Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/67A5479AA4E311EBB37EE05AC4F9AE02.roa
File: 67A5479AA4E311EBB37EE05AC4F9AE02.roa (raw, json)
Hash identifier: cDfiOjg/Y+gp4g88wFso7gD2C+Qe3uuzxFuqKPJq7/8=
Subject key identifier: BA:CD:C9:BB:D6:5F:18:65:76:63:53:88:D4:BD:6D:0F:F4:9C:42:62
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 0324
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/67A5479AA4E311EBB37EE05AC4F9AE02.roa
Signing time: Thu 02 Dec 2021 12:20:24 +0000
ROA not before: Thu 02 Dec 2021 12:20:24 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 139088
IP address blocks: 103.157.248.0/24 maxlen: 24
103.157.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: Dec 2 12:20:24 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a8ba07-3b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:7b:dc:38:56:d3:ed:47:dd:e1:b2:ef:56:
f0:28:e0:09:69:80:0a:71:ed:a5:80:4a:a9:81:9f:
ca:f4:23:99:a0:76:dc:84:b0:62:fc:d4:38:f4:30:
27:cf:43:b1:20:ab:9d:74:28:0d:70:eb:ec:75:07:
44:56:fe:90:48:34:f2:83:99:88:38:de:e7:f3:1d:
e2:73:cc:5c:83:3b:00:dd:e5:09:a8:c0:5f:0e:28:
1e:dc:14:eb:6c:31:16:eb:06:e8:b9:2b:f9:17:8a:
9e:35:53:91:11:9f:9e:0c:c6:a0:61:80:92:c3:c2:
ec:a6:a6:e2:b4:44:ff:46:80:f9:75:f9:84:b3:1e:
a8:39:20:bd:3e:c8:ef:eb:53:14:96:e1:9d:d6:2e:
e3:e6:5e:d3:b8:93:2e:2e:63:49:51:01:c7:c9:81:
47:83:d7:04:15:eb:88:0d:b2:d1:b0:b0:53:cb:1a:
71:ab:df:94:85:e5:1b:92:66:9b:ef:2f:c6:ca:c1:
1b:8e:c1:c1:15:16:ed:d3:75:a3:7d:26:b9:54:cf:
c6:48:0a:84:af:2e:13:77:66:1b:2b:37:c2:1a:ef:
12:c8:6b:33:94:d5:c0:e1:43:65:81:c3:e6:cc:89:
b4:c9:78:96:7d:62:d5:1f:82:52:25:06:a9:19:6a:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:C9:BB:D6:5F:18:65:76:63:53:88:D4:BD:6D:0F:F4:9C:42:62
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/67A5479AA4E311EBB37EE05AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.248.0/23
Signature Algorithm: sha256WithRSAEncryption
82:7b:7d:89:6a:62:30:13:f5:9c:4d:b0:65:14:de:54:b9:20:
93:f0:18:95:e9:f4:81:03:56:e9:f6:32:ee:3a:de:54:63:23:
c4:95:e8:18:ad:77:8f:53:78:76:ba:de:4c:2c:74:81:7a:91:
f4:3d:3c:d8:f0:3a:38:fa:ea:a5:a4:16:ab:6f:41:93:6a:87:
6b:c2:f9:1d:28:c5:6c:a1:1d:a0:07:82:0d:05:de:dc:78:d5:
d6:05:81:9d:e5:02:34:65:56:dd:9b:e9:c9:c1:40:f7:0c:c8:
bb:cf:b5:c6:48:65:e8:73:f6:10:6c:f4:8c:d2:6a:1c:cf:63:
2e:dc:80:4b:1a:f1:67:3e:68:7b:da:7e:80:39:e0:c3:cf:c8:
e1:ac:7a:b8:6b:81:4b:b4:95:9f:a9:e9:a5:16:d6:16:db:11:
a9:46:ef:e4:1e:bf:ba:bb:60:3a:81:08:37:96:88:c7:5d:4d:
64:65:f0:c3:27:fa:25:f0:b4:cd:f9:34:86:30:74:e8:35:ec:
40:09:cb:f8:6c:ae:a3:06:49:3c:75:e7:14:f0:1e:73:49:bd:
73:a4:b3:93:99:a2:c5:7c:58:9f:df:e5:1c:e9:9b:0e:59:49:
b2:15:3e:a1:fb:2f:81:05:3c:91:c3:a4:b8:8f:c6:d5:98:2b:
eb:95:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-fra.rpki-client.org