Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/D1F7684618C111EDA109D63BC4F9AE02.roa
File: D1F7684618C111EDA109D63BC4F9AE02.roa (raw, json)
Hash identifier: WSn9dmO50EIi2tN213ZDkk7HKpIIk/Hz/AYvylwzLFo=
Subject key identifier: E8:18:AC:81:C0:8F:FD:12:B7:F7:36:8E:93:C6:CD:35:26:1A:24:D8
Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Certificate serial: 02
Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/D1F7684618C111EDA109D63BC4F9AE02.roa
Signing time: Wed 10 Aug 2022 15:33:45 +0000
ROA not before: Wed 10 Aug 2022 15:33:45 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 58715
IP address blocks: 103.191.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Validity
Not Before: Aug 10 15:33:45 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62f3cfd9-6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:66:0f:60:67:17:82:da:83:ea:c0:9c:c2:
11:78:ea:73:a3:9f:81:7a:0e:92:95:7f:d0:f3:36:
63:b7:9c:6f:10:6f:23:14:36:3d:24:05:07:ad:7b:
ee:55:a9:39:90:0b:fd:34:2b:23:64:48:64:c3:61:
2d:87:a6:df:48:49:e2:11:a9:ec:11:25:74:37:b8:
02:fe:bc:24:bb:c2:16:25:a9:5a:67:a0:f3:46:a9:
15:a4:39:07:12:f9:5b:8a:e5:28:a2:4b:a7:40:5e:
3a:6e:b3:2b:7f:0c:82:55:3a:75:c8:3f:c5:07:06:
00:2e:86:90:f1:9f:79:34:88:c3:47:30:f6:ed:85:
d4:c5:4a:ac:5f:ed:ca:0a:cd:00:eb:89:17:1f:c6:
4a:81:52:7a:f8:ee:9a:31:12:8b:2c:96:07:ce:76:
7e:aa:7d:03:1d:67:e9:4f:90:39:85:b9:f3:f2:f0:
f5:ee:97:80:d5:4a:97:6f:2c:e0:4b:b2:67:41:22:
a8:2f:9d:51:b1:f8:33:0e:6e:be:39:cc:6e:b5:05:
52:a5:79:31:12:21:e4:51:99:00:fa:1b:34:09:c3:
c9:b9:93:d5:46:7e:4c:31:bc:28:84:4a:1a:8a:1d:
1d:0c:51:8a:4d:6d:59:23:b1:24:bc:9e:5e:57:c0:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:AC:81:C0:8F:FD:12:B7:F7:36:8E:93:C6:CD:35:26:1A:24:D8
X509v3 Authority Key Identifier:
keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/D1F7684618C111EDA109D63BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.99.0/24
Signature Algorithm: sha256WithRSAEncryption
25:70:e1:8d:c1:d4:0a:fe:12:1e:d3:00:c2:68:34:39:51:68:
89:e7:78:31:68:a8:90:d3:d5:7b:38:50:82:c4:9a:79:12:ab:
ab:cd:97:3e:f0:62:f4:9b:47:45:ef:66:c4:53:5c:ea:2e:0d:
74:82:34:ae:95:e0:83:cb:e9:e0:fc:5b:a2:67:44:83:fe:28:
62:1f:96:60:16:77:47:69:c4:4b:a3:ba:fa:01:06:db:bd:cb:
0a:f8:19:b3:31:56:4a:5d:2b:ea:00:45:2a:13:8c:a9:7a:71:
a1:e0:29:f5:60:79:79:a6:c5:93:ef:79:82:ec:49:8b:c1:ba:
af:21:aa:df:3e:89:a5:b9:0c:22:83:f6:6e:01:c3:6e:87:d5:
a3:e2:09:03:b8:ea:71:27:33:2e:6a:41:2e:b5:56:6d:59:15:
c5:65:f6:83:e9:88:aa:7a:d1:f4:46:66:92:1e:65:c6:b8:cd:
ac:36:ad:93:ca:6a:5e:8e:fb:91:ab:aa:d7:c4:39:ad:1d:a4:
f5:f4:dd:b2:44:57:e5:96:3d:53:80:d9:fb:49:07:f9:ff:59:
8a:74:ab:0d:fc:7f:9b:8b:ce:0e:8a:b0:23:3d:15:e3:1c:eb:
f4:c7:aa:9b:82:d7:eb:d4:5d:b5:3a:18:2f:8d:eb:14:d8:2d:
e8:af:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org