Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/67988848997F11ECA6C7F481C4F9AE02.roa
File: 67988848997F11ECA6C7F481C4F9AE02.roa (raw, json)
Hash identifier: sL0EZAP82BxfpevlAVsIWYnVKngYIw0MrbZ1Heu+QB0=
Subject key identifier: 2F:9F:83:C1:DB:E9:D1:60:E8:54:FA:12:7C:E0:59:40:40:8B:B1:1F
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 05F3
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/67988848997F11ECA6C7F481C4F9AE02.roa
Signing time: Tue 01 Mar 2022 16:48:22 +0000
ROA not before: Tue 01 Mar 2022 16:48:22 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 134180
IP address blocks: 103.74.228.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
103.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523 (0x5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Mar 1 16:48:22 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=621e4e56-c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:e6:e7:d5:33:d9:ff:83:93:a9:31:1c:dc:
50:ba:d1:38:61:f2:bc:b7:66:b7:c1:e6:e9:79:c9:
da:15:c8:f2:7d:62:58:56:68:40:bb:ff:19:5e:8e:
f6:a8:42:91:54:12:7b:9f:fe:df:eb:76:5d:67:e1:
ea:84:d9:b3:4b:26:d7:c4:04:75:af:04:ab:08:ca:
26:f9:88:68:d9:cc:12:57:c4:eb:e2:28:b8:d4:c0:
0e:e3:db:42:58:35:e4:d9:b9:ee:95:4b:da:b8:7a:
dd:96:e0:e0:7a:2d:a9:ec:cc:c5:fd:9d:01:df:fc:
9c:fb:7a:59:0d:92:48:f1:60:18:6e:4e:fe:92:c6:
b8:3f:df:7e:9a:6d:b7:4d:9c:2a:04:7b:94:7e:23:
e8:9f:ae:0e:f7:c8:5f:d6:9a:88:32:c5:6f:d2:a0:
63:a4:c3:c6:99:d7:6c:7f:fd:31:47:ac:e4:ff:e6:
57:b3:22:c5:c1:5f:6c:15:d1:d0:a5:c9:9e:0c:a4:
e9:dc:76:19:95:40:f9:dc:8f:1f:bd:08:33:3a:cf:
44:78:4e:9f:a8:bd:f3:d5:68:08:43:f0:d7:46:e2:
28:16:2d:33:e6:6b:12:52:c2:56:fe:5e:78:86:e3:
85:19:b3:75:78:17:b1:be:72:7b:7c:45:74:3b:49:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:83:C1:DB:E9:D1:60:E8:54:FA:12:7C:E0:59:40:40:8B:B1:1F
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/67988848997F11ECA6C7F481C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/24
103.74.230.0/23
Signature Algorithm: sha256WithRSAEncryption
15:40:04:54:39:d0:7f:c6:1c:9a:75:dc:5b:45:b5:05:f0:c9:
5a:54:f2:e0:50:78:d0:cd:b8:6d:d0:d5:79:c4:09:78:4d:8f:
6a:13:fc:4f:d5:53:51:8b:de:27:d0:b5:73:f6:6f:a4:85:28:
64:82:dc:4f:17:5f:34:c9:2d:53:88:9f:7b:3e:b5:cf:1a:5c:
b0:47:70:81:99:c9:ed:12:f5:a8:75:20:97:3f:18:6e:17:18:
43:54:d5:56:e1:87:3c:3f:05:8b:4f:05:ab:20:43:d2:23:b4:
c7:88:46:9d:37:52:21:2d:f5:34:3a:a1:fb:cd:78:19:77:c8:
54:90:cc:b5:36:9c:4f:fc:ea:07:e5:5d:8e:6e:6d:0c:0f:86:
0f:33:b1:d6:42:19:f0:79:b3:60:58:1b:9f:36:34:96:58:93:
bd:06:11:c3:34:59:de:5d:be:c8:cd:38:1f:5f:2f:a3:d4:fb:
67:76:7f:d4:56:da:02:e1:7f:36:b1:bb:ab:7d:6c:81:d3:31:
2b:21:fb:7c:79:c1:98:82:78:c0:89:af:b1:1f:cb:16:2e:6a:
38:b0:e7:02:9e:db:11:8e:ae:01:f4:c8:d5:b9:ed:7e:29:71:
a0:84:e3:e1:5e:fa:b8:98:83:56:bf:3e:a4:17:bf:02:d1:74:
c2:be:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org