Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/88964AAEA78A11EB9C65B83FC4F9AE02.roa
File: 88964AAEA78A11EB9C65B83FC4F9AE02.roa (raw, json)
Hash identifier: nqN0zIPMdqxGPsTDxU5Ptdakjk7cDGPR89qT8VmR7To=
Subject key identifier: 12:1D:14:AA:98:D0:81:05:5C:01:1B:DE:3C:EF:BC:B4:A9:73:77:8B
Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial: 02E6
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/88964AAEA78A11EB9C65B83FC4F9AE02.roa
Signing time: Sun 01 May 2022 14:12:15 +0000
ROA not before: Sun 01 May 2022 14:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139728
IP address blocks: 103.166.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Validity
Not Before: May 1 14:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=626e953e-38dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:eb:b3:f2:ca:85:21:cd:50:e0:a8:19:91:
c4:71:40:9f:6d:a4:e3:dd:d9:90:86:4f:27:5c:94:
ea:85:64:a0:43:aa:46:33:b2:dd:55:1f:61:b1:a0:
cb:d1:89:6a:3f:91:62:3b:66:96:d8:86:92:a4:a3:
2f:ca:be:da:cf:06:1e:80:5f:b0:68:e8:fb:27:ed:
31:88:8a:70:c7:a3:65:d4:92:ee:9b:19:d0:41:a9:
3d:83:b5:04:b0:79:7a:7f:32:ad:66:bc:e7:be:55:
bd:a8:fd:3d:61:19:27:f7:f2:fb:92:87:7b:0e:bb:
de:9d:44:ab:e0:50:3a:87:df:a1:a5:3a:ac:36:54:
33:ab:84:83:16:38:22:0b:7d:e8:b9:a4:9f:40:34:
ab:74:a8:4e:3c:8f:e8:f7:62:e7:ec:1b:62:c8:bb:
17:70:3e:db:57:1e:bf:8f:ea:2b:e5:89:6c:91:eb:
8a:ae:67:8b:2b:a4:1c:ae:43:90:b3:3f:20:c9:bc:
de:b8:a1:bf:fb:4f:d0:4e:1d:be:ef:ce:15:73:27:
d9:12:5f:3d:69:9d:16:c8:b0:d8:30:d7:61:b1:30:
ef:7b:f7:47:2f:63:b5:12:41:29:c0:66:fa:92:73:
9c:ae:65:0f:b9:4a:36:a7:0b:b0:14:52:50:d3:bb:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:14:AA:98:D0:81:05:5C:01:1B:DE:3C:EF:BC:B4:A9:73:77:8B
X509v3 Authority Key Identifier:
keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/88964AAEA78A11EB9C65B83FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:06:60:8a:3c:87:f4:d5:54:32:c5:9e:33:1f:a2:4e:30:bc:
87:ec:81:a6:39:34:48:19:de:39:4a:10:5a:15:2a:6e:01:ad:
3e:0f:d9:5a:8a:c9:0a:4e:0a:92:eb:e7:36:26:0f:41:6a:a7:
43:39:60:bd:4c:1d:4d:bf:46:dd:35:d1:53:2b:88:e4:b6:fc:
6d:54:d6:5d:e7:8b:3c:7a:5e:35:60:bd:83:0a:4b:f2:65:95:
98:9f:d8:ef:92:26:ab:12:79:53:e7:28:42:95:31:8e:36:a5:
47:b6:76:00:39:c2:71:68:fc:37:b8:98:03:b8:4f:f7:3e:55:
f3:d6:93:0b:20:17:58:8b:78:37:c7:5f:c1:2e:4e:d9:ed:6a:
9b:a1:c3:18:8b:ff:06:c7:21:72:33:e4:e9:01:1f:73:7f:c5:
27:46:f2:89:46:7b:a6:a8:a8:0f:bf:a9:1a:71:9f:67:e9:5e:
92:de:fe:41:fe:ec:58:62:11:45:b4:44:45:d5:ce:19:7a:43:
c4:13:07:05:8b:9c:9a:40:0f:f9:68:37:4b:c1:4c:5e:fa:81:
bb:7c:43:3f:4f:be:ac:57:09:48:dc:eb:4b:04:b7:a3:b1:12:
1b:a3:ab:d6:ef:8b:19:d1:42:9e:be:95:5f:24:cc:73:9f:7e:
05:37:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org