Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
File: 9EACAD0C765811EEA11F2721C4F9AE02.roa (raw, json)
Hash identifier: Elsf39TDuorYly4uf2aQV0IaCwOHefTHOfhngFnEpHE=
Subject key identifier: 52:D2:E6:41:77:70:77:A4:7B:75:F6:2E:51:B5:23:36:22:26:03:E4
Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Certificate serial: 0AD0
Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
Signing time: Sun 29 Oct 2023 12:42:29 +0000
ROA not before: Sun 29 Oct 2023 12:42:29 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 213371
IP address blocks: 103.145.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Validity
Not Before: Oct 29 12:42:29 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=653e5334-9a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:20:34:f6:9d:6e:2b:81:a3:fe:ac:c2:cc:
4d:43:3f:c7:c4:2d:c5:f7:51:2e:65:e5:47:94:1c:
f7:50:e9:48:2f:9e:b1:53:5e:4c:cf:11:7a:df:b8:
d1:bb:18:fc:05:bf:41:06:3a:51:f8:7a:7d:6a:f9:
df:ed:53:bf:76:13:ac:eb:75:6e:69:39:c0:0f:56:
91:ae:ca:e6:b3:18:4e:4e:6c:e6:af:1e:06:7d:f0:
75:47:33:c6:57:bd:02:f1:61:07:55:34:7e:3e:80:
cf:7a:32:2e:af:5f:1a:73:b0:bd:54:2f:42:1f:6b:
88:5d:b9:2c:ac:20:d6:b5:3d:92:82:68:13:df:90:
63:34:84:63:46:3b:d1:77:4e:e5:67:e9:ca:38:b8:
78:c7:55:50:1c:68:90:c0:73:d6:2a:1f:ea:c4:f2:
38:dc:49:47:0b:f0:c5:c7:0c:9b:ef:de:3e:aa:7b:
f1:86:ec:c2:b4:fa:97:b1:eb:67:89:ff:5b:37:fc:
6a:b0:73:9b:22:a4:79:8e:bc:a3:8d:d0:db:8d:5c:
bf:f2:dd:f9:2e:fc:9a:04:cc:37:8a:9f:36:57:71:
9d:c4:97:38:01:fd:6b:f1:1b:98:e7:c6:b5:1a:95:
a9:e8:79:4b:6d:7a:0e:8e:e9:e4:00:87:3a:5a:8a:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:E6:41:77:70:77:A4:7B:75:F6:2E:51:B5:23:36:22:26:03:E4
X509v3 Authority Key Identifier:
keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8e:0c:2d:d9:3c:e5:3a:19:fc:09:85:01:ce:b7:ed:9f:9b:
d7:0e:f3:48:f9:74:70:17:09:d9:f2:7d:10:91:a9:c1:a0:f0:
f7:bf:37:b1:0e:28:72:8b:a6:7c:0a:8f:40:1e:a0:36:a9:a7:
53:85:e7:0a:f5:d6:cf:69:70:a8:2d:23:76:2c:89:12:64:ac:
29:09:b7:26:ef:cf:13:69:f9:aa:8f:3b:0f:1a:49:cc:86:f7:
1e:14:a8:ba:fc:05:65:53:fb:4f:8c:5d:a1:4d:82:c4:2b:a3:
c7:f0:bf:f7:9d:45:77:5a:43:bc:cf:bc:57:64:92:15:3b:38:
cf:05:1b:ab:aa:a6:d9:2f:c9:f2:96:c4:89:4d:16:89:4d:73:
e4:cf:87:a4:60:19:9d:27:dc:4c:02:dc:69:cb:7b:7e:18:38:
87:36:72:18:05:44:17:13:a8:1a:eb:0b:c6:ba:5d:6a:73:29:
a7:e0:03:82:9f:92:7e:5a:23:3c:04:71:94:4e:2b:82:05:68:
c0:f5:c0:47:aa:12:36:18:c3:ba:13:2e:cd:a8:42:0a:2d:a1:
7a:53:cd:11:ec:ae:e8:5e:93:f9:a9:34:4c:90:50:0c:f3:46:
27:8d:30:b9:c6:3e:c9:6f:9d:9a:35:e8:4c:ac:66:ad:dd:d2:
ad:02:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org