Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/E8604B7C3E4F11EC835B8627C4F9AE02.roa
File: E8604B7C3E4F11EC835B8627C4F9AE02.roa (raw, json)
Hash identifier: R/VTK4Zbmko4b4eEgBi2hThTgWrSC4BmEpKUtQGqFnM=
Subject key identifier: 21:2A:F4:EE:18:1B:87:BC:03:06:D9:E6:C3:6A:39:05:75:47:C4:50
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 02E2
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/E8604B7C3E4F11EC835B8627C4F9AE02.roa
Signing time: Fri 05 Nov 2021 15:49:07 +0000
ROA not before: Fri 05 Nov 2021 15:49:07 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 22773
IP address blocks: 103.238.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Nov 5 15:49:07 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=61855272-0e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:9c:d9:76:01:71:09:48:db:a8:2f:41:71:
b4:5b:a7:ed:2f:49:2f:0b:7a:08:09:21:d2:71:5b:
e8:54:e1:64:b7:a8:cd:ea:26:d7:27:04:48:36:ac:
8b:1f:99:95:14:89:72:13:55:34:b9:e8:27:3d:67:
79:2c:aa:7a:3e:71:b0:cd:04:75:fc:b5:eb:5c:11:
8f:15:c0:45:3b:a4:cc:70:05:6a:65:91:45:a0:e9:
97:a9:f1:42:b8:eb:7d:45:85:43:35:4b:df:fd:b5:
9f:0e:7e:38:a0:8b:24:59:bf:a2:5f:49:81:d5:a7:
fd:5f:ca:4c:b6:c1:a8:ff:cf:55:af:81:42:dd:4c:
6d:c5:53:7c:2a:63:74:90:a7:30:05:5d:88:fd:63:
b1:41:d4:38:64:db:ed:98:5f:25:1c:ed:36:d5:bb:
7b:ed:1a:21:57:cd:61:4f:78:95:96:05:98:eb:a2:
63:7a:c7:4e:5c:c8:99:00:5c:53:7a:dc:63:83:3b:
b6:9e:4d:f2:71:a9:6e:da:aa:ef:a6:5c:5a:f3:7a:
c9:e8:fe:8d:0f:35:5c:2f:4e:25:f1:90:5f:10:c1:
9d:fb:2c:ce:9a:33:52:39:89:54:0e:47:db:88:5a:
22:b8:3b:b5:2b:5e:27:fa:18:a5:e6:10:a4:58:c5:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:F4:EE:18:1B:87:BC:03:06:D9:E6:C3:6A:39:05:75:47:C4:50
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/E8604B7C3E4F11EC835B8627C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8f:fc:3a:54:18:59:34:71:f8:78:02:8f:98:19:70:b1:a5:
9e:eb:27:d1:61:bd:93:41:b2:47:4d:cb:16:64:78:63:78:a1:
8b:df:61:76:f1:15:11:9c:0f:4c:c4:99:22:fa:cc:d0:ca:01:
1b:c4:3a:0a:e8:1d:86:58:b0:c3:ff:24:b2:42:08:02:fb:42:
7b:cd:33:25:52:33:b7:eb:19:51:35:ec:78:47:aa:31:76:d7:
81:e3:ec:6a:64:7b:3d:17:a8:08:8b:fa:aa:8f:5e:6d:28:dc:
36:8a:8c:98:2a:b8:68:2b:62:fc:dc:7a:a1:bb:a8:c9:b5:55:
b5:19:bc:4a:54:57:f5:3e:a5:27:46:b2:2c:f2:b7:e4:e1:2a:
d1:60:ee:c2:86:af:c9:5a:83:75:ec:a0:8b:9d:dc:62:25:4b:
b5:9a:01:9d:6d:b8:82:f9:85:84:78:37:ea:d3:3c:95:33:24:
c6:62:0b:d9:16:08:1f:d4:24:ee:4b:75:e9:c3:a5:a4:c2:54:
ed:f4:b2:28:f0:89:5a:94:01:ac:3f:16:a2:01:4a:6b:fd:8d:
de:c4:c8:74:4e:8e:b3:85:a0:9a:6a:2e:e2:2d:cc:c5:33:62:
13:89:8f:2d:52:07:91:94:d1:d1:e3:81:c5:86:33:4a:62:69:
eb:6c:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org