b9:98:3a:1c:d2:92:b7:52:f0:a7:eb:db:d1:4d:73:
56:d6:f7:6c:86:d1:e3:8b:4b:25:5e:a5:db:60:e3:d1:08:f5:
04:44:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org