Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/F2BEFDCA754E11ED98BF8629C4F9AE02.roa
File: F2BEFDCA754E11ED98BF8629C4F9AE02.roa (raw, json)
Hash identifier: PigkhVUhi4poCxwN+rwstmuKFrI/TdUdIuaIvTlIO8U=
Subject key identifier: 0D:19:F9:39:5B:9C:38:3A:6C:DA:C4:EB:44:83:28:6E:02:6A:08:07
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 05
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/F2BEFDCA754E11ED98BF8629C4F9AE02.roa
Signing time: Tue 06 Dec 2022 10:15:46 +0000
ROA not before: Tue 06 Dec 2022 10:15:46 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 138687
IP address blocks: 103.230.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Dec 6 10:15:46 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=638f1652-3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:4e:fc:c3:9b:a8:5e:5f:2e:c8:0d:cb:d9:
64:92:b9:3b:a7:84:20:fa:a6:0f:3f:ec:29:52:f9:
c3:4e:80:3d:2e:e5:72:12:94:84:53:38:11:e8:27:
81:36:9c:4f:e6:20:69:8d:05:49:db:df:fd:6f:cb:
12:6a:88:88:6f:f6:34:d1:68:0a:f2:cb:9d:6d:2c:
37:53:01:ec:ed:05:6a:05:07:63:a3:be:e1:3e:bb:
a9:5a:01:ba:92:35:fa:40:04:40:5a:09:e6:09:99:
50:76:52:02:cd:b3:0a:a8:ab:54:ca:7c:c8:32:f0:
6c:82:3e:7d:4d:38:90:92:83:ac:8d:9d:f0:a3:20:
44:e8:12:0c:34:11:a7:a0:81:0d:78:47:d6:6d:22:
6e:2b:d1:1f:9b:02:71:34:d9:f8:12:21:9c:9f:3d:
ca:2f:c2:01:ec:f5:65:07:50:a3:97:05:e4:2f:fe:
23:4d:e6:ce:7e:f7:fb:c7:eb:0e:ca:f6:13:94:40:
1c:ea:ec:77:39:f9:db:32:16:2e:5f:45:0c:56:e8:
1e:67:2f:bb:29:d7:dd:be:30:43:66:4e:90:38:b1:
cf:db:3a:34:61:ee:84:d9:75:0d:2e:7b:d3:03:8a:
a6:61:87:4a:ba:c3:6c:ec:f1:55:f7:fe:d9:1e:82:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:F9:39:5B:9C:38:3A:6C:DA:C4:EB:44:83:28:6E:02:6A:08:07
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/F2BEFDCA754E11ED98BF8629C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c9:88:23:1a:bb:e4:01:3f:1c:9f:d3:ca:64:6a:2c:b9:54:
be:f0:00:48:62:82:7d:db:0e:95:0d:8a:dd:09:f1:1d:78:4f:
41:c2:f9:dc:0e:4a:6a:be:10:71:43:5e:aa:5a:b7:7e:58:9d:
f8:28:e3:07:e7:b7:51:59:f7:3e:25:99:91:8d:40:f3:8d:d1:
db:8f:8d:be:5d:18:6a:c4:1b:68:f8:14:ec:b7:3a:7b:4e:27:
aa:ef:ea:ae:f5:d7:63:8d:a9:4e:30:d2:d4:a2:ed:48:99:9c:
5a:bc:bc:f3:a5:76:17:83:2d:7c:0c:95:9b:a5:0f:06:22:7a:
f6:62:2c:2d:b5:bd:22:26:88:5b:ca:bd:88:ff:5b:df:0e:99:
33:ab:20:8a:05:a6:23:42:1b:d2:f6:3a:42:eb:41:bd:b5:76:
fa:d0:6b:16:f8:0f:29:53:04:9f:1e:8e:38:29:22:be:14:8b:
e0:50:d2:44:82:c9:92:9d:a0:63:3b:08:da:8c:bf:b8:38:75:
1c:f2:b4:3c:b0:1e:39:9c:55:b4:c7:e2:69:54:fe:63:16:4b:
db:f7:0e:0a:69:38:7c:e2:5d:33:db:46:63:df:e8:b7:93:51:
ca:a9:cf:4c:35:f7:77:0d:3f:74:39:ec:0a:d9:70:7d:04:8c:
7e:29:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org