Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/AC2F786EAD2911ECAF6A1F7AC4F9AE02.roa
File: AC2F786EAD2911ECAF6A1F7AC4F9AE02.roa (raw, json)
Hash identifier: ym6lsq9M0KEEDTWyVOeuo/xOppd/jHzoGEqigRwqOZw=
Subject key identifier: 51:6E:C1:F4:25:0E:8C:B7:48:06:BD:8A:CD:69:CA:64:5A:DB:70:DA
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 0563
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/AC2F786EAD2911ECAF6A1F7AC4F9AE02.roa
Signing time: Thu 28 Apr 2022 18:45:19 +0000
ROA not before: Thu 28 Apr 2022 18:45:19 +0000
ROA not after: Sun 28 Aug 2022 00:00:00 +0000
asID: 149311
IP address blocks: 103.134.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Apr 28 18:45:19 2022 GMT
Not After : Aug 28 00:00:00 2022 GMT
Subject: CN=626ae0be-73ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:bb:f0:df:39:7f:32:15:56:88:26:85:f9:
1f:d6:09:8b:51:7a:66:bf:a0:df:a7:fc:40:08:a6:
56:d1:fa:1d:bc:42:00:71:fe:8f:3b:ba:a9:d8:cf:
46:20:dd:a0:ac:ae:62:e6:bc:13:a1:0c:bf:94:94:
e7:23:e8:73:f8:f0:de:b0:f3:79:9e:e8:ab:29:e5:
c7:c6:b7:5c:ac:e0:eb:1a:f1:43:e1:ce:6e:ef:21:
86:69:c0:c3:a1:73:e0:d4:de:fb:cc:76:5e:34:ce:
bf:7b:c9:00:66:cd:df:b7:dc:5e:49:ec:65:1c:bf:
93:8e:02:95:c0:a3:d9:ea:32:f9:e2:b2:bb:2f:cc:
f4:b8:0b:40:b7:cb:6d:aa:a2:8d:31:41:04:a4:b5:
56:89:50:89:42:4a:a0:21:41:8d:85:2c:e8:f9:3d:
34:e3:43:35:73:56:86:74:67:2c:58:eb:2f:e5:ea:
c8:95:54:c2:ff:1d:52:a0:5e:54:05:a0:f6:0b:b9:
ba:3d:94:8b:fa:08:e2:09:6a:0e:ce:4a:0f:19:35:
09:0e:d4:58:fd:1d:6f:00:5f:70:d1:79:3f:18:02:
6d:7e:d4:e1:7b:98:4a:90:14:0e:04:4a:e8:cd:a1:
15:1e:09:7b:f1:52:7a:70:3a:56:de:eb:a8:59:08:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:C1:F4:25:0E:8C:B7:48:06:BD:8A:CD:69:CA:64:5A:DB:70:DA
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/AC2F786EAD2911ECAF6A1F7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6b:45:72:f5:9f:b0:1c:cc:34:82:2c:c0:09:0a:c2:69:a4:
37:84:f4:ae:eb:62:40:0c:7c:87:50:c4:9a:90:85:66:a6:93:
eb:0b:6c:71:27:bf:5f:92:36:9b:1c:55:a9:6b:d6:8e:43:4d:
02:24:dd:56:4e:78:a8:ce:43:d9:c4:43:c8:af:dc:de:ad:25:
d4:3e:0f:07:3c:ca:a6:2b:df:5a:6b:53:5c:b6:75:72:3f:39:
a9:73:81:9e:7f:b9:82:85:b3:41:c1:88:a3:cf:ef:14:c8:65:
a1:90:11:62:ca:66:19:f8:cd:81:fd:c4:50:38:4c:90:d7:64:
2f:34:3f:21:56:0b:1d:16:63:ad:12:25:ed:ae:4d:20:ed:50:
2c:96:8f:d6:f8:59:01:fc:e3:5f:b0:ed:35:9c:82:6e:60:d5:
f5:7b:1e:39:5e:5d:44:c8:15:db:b5:32:fe:0d:18:1d:64:6d:
8f:0b:80:4f:d1:d2:4c:db:08:db:27:ec:7a:f0:97:67:c6:0e:
14:a8:b5:0e:06:41:75:36:03:94:c8:f0:17:81:9d:2f:b5:33:
94:8d:c0:70:a1:22:62:30:d8:20:c1:2f:88:6e:b2:72:57:ac:
7c:73:f4:a3:3f:fd:95:00:da:69:87:05:83:2d:19:2d:d7:9e:
74:74:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org