Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/6907CBA29CC711EDB24E0E0FC4F9AE02.roa
File: 6907CBA29CC711EDB24E0E0FC4F9AE02.roa (raw, json)
Hash identifier: aFFXtz9lLnbB7J/yKz1UOSw1/O/p+VX6uCZi8zGmpO4=
Subject key identifier: B8:92:C9:0E:E3:6B:FC:47:9F:50:39:4F:E9:E3:6E:C9:3B:5E:CA:03
Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial: 0B34
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/6907CBA29CC711EDB24E0E0FC4F9AE02.roa
Signing time: Sun 14 May 2023 20:10:31 +0000
ROA not before: Sun 14 May 2023 20:10:31 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 134599
IP address blocks: 103.137.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Validity
Not Before: May 14 20:10:31 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64614036-8d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:70:a6:91:96:eb:ef:76:27:80:55:62:d1:
63:43:7f:d9:1f:e8:75:40:b4:96:c2:8f:b5:be:be:
06:a6:7b:c5:a0:35:e4:0a:a0:6c:20:66:e9:98:3f:
dd:56:1a:1f:0e:81:1d:1a:2e:96:a0:eb:3e:ae:0e:
d6:e8:9f:8c:b3:de:be:cb:0a:d6:c2:77:a4:99:88:
49:1e:e7:b1:eb:c0:d8:62:d4:d6:ec:18:11:d4:07:
f1:99:1f:d4:b5:f4:85:01:1c:1e:1c:e6:41:5a:10:
08:02:43:4c:06:7e:bf:ff:19:33:cb:0a:2d:d0:e3:
3f:4c:7f:eb:5a:f7:8d:40:b8:75:87:fb:e4:86:b8:
f8:b5:15:35:1a:ee:e1:c1:01:c1:5d:d3:7f:4a:b7:
d4:7e:cb:f9:68:6c:b2:c2:f4:3e:37:1e:46:1d:f6:
f4:c0:93:52:a3:0b:a6:86:5b:41:64:a7:7b:11:dc:
0b:89:7e:93:fd:1e:7b:3c:7c:71:fe:cb:a5:0c:7b:
d9:64:80:2b:2b:d9:c4:4b:e1:43:cd:41:97:80:74:
2a:82:51:fc:6c:3e:fd:50:d8:8c:bf:32:82:07:7c:
fb:12:90:5d:b7:a0:bc:fa:a0:01:36:44:2e:56:fd:
81:ae:55:0d:83:d7:0d:7d:54:8d:89:30:2b:88:b8:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:92:C9:0E:E3:6B:FC:47:9F:50:39:4F:E9:E3:6E:C9:3B:5E:CA:03
X509v3 Authority Key Identifier:
keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/6907CBA29CC711EDB24E0E0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f5:62:04:b7:82:1f:9c:e9:5e:f3:0d:0e:22:f6:74:e4:a1:
b5:f4:01:f6:c5:ea:58:a9:7f:84:64:2d:04:6d:ca:24:07:13:
51:4e:e8:1f:e9:53:26:38:83:7a:1d:a1:01:5f:a1:39:b7:04:
05:81:cd:26:47:e2:14:5b:9b:95:df:7d:13:64:99:de:c0:33:
ec:b5:6f:24:2c:ef:0d:dd:83:fa:70:ff:e7:80:fe:f9:16:42:
e9:35:de:95:d9:39:97:fb:56:19:0d:ff:54:22:48:c9:2a:45:
c3:d5:00:b3:d5:d2:69:51:5c:5e:4f:fa:20:ac:a6:fc:f6:85:
0b:9e:c4:c3:8b:cd:8b:6f:de:ca:60:5c:ee:27:23:f9:c1:fd:
01:df:3b:48:78:1c:dd:a8:2a:69:e7:0c:ab:d1:ef:74:5a:c0:
72:01:a4:4d:24:40:8a:5f:eb:6b:01:e2:19:65:64:99:92:5f:
6b:c8:19:1a:b3:62:56:b5:bb:ea:1c:e6:02:5a:19:b6:09:c6:
66:ac:0c:12:46:39:cf:b8:3a:fd:8a:46:5f:6b:28:d0:04:93:
d2:7a:cd:9b:02:d3:61:e4:7a:2c:46:02:d7:6e:d1:27:8c:74:
ea:b2:63:c7:a9:c4:9f:96:e9:c3:63:a1:99:ca:b8:59:b9:bc:
61:91:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org