Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
File: 1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa (raw, json)
Hash identifier: AAs1ltmmHWnS4GOYsfsGxsK/qn5EiHwrr+KUGnEABJQ=
Subject key identifier: E1:DF:5F:EF:7D:AD:CD:21:C3:6C:44:84:AE:3F:F3:AD:42:8D:34:AA
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 04
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
Signing time: Thu 07 Jul 2022 06:14:54 +0000
ROA not before: Thu 07 Jul 2022 06:14:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13631
IP address blocks: 103.187.70.0/23 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Jul 7 06:14:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c679de-4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:6a:47:6e:e0:89:96:3b:52:c0:05:75:70:
72:d6:f4:85:aa:e1:39:f6:ac:cd:f9:3b:2c:48:32:
99:08:95:c0:f4:04:0d:00:bd:3e:d7:f0:d1:8d:77:
59:7b:e9:86:d3:41:81:bb:8b:30:30:d4:7a:44:ca:
71:36:9e:5b:19:f8:a8:c7:72:fa:c4:f5:ee:b4:c3:
c8:b9:b1:0f:12:6d:86:18:4c:ea:d4:bb:b9:d1:77:
c5:01:f5:99:9d:ea:25:a9:cf:08:f5:f3:c3:2c:f8:
88:52:7c:a3:54:0c:72:28:20:ec:00:c4:a5:39:81:
a7:bf:9d:f5:63:65:a0:a5:58:6d:68:79:e9:2e:64:
30:d6:57:be:f1:e6:cc:e2:aa:ef:86:b6:fa:d6:05:
28:d6:b5:9a:9e:03:18:50:d0:0d:d6:63:eb:a4:f8:
3e:9f:ab:9c:01:21:29:4f:89:eb:e4:09:dc:61:f6:
56:c8:b8:1d:c3:fc:1b:b1:e5:28:d6:dc:eb:72:c3:
27:09:02:58:6c:b1:2d:e5:f0:7e:e0:14:97:28:7c:
0f:67:11:d2:8f:a0:59:02:fd:36:71:d7:01:43:76:
65:93:92:c4:79:4c:0b:64:2c:11:f1:13:04:08:5b:
5b:85:e7:22:6f:81:d5:a9:0a:97:2b:dc:a8:43:41:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:5F:EF:7D:AD:CD:21:C3:6C:44:84:AE:3F:F3:AD:42:8D:34:AA
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.70.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:43:0b:98:0e:f1:8d:eb:30:7c:ad:d8:73:5c:de:ec:8e:6b:
15:c1:64:6c:26:e7:12:d9:66:46:16:46:4c:72:da:a9:ea:b7:
67:8d:0f:1d:41:c0:66:9f:5e:73:9c:c0:01:25:f4:5a:24:0b:
84:d8:80:dc:34:ac:23:8e:2a:14:2b:7b:19:07:20:b4:57:cd:
92:5b:a7:2c:17:d1:25:97:a8:65:8a:b3:14:f1:c4:47:36:40:
39:e8:5a:0a:f5:a5:85:ba:2f:92:72:7c:bd:4f:73:52:ec:cb:
e9:8e:5f:ff:d7:f3:dd:da:ac:e1:16:a5:df:01:76:62:ad:7e:
25:5e:4e:3f:37:90:0c:da:2c:a0:39:a0:d5:e6:ce:b9:db:d6:
ce:35:ac:83:ae:52:63:38:61:4b:f2:6c:e6:40:f9:31:6c:ee:
5d:ce:ce:8c:58:97:1c:de:26:57:f2:f1:45:4f:2b:28:de:de:
bb:bb:d0:94:2f:08:74:05:35:c7:fb:c3:6f:dc:3b:70:69:4d:
c1:c9:3b:7a:e0:5f:b4:28:04:85:56:7d:86:89:95:6e:65:1c:
35:d3:00:e0:3a:4a:d2:2b:99:57:21:e4:93:92:c7:36:c9:0b:
5b:18:20:78:7e:26:d4:6a:0d:95:cc:56:a5:d1:17:71:f0:e9:
1d:62:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org