Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/794BC8387ABC11ED91148383C4F9AE02.roa
File: 794BC8387ABC11ED91148383C4F9AE02.roa (raw, json)
Hash identifier: l++QgSmGU7aOAG++ShzMbTX+CbcCnKww6nNFeeK4aQA=
Subject key identifier: 90:FA:83:AC:9D:D9:91:D2:1F:D1:38:69:07:C6:D1:53:54:06:DB:0C
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 02C8
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/794BC8387ABC11ED91148383C4F9AE02.roa
Signing time: Tue 13 Dec 2022 08:23:27 +0000
ROA not before: Tue 13 Dec 2022 08:23:27 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150671
IP address blocks: 103.174.194.0/24 maxlen: 24
103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Dec 13 08:23:27 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6398367f-f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:55:c4:a9:49:d6:10:f6:ba:66:46:30:de:
ef:b5:27:32:4b:b4:e0:2e:2c:9d:c3:b6:13:17:c5:
e5:c8:9c:57:55:1e:4b:16:13:c6:7f:12:29:22:4f:
84:70:36:c5:46:60:79:4c:df:41:bc:e7:75:1c:50:
58:d1:f6:d0:4c:ea:95:bb:d8:aa:72:be:73:73:5d:
64:b5:a6:68:85:d3:76:fb:ae:e6:2e:09:d5:01:c0:
bf:e6:ba:d1:3f:7c:de:22:18:bf:6a:63:4f:3f:62:
1e:d8:ac:5c:1d:67:4f:d8:31:62:21:6d:df:0f:5f:
3b:ed:83:c9:58:e6:d7:46:46:27:48:75:d5:4f:3a:
60:dc:2f:0f:90:f5:52:57:62:3c:bc:01:81:5b:8c:
c5:c9:3f:f8:9d:aa:53:c1:a1:b3:c3:7e:e8:dc:79:
de:33:84:1c:32:cc:72:9c:41:6f:21:c4:88:cd:a9:
d8:cf:d8:cd:98:cc:75:dc:4b:a5:e0:41:74:16:a4:
dc:61:aa:34:2d:97:c2:96:31:0f:1d:38:21:c6:99:
63:9a:da:a1:b3:e1:35:49:38:2d:af:2d:df:25:40:
8f:8b:77:fd:38:c3:b0:62:3d:bd:57:53:51:86:a8:
49:39:03:34:87:66:e4:07:e4:91:fd:36:ba:8f:65:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:83:AC:9D:D9:91:D2:1F:D1:38:69:07:C6:D1:53:54:06:DB:0C
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/794BC8387ABC11ED91148383C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:92:03:83:a3:0f:9e:f6:09:35:17:7d:fb:3b:5f:3d:ce:aa:
5d:43:64:d5:9b:39:4d:8b:1f:ad:f5:1a:a8:07:99:df:cd:5c:
c9:37:1f:f0:fe:a1:0e:58:99:90:e0:81:e9:24:4d:0f:5d:8d:
8c:ad:de:7e:43:e3:c3:a7:84:ea:d0:98:f7:04:ba:c0:cd:51:
55:20:4e:04:81:22:06:9f:f8:79:f1:4a:9c:b2:03:fc:6e:91:
8e:35:43:51:7f:5b:c0:45:db:15:03:67:c9:41:08:16:f3:96:
cb:8d:6e:90:32:e0:f1:4d:c4:2c:37:1b:e1:a0:2e:d6:e7:b3:
b0:3d:8f:bc:f3:75:53:c2:44:76:2b:08:38:19:64:2e:ef:dd:
08:cb:2b:b3:b9:a9:8f:2c:7f:18:0d:51:b0:ca:31:d4:3c:57:
91:f8:e2:83:67:66:fb:cc:34:0b:b3:7d:db:d7:89:8e:53:ea:
1d:7c:22:7c:52:49:52:78:a4:9b:3c:ed:8d:a6:f3:2e:5f:61:
38:17:22:73:8c:0d:73:23:9f:42:a2:fd:f7:ba:f3:34:0c:e2:
75:6f:91:e9:88:d7:74:74:fc:12:c4:3e:6b:cf:b0:23:5a:ab:
81:a8:5b:49:25:c7:a9:20:f0:0a:88:76:19:12:18:9f:07:6a:
7c:5f:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org