Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/7FDD882E033A11EE838B1D7DC4F9AE02.roa
File: 7FDD882E033A11EE838B1D7DC4F9AE02.roa (raw, json)
Hash identifier: ZnhxQJnIcpbuEWM+cyC5lcfZj8HkqoVdZ1mt90PCtRo=
Subject key identifier: 52:25:AE:1B:98:6A:BD:09:18:D2:29:98:9C:CD:3C:67:55:DD:BA:29
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 6A
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/7FDD882E033A11EE838B1D7DC4F9AE02.roa
Signing time: Mon 05 Jun 2023 00:47:09 +0000
ROA not before: Mon 05 Jun 2023 00:47:09 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 198652
IP address blocks: 103.230.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Jun 5 00:47:09 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=647d308c-410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:d7:86:75:35:a5:92:44:ce:ce:95:e7:a2:
4d:0d:6c:43:40:5a:ee:a5:9a:84:26:d1:61:6c:b1:
9f:d2:67:d1:b7:a4:7c:60:61:37:31:8d:67:6f:17:
e1:38:df:3a:3a:1f:af:c0:db:65:8a:3e:cb:70:85:
c7:7a:20:8c:60:dd:47:01:9c:36:44:95:b6:99:de:
17:47:3b:73:2a:8e:19:54:5c:c0:e8:be:06:5f:01:
6b:7c:94:2b:a9:2e:57:08:ed:bb:63:02:f4:17:66:
24:a1:2e:d8:15:90:e3:fc:18:4d:51:9f:1b:20:ae:
75:6d:d0:a9:fa:cc:ef:6c:59:05:53:9f:21:b0:50:
b5:d6:b5:ba:8f:d9:3d:9c:d2:08:37:7e:7a:60:f0:
70:23:f8:81:4e:71:49:20:41:75:90:89:7a:ef:fa:
87:3d:d5:a8:ac:ec:c2:4f:36:0a:ad:3f:df:20:cc:
de:c7:ab:c0:60:77:f5:ce:e7:0f:5c:ad:40:8a:e6:
81:62:ef:64:63:12:a5:18:54:27:70:6e:c1:42:77:
29:e2:4e:bf:03:57:dc:ae:50:66:86:93:da:d4:59:
33:9c:cd:5e:ff:d0:e1:39:0e:bb:d8:8f:16:13:ba:
f0:e9:99:49:df:e7:58:b2:e0:60:34:58:e8:20:95:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:AE:1B:98:6A:BD:09:18:D2:29:98:9C:CD:3C:67:55:DD:BA:29
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/7FDD882E033A11EE838B1D7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:36:e7:8d:ae:3c:b3:72:ff:40:8e:41:88:a1:bc:e3:ef:c3:
9a:87:7c:92:c6:2b:33:b4:5e:3d:2e:21:31:b1:e0:12:f6:e7:
58:e3:91:e5:95:37:4a:0b:f3:91:ee:2f:9e:c4:84:8b:a4:c5:
4e:46:b4:9f:36:fa:f9:4b:10:59:7a:64:80:26:a2:a8:00:aa:
d9:7e:1e:ac:f3:3c:f5:5e:34:42:6f:e0:17:0c:25:20:0e:62:
65:d3:01:cf:b8:71:1f:e4:20:ed:4a:0a:08:b4:da:3c:93:2f:
dc:49:ee:bf:bf:65:76:fa:ef:b0:58:52:99:ca:9b:eb:7b:da:
24:95:80:e3:57:7b:62:db:92:76:70:bf:10:dc:45:53:b0:2a:
0e:5e:c2:76:2e:d0:3a:03:d6:bb:eb:59:7c:f7:6b:f4:a7:a2:
6c:c4:1a:72:83:67:10:0d:e7:ea:95:b9:09:ff:0a:64:de:e0:
5d:04:b3:18:73:7c:8d:4c:f9:d7:04:df:bb:90:75:1d:a4:79:
1c:38:49:3c:5b:f3:8e:d7:d2:5a:fa:2e:82:53:80:65:98:e9:
20:03:a7:65:e8:23:0d:cf:75:7b:25:aa:c4:d9:30:cc:bf:ad:
5c:0c:08:a9:9b:d0:9a:ba:78:eb:9f:e3:04:01:82:65:a2:b4:
e5:e6:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org