Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/FB293612E5F411EDB4F43221C4F9AE02.roa
File: FB293612E5F411EDB4F43221C4F9AE02.roa (raw, json)
Hash identifier: 9TtLr4W0C2cEEINA2EcrzGPoq+UK9NmtZViWmOAdXlw=
Subject key identifier: 70:69:2D:92:B3:BB:53:0B:3E:1D:BB:B8:72:34:9F:D8:89:AF:58:26
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 6C
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/FB293612E5F411EDB4F43221C4F9AE02.roa
Signing time: Fri 28 Apr 2023 18:46:27 +0000
ROA not before: Fri 28 Apr 2023 18:46:27 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 23674
IP address blocks: 103.19.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Apr 28 18:46:27 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=644c1483-ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:a9:f3:b2:27:42:57:22:a8:ae:9f:d0:46:
cc:ea:20:b5:f1:6e:0d:b9:08:8d:01:45:b3:b8:24:
7b:ca:b1:6c:98:14:70:b3:0b:97:08:8e:66:bf:56:
4c:7b:66:1d:b5:3f:0b:02:dd:74:0d:07:a2:6e:e3:
c9:c1:8f:39:66:47:70:ec:db:aa:dc:6f:80:35:33:
7a:25:ae:f0:da:62:cb:8c:e7:a5:b2:95:c7:a8:15:
1c:20:5b:9d:dc:59:2c:a5:b0:57:06:05:d1:68:26:
d4:8b:f4:f8:b7:0c:67:12:8f:92:85:59:7e:51:1e:
d8:e8:f0:e4:ab:6a:d3:bf:b0:b6:39:fe:56:32:cc:
0f:83:00:48:4a:77:44:be:d1:98:cc:7b:96:82:e6:
83:1c:28:f0:21:4d:05:1c:5a:be:6a:5d:b8:14:7f:
8a:66:c8:93:1e:52:f3:ba:bf:5c:12:c1:40:81:73:
24:ea:7e:a4:80:ed:c1:9a:15:ab:7a:51:15:06:cf:
eb:96:31:5e:99:5c:db:3c:37:da:20:c6:f9:35:66:
d9:86:88:1c:1a:e0:57:9e:04:5b:d5:fc:f9:df:8b:
7a:97:d3:b7:9b:dd:8f:de:20:21:4c:98:37:71:7b:
1f:fb:63:32:ee:36:7a:13:a7:54:12:b4:35:4d:8b:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:2D:92:B3:BB:53:0B:3E:1D:BB:B8:72:34:9F:D8:89:AF:58:26
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/FB293612E5F411EDB4F43221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bd:06:93:a9:9c:5c:45:a2:2d:cf:76:ab:60:bc:74:b7:58:
3d:93:6e:79:cc:5f:f0:fd:3a:b6:ba:e5:53:c7:be:93:d4:87:
49:dc:1b:3c:d1:ee:6a:8a:53:e0:ad:eb:4c:a1:ba:f6:ee:c8:
f4:b4:16:67:ca:83:b2:dd:90:01:29:ef:c7:d6:bc:4b:40:6a:
6a:b6:80:b0:99:66:1c:f9:a6:d2:c4:0b:a6:21:63:ae:c1:2b:
80:b5:06:a0:fd:27:44:07:f8:55:b7:61:23:84:22:64:04:59:
9d:df:66:fa:3a:d7:65:7f:db:15:24:f7:fa:cc:73:41:82:87:
55:44:ea:11:8c:d0:84:76:bc:16:1a:81:2d:3b:b0:6d:e1:b1:
da:e8:cf:ec:0f:02:04:b6:52:35:89:be:7f:c0:ec:5b:4e:30:
9d:b5:26:bf:22:20:2d:3e:14:3d:b0:67:a7:d2:05:ce:2e:5c:
22:9d:ec:d9:2c:02:6a:0a:41:db:d7:44:5b:9b:51:8d:fb:2c:
05:ac:c2:bf:16:47:ad:0c:33:c2:fa:78:41:cc:2a:cf:e1:d9:
b8:72:0d:9d:26:61:5b:5b:56:95:de:2c:c5:43:34:e1:80:fe:
57:de:d8:1f:2b:4b:19:5b:c5:17:a1:5d:47:ac:f8:bc:82:87:
51:c7:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org