Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/22A52A8E8BA211EBA971EF18C4F9AE02.roa
File: 22A52A8E8BA211EBA971EF18C4F9AE02.roa (raw, json)
Hash identifier: TZeuq0BHead46Cc88G/zZcuaHFADftzh8uBJHDV8SxM=
Subject key identifier: 7D:8C:C1:8E:3E:E7:76:4A:EB:7C:95:90:02:5E:A6:9D:B3:CC:89:0B
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 67
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/22A52A8E8BA211EBA971EF18C4F9AE02.roa
Signing time: Tue 04 May 2021 13:57:54 +0000
ROA not before: Tue 04 May 2021 13:57:54 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 137523
IP address blocks: 103.151.4.0/24 maxlen: 24
103.151.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Validity
Not Before: May 4 13:57:54 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=609152e2-148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:c6:89:0a:5d:f3:68:03:72:81:d1:8e:2f:
56:2d:a4:82:78:29:c2:50:ca:71:cb:b5:cb:13:db:
2c:92:05:fe:35:a8:f1:13:a4:0d:df:10:15:19:69:
22:dc:44:8b:22:20:4f:8a:94:54:56:25:95:11:91:
b8:40:d0:86:a1:23:43:4a:66:b8:a5:0d:80:2e:bd:
c1:d7:1d:38:b9:a4:63:74:cb:58:0a:f0:84:60:5e:
72:e7:b1:61:33:e4:d7:fa:39:f6:6f:03:16:bc:10:
b6:6a:8a:49:7b:db:87:74:3c:14:85:be:d5:76:84:
0a:14:25:93:33:cf:89:19:1e:4a:98:e6:82:75:70:
5a:85:97:28:a3:48:2d:2c:da:2c:b6:c9:54:42:54:
e9:c6:5c:a5:9d:53:af:d1:f5:6a:88:17:ea:4f:1b:
36:38:c6:17:b4:99:6e:c7:d9:bd:6c:00:d2:76:87:
0b:41:c4:e9:8a:0f:45:7e:4e:be:43:70:82:eb:4a:
20:00:db:2f:8e:22:a8:f2:df:9b:41:fc:65:19:07:
fb:6a:ab:ef:1c:94:9c:3e:f6:de:26:47:ab:77:98:
f8:b9:e3:3c:65:25:18:32:91:10:ad:0e:39:ef:d1:
1b:c8:e2:4f:13:8e:70:99:00:cf:0f:aa:e7:e8:81:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:C1:8E:3E:E7:76:4A:EB:7C:95:90:02:5E:A6:9D:B3:CC:89:0B
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/22A52A8E8BA211EBA971EF18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/23
Signature Algorithm: sha256WithRSAEncryption
93:06:c6:42:b7:6f:1f:f5:a9:5d:a5:16:65:35:ec:35:7c:b1:
c5:f5:0e:51:be:53:54:33:fe:8b:8f:2b:26:c3:78:b6:f4:be:
d8:49:ae:b4:01:75:13:e4:a7:e1:2f:5a:52:89:6c:46:81:46:
b0:50:66:f1:fd:3c:68:c9:dc:12:c4:af:df:0a:01:58:af:6e:
81:12:1e:a4:29:18:dc:57:25:d0:ea:5a:64:57:39:5e:88:94:
a0:50:13:5a:f4:eb:e6:27:8a:9f:dc:cc:3b:50:60:11:f5:b1:
17:c8:29:8a:48:27:33:df:7e:0d:15:bd:8e:b0:57:b8:eb:ba:
91:35:eb:ef:ea:dd:ce:8e:20:f1:53:69:41:6f:7f:65:b4:48:
e2:d0:ea:7f:8d:b7:ee:79:ee:bd:75:14:f1:e2:bc:78:3e:a2:
a6:00:18:4e:63:fa:a8:57:7b:c2:e9:d0:a8:07:67:6f:7d:44:
d7:30:db:3d:9e:6e:02:85:b2:40:c1:f0:c1:70:43:fa:88:f0:
a8:e1:e1:8d:81:b3:ca:62:e7:77:17:15:e9:f0:4f:ff:56:be:
ef:c8:bb:13:41:e7:82:ff:82:8f:0d:bd:76:62:7a:44:ae:fb:
bd:02:5b:9f:5f:45:16:d8:54:cb:e8:ff:14:e0:10:22:f5:22:
ce:b0:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org