Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/6DE066B6144F11EE86CD7A23C4F9AE02.roa
File: 6DE066B6144F11EE86CD7A23C4F9AE02.roa (raw, json)
Hash identifier: aTZQ2/aQ0lnO4oi9WCI3+AwJjvthn+tR03Xh/h3PI2M=
Subject key identifier: CA:9B:D2:DA:EE:76:36:C6:00:30:B7:50:4A:1A:D2:2A:B0:D1:6D:2B
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 034A
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/6DE066B6144F11EE86CD7A23C4F9AE02.roa
Signing time: Mon 26 Jun 2023 18:29:48 +0000
ROA not before: Mon 26 Jun 2023 18:29:48 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 134489
IP address blocks: 103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Jun 26 18:29:48 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6499d91b-5f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:12:eb:75:1f:ba:5a:c0:1c:9f:95:d4:93:
cd:8d:f8:52:3a:7d:64:de:4f:ce:de:a4:4c:f5:a2:
8b:ac:22:6c:8f:56:7a:51:0c:04:80:09:df:f3:54:
34:f0:5e:eb:55:d5:4c:e2:9b:00:c2:05:bd:7f:9a:
5d:83:18:9c:1b:0b:0a:91:88:01:74:f1:fc:a2:1f:
39:ae:a1:8f:51:b3:88:7a:a5:e8:24:c0:42:ab:71:
3f:06:6b:43:ef:24:08:ba:f5:8f:4c:f2:5d:3b:53:
56:94:5f:12:2b:c0:92:cb:d4:a3:2a:f0:95:ad:da:
ba:ab:ba:a0:e2:6e:0a:c0:e9:c2:cd:de:89:85:4a:
62:73:bc:07:59:ec:f4:3e:32:c7:80:91:d0:54:a3:
ab:c8:c9:8c:23:ae:4f:7a:a5:d6:ea:f7:63:c7:1f:
54:0b:c8:c5:60:f0:0e:53:7f:4b:43:a9:18:b6:ee:
7b:9c:d0:0e:bd:50:15:3b:ae:66:14:02:35:02:59:
0e:10:a4:29:9f:d1:0d:06:fc:b1:b1:62:91:43:fc:
b8:ba:96:81:20:c6:1e:d3:0d:00:0b:8a:8a:e5:76:
b3:10:76:4b:27:c8:c6:a1:d2:04:b7:74:6d:5e:10:
c7:f1:de:df:90:ef:f5:d5:10:6b:81:85:5e:5d:b3:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:D2:DA:EE:76:36:C6:00:30:B7:50:4A:1A:D2:2A:B0:D1:6D:2B
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/6DE066B6144F11EE86CD7A23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.195.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c6:04:dc:f7:40:67:0d:d9:ad:a1:3d:44:00:41:6d:54:e6:
b8:3d:4d:5a:eb:3c:6c:d1:f0:84:2c:7f:a1:ad:2a:61:d1:16:
09:91:c1:a8:34:77:29:12:cb:f8:bb:6e:fe:f1:3b:ae:84:60:
ea:08:f8:77:65:08:6b:ff:6e:55:d4:de:a0:b8:d7:f9:c7:9c:
8d:d9:e3:d7:a3:1f:3b:a7:14:47:1d:ec:b9:b1:f5:af:83:60:
b6:7a:30:96:d1:10:a5:9e:48:72:3d:95:36:31:1f:d2:bf:a9:
da:2d:e2:2f:cb:06:81:b3:a6:00:2c:4e:bd:60:d3:e9:41:b5:
00:fd:3a:45:33:ca:30:3b:5b:34:b7:a8:82:1b:13:19:6e:45:
e5:3d:d4:c6:a3:a3:ee:39:dd:a6:5b:28:aa:34:1c:c1:c5:07:
07:02:62:7d:de:ac:50:ee:1b:e5:53:68:12:0f:ef:18:73:3c:
91:92:dc:c7:8d:d1:dd:e5:19:2d:9a:f6:d4:35:68:5f:2f:1f:
5f:f4:8f:cd:94:45:ca:51:e5:07:70:a1:c6:e5:93:50:72:14:
f1:71:1c:b8:95:f9:eb:ff:41:3f:f9:41:44:3b:7b:42:19:a9:
e9:d2:50:39:b5:b6:3f:a5:56:1d:f4:11:90:b3:f3:42:da:7d:
cf:e7:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org