Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/1B7EEC0E666711EC8369B748C4F9AE02.roa
File: 1B7EEC0E666711EC8369B748C4F9AE02.roa (raw, json)
Hash identifier: WUwBfXyMKWKP/Jv0h97CPzFXDq3kxcT4PnYtS1+nyzw=
Subject key identifier: B2:04:68:5B:74:44:00:3E:88:1E:80:34:A0:AF:78:53:E0:28:A8:35
Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial: 0973
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/1B7EEC0E666711EC8369B748C4F9AE02.roa
Signing time: Mon 25 Apr 2022 20:06:24 +0000
ROA not before: Mon 25 Apr 2022 20:06:24 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 134599
IP address blocks: 103.137.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Validity
Not Before: Apr 25 20:06:24 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6266ff40-a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:18:6f:99:a2:24:d3:42:7e:d8:6c:75:d4:
7c:9a:05:2d:d5:d9:fc:35:01:00:dc:50:20:1e:dc:
03:ac:18:6d:76:47:64:65:8f:c2:48:fb:d5:4a:9c:
57:1c:92:2d:90:1e:e7:c9:27:27:12:1b:d1:69:d0:
8c:16:db:2b:26:65:82:f5:d5:d8:08:2d:f7:90:11:
44:cd:91:b3:27:2d:37:e1:a8:57:f1:72:8c:5c:cf:
43:fb:01:dc:30:d8:57:3b:8e:1d:f6:14:04:1d:c5:
4c:26:b9:d4:5e:22:98:a1:1f:f7:06:f5:10:3c:bf:
e7:78:d8:0a:be:89:86:fd:34:91:0f:b8:d0:20:e9:
e6:49:aa:39:75:88:46:2a:e1:f8:6a:30:e8:e3:81:
2f:11:d0:7e:76:f4:3f:52:a8:05:12:52:8d:72:e7:
3d:c9:03:ec:52:03:ed:57:37:f1:23:32:0d:23:77:
84:ad:c4:0a:30:30:c2:73:98:85:01:4a:70:b3:d6:
69:d0:9f:bb:47:b9:52:65:e7:d7:8e:9c:f8:fa:27:
c9:2d:1e:0a:49:c1:9a:7c:a0:76:c1:4f:72:c0:6c:
9b:5e:ed:a9:2a:de:04:b1:27:94:c5:9e:62:e0:5a:
c9:65:e5:2b:23:e6:30:74:70:2a:54:03:39:8c:0e:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:68:5B:74:44:00:3E:88:1E:80:34:A0:AF:78:53:E0:28:A8:35
X509v3 Authority Key Identifier:
keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/1B7EEC0E666711EC8369B748C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.73.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2e:ce:25:38:07:be:40:01:7c:88:a1:51:d0:1d:d0:e5:54:
4f:92:b6:69:72:fd:01:a4:e9:bd:19:7e:41:f6:d9:00:da:dc:
27:25:e0:af:fe:a6:e7:e6:14:fe:c0:dc:5b:e6:80:9e:ee:dc:
6f:93:7e:8e:11:ca:2e:4a:d6:0d:b0:0d:0a:8d:9f:87:d0:c9:
5c:ca:f5:32:bd:e8:6b:59:73:76:6f:99:25:a3:87:e1:8f:91:
fb:67:c4:ac:62:1d:1a:b8:43:e9:46:d1:3d:26:36:30:63:b2:
1c:59:76:54:7e:fb:23:a9:16:fa:d9:c7:f2:c3:cc:d5:d3:fd:
c4:f1:94:fd:13:a8:b6:fc:34:17:91:25:fc:de:f8:4b:12:3b:
6e:47:ce:02:9d:dc:42:3f:0e:95:e2:b7:87:5b:a0:2b:17:a4:
32:4e:3c:75:c3:05:53:20:6b:7f:e8:9d:c9:dd:00:ee:4e:3b:
fe:9b:4b:45:bf:3d:fd:3f:3c:fb:a7:69:e5:20:3c:20:a3:69:
cf:a8:c3:5d:6c:d3:4a:50:c1:f2:90:ea:c5:0d:e3:25:b7:d8:
d2:89:1c:2c:32:37:9e:82:a3:c3:9c:d2:89:cd:5d:87:66:1a:
c9:79:38:bd:67:db:23:8a:b7:a1:7e:4d:b5:6c:27:7e:3f:ed:
c5:cf:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org