Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5EFD49383C0B11ED89AD755FC4F9AE02.roa
File: 5EFD49383C0B11ED89AD755FC4F9AE02.roa (raw, json)
Hash identifier: eYahxnC8FKLvKWBXYGj8sW8uYri8yUAMWThsXEaqg8A=
Subject key identifier: 77:56:2F:43:4C:A8:7F:DB:2D:66:AE:31:90:3F:A4:1E:20:B7:FE:A2
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 08E2
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5EFD49383C0B11ED89AD755FC4F9AE02.roa
Signing time: Thu 30 Mar 2023 21:48:29 +0000
ROA not before: Thu 30 Mar 2023 21:48:29 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 131686
IP address blocks: 103.149.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Mar 30 21:48:29 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=642603ac-4e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:1b:c4:10:1d:ba:d9:db:e4:69:a0:79:5c:
f5:b2:fc:a8:b6:6b:c5:01:f2:43:03:5a:9c:c2:b4:
c4:5a:70:78:ae:a7:1e:91:e1:ba:e7:5f:98:03:53:
3a:f3:69:14:69:47:de:ee:00:c2:3c:25:91:d7:f9:
c0:ca:ba:21:11:fd:40:7f:e2:6a:0f:0b:1a:a7:0f:
9b:7f:cd:a3:60:63:ac:57:6d:c9:46:7a:dc:15:05:
51:33:f1:38:b8:0c:44:2b:2d:bd:b8:7f:ba:26:ba:
7f:b4:af:eb:8d:fe:30:7f:be:c0:c5:55:a0:5f:cc:
07:07:c9:e6:4b:9e:c6:fb:15:6a:fc:df:17:67:e5:
45:d3:45:6d:b6:3b:fe:1c:a0:7c:f7:00:42:9f:69:
1a:82:5d:23:6b:6e:af:4f:ce:91:9f:c1:0e:4b:51:
40:b6:71:07:72:a8:a3:79:d1:fc:33:53:d8:09:b6:
11:d0:59:5a:8d:fb:35:a8:cd:05:01:29:99:d7:b8:
c5:55:11:90:3c:c4:5b:14:45:73:7c:bf:97:d4:86:
23:10:01:7b:a3:5e:98:d5:dc:d7:a0:4b:ea:26:bf:
3d:ca:02:7a:5f:bc:4e:01:7d:cd:f4:d8:ac:39:fe:
09:be:3a:97:d3:c5:25:82:8f:c8:78:ae:c7:41:c5:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:2F:43:4C:A8:7F:DB:2D:66:AE:31:90:3F:A4:1E:20:B7:FE:A2
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5EFD49383C0B11ED89AD755FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.61.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4c:cf:70:54:b4:e0:30:47:f6:56:0d:3a:2f:c3:4a:23:49:
94:f1:94:e9:17:e1:d4:78:8f:f9:e9:eb:fc:99:d6:64:20:7f:
48:c2:49:79:67:56:69:8b:84:27:9c:3f:13:18:c0:63:20:da:
a0:34:9c:dd:46:f7:eb:37:95:f5:12:20:50:8b:64:56:f3:7d:
3f:ff:2a:d0:ca:9f:e6:d1:e5:1a:78:41:71:ed:93:84:0e:54:
6b:34:4a:4c:7d:2f:24:7a:3c:65:ca:7f:30:15:48:b9:ee:f4:
05:33:a4:c4:68:a8:c7:ad:84:4c:36:73:76:3e:cc:99:8f:70:
15:04:fb:3b:48:0f:fe:90:99:24:35:b9:03:8e:1f:9d:99:6e:
df:cc:28:8b:12:c8:c6:db:dd:66:82:f2:bb:ce:13:e6:4a:d8:
2e:f2:05:34:7f:59:19:e5:7b:cd:07:68:27:f1:16:fd:97:2c:
04:03:39:9c:9a:4f:8d:79:ea:19:90:9f:2d:cd:56:19:ec:b2:
5b:e0:d6:21:48:8d:3c:d4:84:19:eb:6c:e4:d0:50:18:f0:e7:
2c:16:95:ba:60:a2:de:5e:35:73:d5:03:88:4b:c2:5e:7c:bf:
cb:d1:bf:97:19:d5:f6:e2:41:f2:c7:a0:86:98:1d:b9:5b:db:
cb:b3:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org