Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/363384DA45AE11ECB857890EC4F9AE02.roa
File: 363384DA45AE11ECB857890EC4F9AE02.roa (raw, json)
Hash identifier: 3VhYzBA6oJRoS7KrGIwgBS8kbGZLuZpA8hHDlBV+YYU=
Subject key identifier: DD:01:97:03:28:AE:3B:FA:55:26:28:51:2E:C8:15:85:3D:17:46:00
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 05
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/363384DA45AE11ECB857890EC4F9AE02.roa
Signing time: Mon 15 Nov 2021 00:51:48 +0000
ROA not before: Mon 15 Nov 2021 00:51:48 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 7606
IP address blocks: 103.73.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Nov 15 00:51:48 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6191af24-9765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:30:31:44:89:2e:27:24:c9:e2:3b:9b:d8:
89:d8:12:45:e3:bc:60:91:32:c8:e9:61:02:1c:0b:
dd:30:02:e0:ed:b5:9b:21:36:2a:85:f7:5d:00:db:
e9:1e:da:ea:70:3f:8d:ad:12:71:ba:fc:f5:19:0f:
1d:a4:9e:24:00:63:a0:b5:0b:e3:2c:a5:d4:5f:1b:
e0:b6:c2:7a:31:84:06:bf:f7:2d:c4:97:85:7f:8c:
35:ae:eb:46:c1:b5:c8:ea:22:89:49:a3:04:32:c6:
ff:da:b0:dd:b7:42:22:55:64:b8:1b:ba:5e:6e:77:
6d:ca:10:04:32:d5:0b:17:09:e0:e8:a3:19:44:3b:
77:de:5d:06:e3:e5:4d:a1:88:5e:b9:3f:30:44:c3:
5b:d3:f8:a7:1e:ec:71:9f:56:01:46:1b:51:a4:5a:
02:50:4d:61:85:09:ec:01:08:46:1f:50:6e:4a:c1:
35:db:f9:20:b2:aa:f4:a2:b1:7b:c3:d3:3a:a1:0a:
dd:52:00:7a:dc:57:96:eb:4b:12:49:4f:14:08:18:
a0:55:80:84:70:b8:09:36:26:84:d6:c7:88:21:e2:
9b:de:b9:03:ea:4d:f2:13:75:0b:6b:92:43:a6:da:
4a:29:dc:ec:91:6c:ab:54:c0:82:9c:ed:2c:e6:db:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:97:03:28:AE:3B:FA:55:26:28:51:2E:C8:15:85:3D:17:46:00
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/363384DA45AE11ECB857890EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:9c:ef:35:70:a9:30:4b:4f:13:0b:8f:8b:0e:13:3a:c9:67:
e9:07:84:6f:ef:f5:ce:b0:b0:05:61:78:5f:87:c5:87:e0:52:
91:2a:81:db:8a:de:1d:90:7b:9c:2b:00:1b:9a:2c:cf:7a:4c:
1b:0a:22:47:e2:f4:63:e9:34:f8:1d:26:c9:aa:a5:4b:6b:91:
49:13:65:4d:8f:f5:df:94:9c:5d:60:56:95:c4:23:2f:5c:17:
3a:1b:34:bb:cf:ce:1f:07:c2:b1:54:78:ee:c4:a7:b7:98:d1:
20:ad:7a:73:f1:df:1f:b6:f5:0f:26:e4:46:d2:b5:4d:c1:66:
6c:1c:d5:89:0b:cc:fe:a0:44:c0:a4:4d:c1:e0:fa:cb:87:cb:
10:33:9e:b3:58:0a:d5:b7:6d:3d:9e:cc:ae:36:c6:d8:cc:0f:
12:aa:76:0b:70:53:e7:ef:72:5d:83:22:0c:2b:6d:be:d4:e8:
72:d3:b3:b3:6b:50:e9:a2:8d:69:9e:df:35:8e:c0:d3:e5:d1:
c1:14:c6:d7:2a:95:34:2b:da:97:00:ce:58:3f:dd:57:9d:ae:
39:67:d7:52:b2:ae:d9:77:60:a9:fe:b2:bd:9e:3b:ac:88:24:
5a:d7:c9:51:40:12:b7:80:80:13:d9:9f:b3:13:73:36:c5:5d:
6c:5c:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-fra.rpki-client.org