Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A24BA1BA746111ED890CA515C4F9AE02.roa
File: A24BA1BA746111ED890CA515C4F9AE02.roa (raw, json)
Hash identifier: 4M58aCXNotuGKtRaGhQt9r1j0/tJxlh/lNuhQ3MeGwQ=
Subject key identifier: 08:51:1B:15:85:F5:03:ED:56:EF:5C:64:A6:A9:5A:63:F1:FB:7F:00
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 02
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A24BA1BA746111ED890CA515C4F9AE02.roa
Signing time: Mon 05 Dec 2022 05:57:01 +0000
ROA not before: Mon 05 Dec 2022 05:57:01 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 136923
IP address blocks: 103.230.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Dec 5 05:57:01 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=638d882c-0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:1f:6b:54:6f:86:ad:e5:72:e3:02:96:9d:
a2:34:e6:6b:16:16:c2:1d:dc:ec:4a:9c:a7:96:b2:
94:fd:bd:e1:02:39:54:bd:ef:3c:98:7b:67:84:1c:
30:3d:fd:96:1f:61:d8:23:33:9a:41:09:75:93:49:
ff:9f:98:d7:2d:ed:07:a2:de:e7:17:49:4b:32:e5:
71:ce:2b:23:f6:55:25:94:8e:33:d3:f0:71:c1:de:
77:8e:81:f3:04:14:1e:c3:8e:1e:3a:bf:11:1a:77:
5d:a2:5f:57:e2:fc:87:19:49:cf:ee:b6:0d:38:df:
07:c2:0b:26:13:b7:c5:6b:c3:6e:1f:af:b2:4f:07:
d2:ff:cb:a8:2d:4a:e3:18:9e:65:72:bb:00:94:1d:
65:6c:65:ae:bd:6a:48:4b:f4:bf:df:27:b5:2a:7b:
05:62:db:11:14:02:4c:d4:88:0b:f0:0c:f2:e4:fa:
fe:2b:db:cf:58:14:f0:98:d7:21:b8:2b:bc:2d:61:
2b:3e:01:9c:d2:8e:72:57:3a:43:2e:76:bf:07:da:
97:89:59:cb:37:07:9c:b1:3a:d5:ff:d1:97:92:c9:
f1:1f:43:72:cf:24:05:c5:6f:71:47:1e:5b:b6:94:
fb:2d:b1:61:94:57:6f:4d:e0:ca:7c:ae:71:cf:33:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:1B:15:85:F5:03:ED:56:EF:5C:64:A6:A9:5A:63:F1:FB:7F:00
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A24BA1BA746111ED890CA515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
Signature Algorithm: sha256WithRSAEncryption
38:13:cb:f1:85:a0:65:e8:a0:1c:4a:28:52:4b:53:23:49:f2:
8e:c2:69:66:16:8b:8d:5c:8d:1d:6e:f1:43:d6:db:9e:2d:38:
91:5b:23:af:24:c8:24:c2:bd:e4:b9:86:3f:fd:aa:5d:a1:05:
78:14:43:0b:8d:6a:0e:42:c7:d0:e0:19:4d:4d:5f:e5:55:d7:
4e:b1:a0:f1:7e:62:8a:58:14:42:f6:39:fb:4c:99:5f:29:75:
b1:2b:d1:95:ac:72:67:7f:a5:bb:a4:0d:e0:49:00:30:85:cf:
c3:72:5e:96:60:8d:31:82:25:eb:86:f0:34:32:38:91:e9:b2:
ae:d9:d2:98:e0:47:1c:4b:16:97:6f:8b:be:fb:7f:51:1e:b5:
34:67:0f:94:12:91:26:d6:e6:29:08:5d:0c:de:01:54:e0:bf:
09:62:7b:e1:9a:56:e2:23:e2:73:06:bc:dd:da:66:d2:5b:57:
03:98:72:13:82:78:79:04:93:35:32:12:59:7b:53:60:47:a8:
02:41:f9:ac:a9:ec:46:a9:56:91:bb:25:a8:e2:f5:f7:f5:59:
84:50:ae:87:aa:80:4e:d1:67:e4:95:4d:e6:a4:2f:ab:3e:46:
fa:6b:41:ca:75:79:e4:51:3e:fe:5f:81:81:4a:6f:8d:2a:3d:
9d:b5:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org