Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4B0E1EFECEF411EC83039A62C4F9AE02.roa
File: 4B0E1EFECEF411EC83039A62C4F9AE02.roa (raw, json)
Hash identifier: UD3Dr26LqfcX9wFjdW/0L4/+qWvmnLHeiNepShgexoU=
Subject key identifier: F5:53:86:B7:D8:92:7E:3F:BC:FB:2C:3E:13:A7:49:39:24:43:46:3E
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 067E
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4B0E1EFECEF411EC83039A62C4F9AE02.roa
Signing time: Sun 08 May 2022 17:28:37 +0000
ROA not before: Sun 08 May 2022 17:28:37 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 131340
IP address blocks: 103.74.228.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: May 8 17:28:37 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6277fdc5-3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:71:64:81:76:cf:c1:70:b2:9b:7b:86:00:
80:97:76:49:e1:7f:61:e1:1e:46:87:a6:bd:53:40:
d6:78:99:db:0e:17:96:15:3e:e8:18:f8:47:32:54:
17:65:bb:c4:38:d9:2b:71:11:46:a0:9a:9d:e3:23:
76:6c:2b:49:50:34:ce:39:fa:dc:d4:cc:89:23:29:
d8:39:b9:fa:b5:7e:7c:03:db:1e:c1:06:ab:3d:93:
bc:d2:80:59:56:fe:2d:c3:fa:23:d9:ba:de:e2:ea:
f8:8d:db:d9:ac:61:94:51:b3:71:bd:c3:99:ff:32:
f5:a1:6b:f6:4c:7a:31:b5:a5:ad:d4:c7:3b:3e:b3:
94:aa:48:c7:1e:77:5c:e3:b0:04:4d:b7:6d:ce:3e:
71:f2:cf:a6:64:ac:af:37:8b:a1:12:94:84:8c:7d:
76:32:ef:d0:39:12:30:b9:28:e0:d3:44:ca:c4:7c:
29:f9:67:66:e6:1a:fd:da:f4:23:f0:e2:ad:93:76:
a7:19:92:9a:48:7d:49:96:a7:e4:78:a6:22:0b:30:
5e:da:fb:3c:47:6f:4f:2c:8a:68:74:c0:30:17:c2:
ad:e2:b9:76:25:aa:63:71:55:10:ff:57:84:70:61:
c1:22:4f:e3:05:ad:10:26:46:b7:80:38:d2:cd:ff:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:86:B7:D8:92:7E:3F:BC:FB:2C:3E:13:A7:49:39:24:43:46:3E
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4B0E1EFECEF411EC83039A62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/24
103.74.230.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d7:df:d6:62:92:50:58:76:78:31:d0:66:5b:21:bf:5c:f5:
08:45:c2:3a:92:41:7c:5f:9c:56:4f:77:9a:62:a0:9b:ec:41:
d8:4c:d4:26:f7:89:ea:d6:8a:68:cb:8e:28:dd:aa:74:08:9c:
6a:4e:b0:86:d5:ee:ff:14:3b:1b:75:a4:c2:1e:92:be:f6:c7:
2d:ab:b3:db:14:8b:6e:31:20:fd:36:53:5c:1c:56:7f:ec:d8:
51:f3:88:b9:34:dc:41:8f:c3:ad:86:40:5d:a4:76:05:91:78:
77:2c:ed:29:8c:bf:f4:94:23:04:e2:15:90:f7:11:22:00:50:
05:dd:70:58:91:54:8b:aa:53:7e:08:e9:7c:98:40:0d:20:e2:
b1:7c:b4:73:1e:8e:7b:51:a1:cc:99:dc:6c:d2:ea:25:d1:8b:
e5:12:4e:b4:99:47:0c:6d:4e:e1:26:fa:5a:ae:83:e4:a4:56:
9f:8f:fc:74:de:88:a9:8b:56:ed:8c:b4:c0:4e:94:1d:86:d4:
95:29:0a:9d:c9:71:22:d1:00:db:63:2a:06:1b:1e:bc:f5:8e:
3a:92:4d:a4:e1:08:89:48:35:4d:2d:27:22:c3:9c:f6:5a:ae:
6e:87:78:4f:90:16:c6:d7:6f:7a:a7:d3:fb:f9:f8:b1:7a:42:
7d:8d:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org