Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/745BFA58126D11EDBEF2FB38C4F9AE02.roa
File: 745BFA58126D11EDBEF2FB38C4F9AE02.roa (raw, json)
Hash identifier: A/6xNxnbh7V2JgIH+H+RoklJXtWlirqYwPCgD118Mxo=
Subject key identifier: 35:00:E8:64:A4:16:E4:4A:D9:CB:46:07:40:FD:9D:FC:55:0E:8B:E9
Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial: 08
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/745BFA58126D11EDBEF2FB38C4F9AE02.roa
Signing time: Tue 02 Aug 2022 14:14:43 +0000
ROA not before: Tue 02 Aug 2022 14:14:43 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 38713
IP address blocks: 103.191.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Validity
Not Before: Aug 2 14:14:43 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e93153-fe1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:a1:62:c7:cf:65:5c:70:1e:6b:2d:4f:e0:
35:04:36:2a:03:c8:41:2a:31:2c:31:34:cb:d8:41:
d0:39:d4:c0:5d:ae:ef:b5:fd:23:c1:77:bc:50:8a:
5e:54:32:ad:c5:65:73:0e:f3:fd:41:06:64:86:72:
ee:1b:1d:ea:b2:fe:b6:84:57:32:80:09:65:da:18:
29:2c:a4:8c:df:bf:1c:21:68:77:fa:94:e3:e6:3d:
43:9e:9a:26:18:cb:2d:0e:37:1a:ec:f6:2f:dd:92:
e8:47:0d:db:de:36:ce:6b:31:32:48:90:0d:57:bf:
c5:bb:05:be:7e:4f:29:55:6a:df:0b:6e:bb:6c:64:
26:1d:4f:1b:75:ff:1a:ba:4c:5d:7f:d7:b7:b6:11:
bf:02:1c:d9:82:bb:3d:62:f0:99:1d:40:f8:d4:0b:
37:ec:f3:42:5a:40:97:c1:7b:df:c7:97:30:05:61:
73:60:78:49:f1:5c:0c:71:2d:43:21:17:90:95:69:
d4:4b:bb:9e:8f:43:94:17:6c:54:29:8e:3b:1e:ab:
82:2b:0b:1c:1c:f8:cb:59:79:70:f5:05:0e:ac:0a:
ef:eb:08:31:4e:f6:a3:71:39:c9:a2:ae:62:33:86:
3d:6a:3b:36:6e:33:e4:7a:28:a5:63:e2:6f:29:d6:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:E8:64:A4:16:E4:4A:D9:CB:46:07:40:FD:9D:FC:55:0E:8B:E9
X509v3 Authority Key Identifier:
keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/745BFA58126D11EDBEF2FB38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.18.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e8:da:21:a3:90:56:e3:88:2d:21:d6:12:ad:a9:2c:a0:04:
d2:b7:ab:08:e8:e1:34:07:4d:cf:6d:e1:15:c2:09:08:a8:16:
ce:ae:8a:17:50:e6:a2:f2:e4:c8:e2:e7:e7:f1:76:b8:fd:58:
8f:51:69:4b:57:be:b0:66:ac:99:6b:d8:f5:cd:aa:4f:83:22:
03:a3:93:a5:70:ab:7e:97:b9:7c:c8:63:ef:93:93:96:68:01:
7f:65:11:f1:53:cc:63:29:dc:28:81:53:90:93:d0:6f:b5:cd:
86:1b:74:07:18:20:a9:f5:93:4a:6b:21:05:fd:6d:fd:e4:c9:
19:9f:93:52:de:7a:a8:d6:65:25:be:88:58:1e:1d:eb:67:9d:
83:44:1d:d7:39:c9:f9:83:76:77:87:d8:16:bc:40:b1:23:66:
c2:07:4a:96:40:0b:ef:cc:80:d3:70:81:5e:79:ba:45:f2:d7:
ab:2c:21:70:76:4c:24:c1:88:3b:fb:ea:27:e5:d1:35:bb:02:
fe:bb:1a:77:32:e6:c7:07:09:f7:19:4f:6b:49:55:13:54:56:
48:ab:e6:45:a2:6c:08:35:85:c0:22:8e:50:4f:54:90:b2:56:
3f:af:ac:6c:d1:1e:a7:e1:29:3f:fa:ac:b4:bc:d9:49:7c:68:
3a:ce:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org