Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AB819C48145011EC9AC2E70DC4F9AE02.roa
File: AB819C48145011EC9AC2E70DC4F9AE02.roa (raw, json)
Hash identifier: Io7KcoEkdsqvB+KiR7uX/2NRcL2eP4tF3d67Istt4Fc=
Subject key identifier: FF:8E:52:30:EF:9C:58:76:CA:5B:A1:64:61:2D:09:28:9F:13:24:05
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 0501
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AB819C48145011EC9AC2E70DC4F9AE02.roa
Signing time: Tue 02 Nov 2021 10:47:25 +0000
ROA not before: Tue 02 Nov 2021 10:47:25 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 134180
IP address blocks: 103.74.228.0/24 maxlen: 24
103.74.229.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
103.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Nov 2 10:47:25 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6181173c-d319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:04:db:e1:8c:7b:16:ed:64:87:3a:c9:dc:
cb:5a:aa:81:c9:00:59:ba:30:11:0b:f4:37:5b:89:
6b:e7:08:77:8f:be:22:80:6a:ee:82:57:b5:7a:ed:
84:22:7c:15:2b:2a:f6:5e:8e:0a:16:34:a7:2f:04:
fb:24:4d:1b:a2:b1:97:51:ef:d2:42:32:a0:7f:a6:
94:73:1d:39:c1:fe:0e:d0:d2:3d:39:56:02:5c:67:
28:f4:1c:84:da:67:e4:b9:26:bb:ef:24:79:95:11:
76:22:25:9e:3a:49:f3:dd:93:46:e4:2c:a9:21:74:
4f:86:f9:ec:68:87:07:7a:1e:db:e8:b3:b4:23:36:
e2:4c:c5:d7:7f:20:82:62:1b:65:db:c8:1e:11:b8:
f2:70:1a:ce:49:d5:ce:fb:b8:fd:12:8c:83:72:17:
d4:5d:ca:45:46:b7:3f:d6:e7:e5:38:d5:bc:0c:6a:
13:7a:3c:60:35:8d:92:00:dc:65:c2:4b:52:12:0b:
9d:77:14:29:34:d4:6b:e1:0b:02:25:17:93:94:82:
ae:99:bd:1f:16:99:d5:f4:71:16:8e:f3:6f:b0:d7:
e6:c4:6e:f5:a7:88:03:79:25:76:76:c1:02:e7:2c:
a4:4c:be:3c:69:55:e8:6f:b9:6c:c1:ab:8b:e5:7a:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:52:30:EF:9C:58:76:CA:5B:A1:64:61:2D:09:28:9F:13:24:05
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AB819C48145011EC9AC2E70DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/22
Signature Algorithm: sha256WithRSAEncryption
af:12:e6:88:31:1b:87:cc:0a:f2:f1:3d:00:8a:59:f8:90:9e:
22:fa:7b:64:a1:c2:e4:f4:05:6e:13:28:8f:9f:98:6f:f5:1e:
d3:f7:4f:63:0e:9f:03:33:62:8a:60:69:3e:63:0b:6b:d6:78:
43:20:4b:67:15:b2:e4:51:34:9c:e6:ff:99:67:0d:96:66:6f:
d4:b3:f9:8c:a2:94:61:76:68:14:65:4d:a2:b9:32:cb:cd:93:
57:60:92:27:f0:c5:fe:6c:28:95:24:bd:50:7b:5b:c1:0a:b0:
40:8a:18:9b:d4:8f:c8:b0:88:0d:2c:de:5e:22:f3:d1:43:27:
bb:f9:1d:57:fb:19:c5:28:c5:f3:a5:6b:8b:65:7f:7d:b5:79:
6f:7a:08:30:6c:b3:e3:86:ff:68:d7:32:b8:df:59:54:dd:dc:
d1:d7:9c:46:67:b7:75:7a:a0:a0:56:3b:d8:37:25:4b:a3:63:
34:c4:d4:fe:a1:46:10:c9:c7:4f:e8:cc:fd:3b:54:d9:f6:f3:
44:91:db:fa:b9:9f:8e:c8:05:40:d8:64:ce:5e:2d:2b:30:aa:
cd:0c:20:2a:4a:6a:19:79:3f:cf:1e:c4:46:45:15:73:6c:cc:
35:ec:47:14:5d:34:1b:55:9b:6c:85:b7:1f:69:1c:8b:be:b2:
96:2a:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org