Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E5D950FE091B11EE846CBF20C4F9AE02.roa
File: E5D950FE091B11EE846CBF20C4F9AE02.roa (raw, json)
Hash identifier: 36DCVpd8s3WgXDrNtH7A+Bv6N8SqEFi9CECcJvrUSYc=
Subject key identifier: 3B:10:31:40:EA:F4:E4:E4:58:7E:D2:DB:FE:69:C1:97:65:F4:58:AF
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 03FF
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E5D950FE091B11EE846CBF20C4F9AE02.roa
Signing time: Mon 12 Jun 2023 12:23:12 +0000
ROA not before: Mon 12 Jun 2023 12:23:12 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141681
IP address blocks: 103.161.242.0/24 maxlen: 24
103.170.17.0/24 maxlen: 24
2400:bde0::/48 maxlen: 48
2400:bde0:0:1::/64 maxlen: 64
2400:bde0:4000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023 (0x3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Jun 12 12:23:12 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64870e30-19da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:73:a9:98:f2:ff:93:76:82:41:32:c6:1b:
83:ca:6a:db:30:b4:db:3d:b0:44:3b:cf:40:47:d1:
cd:a2:04:25:cb:4b:f1:e0:7c:35:a6:fe:21:72:71:
fe:f7:9e:fe:71:bd:42:3f:ec:74:bf:cd:00:91:d8:
e1:0c:9a:e0:58:32:38:bf:c1:45:e5:1e:84:5c:77:
73:92:31:66:06:fb:d6:bf:c3:42:be:14:23:df:39:
d6:77:ed:ed:49:5c:62:08:51:64:24:81:ff:4a:0d:
a5:bf:68:4f:12:64:16:5a:2b:7f:22:2f:8a:30:a6:
68:9f:25:0b:cd:ed:21:84:e3:f1:a6:31:c9:7b:5f:
2e:73:1a:c5:78:02:a8:34:d7:c1:08:40:3f:94:31:
ef:51:d8:62:75:d3:0b:b0:4e:97:5b:43:bf:b4:a5:
2a:c4:55:57:d5:82:f3:5c:db:16:6c:b2:a7:18:c9:
8d:c6:f0:a5:a6:81:3c:e3:24:87:98:5e:ae:e8:5a:
92:e2:eb:29:e6:79:47:d7:32:63:e7:6c:57:89:ac:
cf:6c:3c:8e:cd:51:49:b1:53:bb:0a:d6:40:c5:64:
66:aa:ea:f3:6d:44:95:83:a5:af:db:a2:69:22:d7:
bd:60:6b:c8:27:cb:9a:d0:58:60:98:7e:19:92:1d:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:31:40:EA:F4:E4:E4:58:7E:D2:DB:FE:69:C1:97:65:F4:58:AF
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E5D950FE091B11EE846CBF20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.242.0/24
103.170.17.0/24
IPv6:
2400:bde0::/48
2400:bde0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
18:d2:58:f4:08:7c:6d:73:da:95:4e:05:06:46:e3:9f:0d:28:
72:0a:05:10:a5:11:6b:36:63:20:97:50:b9:6c:a2:26:e1:66:
73:f3:27:9f:a6:50:d5:17:b6:66:85:5b:35:fd:91:8e:31:0e:
7d:a2:71:18:aa:2c:0d:8e:7a:06:8c:bf:3e:d1:5e:d0:5e:0f:
ce:d9:81:19:7d:4e:c4:f1:ee:9e:21:15:a1:6b:5a:7f:c3:c3:
bf:e9:63:0f:4b:20:6d:f6:43:27:0a:09:82:6a:51:03:da:03:
3b:58:6f:c8:57:29:b5:99:6a:95:a0:d2:c5:d8:66:09:cf:0c:
bc:36:c5:6e:98:ca:e1:20:5e:5d:10:f1:e7:46:1f:ee:7b:cb:
19:b3:b4:6f:8c:95:3c:57:3c:34:5b:2e:a1:64:e7:aa:dc:87:
2e:10:a0:0b:60:9b:46:6e:53:5b:ae:b0:30:0a:40:7f:be:de:
91:6c:4f:57:17:4b:8f:5f:87:ae:1b:12:33:a4:07:7a:76:5f:
8a:aa:46:56:51:10:27:84:12:fe:83:f8:4e:fc:cc:c0:a3:60:
9b:08:1e:d6:a9:4e:23:df:98:7d:6a:af:48:6d:93:bb:f1:f8:
cf:65:6c:14:37:1a:bb:89:ea:7c:b6:80:7b:91:73:36:71:2c:
9c:2b:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org