Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/48325026879411ECBD96BB23C4F9AE02.roa
File: 48325026879411ECBD96BB23C4F9AE02.roa (raw, json)
Hash identifier: 7bfs3I5CbFTRTIe1W341+V/3bvYiRa5t1MGDdgqzTKo=
Subject key identifier: C2:AD:2E:68:48:AA:99:DE:64:71:88:C2:EC:3F:09:FB:23:46:6D:4F
Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial: 02
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/48325026879411ECBD96BB23C4F9AE02.roa
Signing time: Sun 06 Feb 2022 21:32:28 +0000
ROA not before: Sun 06 Feb 2022 21:32:28 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 149442
IP address blocks: 103.179.140.0/23 maxlen: 23
103.179.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Validity
Not Before: Feb 6 21:32:28 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62003e6c-17d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:c7:5d:f6:62:c3:06:ac:e4:20:16:58:e9:
8a:8f:78:cf:cd:fd:6e:f6:54:70:e6:47:3b:1b:4b:
27:0d:b0:54:59:83:c7:a4:ff:fd:6c:36:2b:c2:d2:
8c:8e:79:26:71:b0:ee:fe:05:a2:3b:d1:aa:27:d3:
61:88:f7:d1:38:85:5d:46:47:72:1d:d2:e0:d3:a5:
ea:96:68:1b:b7:50:5e:55:41:d8:4d:60:62:fc:27:
74:f5:53:e0:bf:81:49:bc:03:ff:8b:d5:67:1e:94:
1a:ff:d5:10:bc:3f:02:1d:be:d4:b3:34:7e:a9:60:
e3:ff:eb:dc:92:cd:d7:e1:0b:4a:f0:a6:d6:d6:17:
75:cb:4f:0c:24:0e:a8:4e:1b:bf:88:76:4a:d9:b3:
6d:c8:d5:c7:48:de:6b:47:70:80:98:54:40:9d:10:
ff:91:57:24:bb:fe:5b:bc:41:2f:14:de:ef:6d:9d:
58:26:d9:87:cb:44:b5:1a:c0:69:f7:8b:ae:23:d7:
d8:06:73:61:18:b4:41:76:8c:f1:f7:7d:9b:98:4e:
f0:bb:4b:83:99:78:94:58:76:0e:24:cc:cc:27:84:
06:3a:b0:fa:63:ae:af:ad:f7:35:19:7c:e1:e7:fa:
8d:9e:9e:7a:25:e1:b8:d1:95:9e:35:71:ad:0a:3a:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:2E:68:48:AA:99:DE:64:71:88:C2:EC:3F:09:FB:23:46:6D:4F
X509v3 Authority Key Identifier:
keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/48325026879411ECBD96BB23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.140.0/23
Signature Algorithm: sha256WithRSAEncryption
21:9c:6c:d2:84:98:d6:db:ae:d6:0d:98:68:d3:88:df:4b:a4:
51:bc:a0:5d:bd:56:76:cb:6f:81:3b:c2:aa:f9:97:ab:f1:b2:
27:0d:9b:4c:e6:2c:2e:af:8c:3d:61:c5:9b:4b:3f:74:f0:87:
c0:96:92:93:c0:67:88:1a:d6:40:e0:e7:31:e1:7d:49:96:93:
3f:c9:56:30:e0:cc:12:0f:72:c9:e8:e7:05:c9:f2:47:93:90:
cd:54:56:c6:f4:7c:cb:16:1d:34:bc:7a:eb:c4:c0:6c:0a:41:
52:20:ec:05:37:8c:cf:94:a7:b2:a0:84:2b:30:a6:20:4a:f6:
36:61:5c:63:cc:7e:de:0f:4a:9e:5c:0b:51:ee:a8:ab:67:95:
2d:53:11:f4:c5:4e:04:47:cf:5f:49:7f:7a:22:1b:8d:a1:07:
e1:62:9a:7e:4d:19:fa:88:67:18:ea:4f:74:39:9c:4b:6c:f9:
01:c8:9c:be:6a:bc:bc:ba:59:0b:e3:f5:bf:8d:90:62:38:28:
10:f6:79:78:72:14:22:d4:80:9a:94:f0:30:98:31:19:a1:2f:
56:1e:d8:d0:aa:93:0d:dd:6e:81:dc:bf:92:f9:58:41:9e:21:
c0:bf:47:a6:8a:8c:2a:a0:d0:5b:b2:59:8c:66:6b:74:c4:90:
8a:38:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org