Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/7516E0F27A8911EBADBE8982C4F9AE02.roa
File: 7516E0F27A8911EBADBE8982C4F9AE02.roa (raw, json)
Hash identifier: VKCq05+FXenh5sPEyHZYJOfhWhKLgQKVnQC+Vknbu9M=
Subject key identifier: DF:5B:04:13:E2:A8:AE:16:73:05:C3:BC:FE:4E:DD:93:C8:98:FE:64
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 0458
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/7516E0F27A8911EBADBE8982C4F9AE02.roa
Signing time: Mon 05 Sep 2022 13:20:38 +0000
ROA not before: Mon 05 Sep 2022 13:20:38 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 133441
IP address blocks: 103.101.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Sep 5 13:20:38 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6315f7a6-2136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:11:41:4c:4d:ed:cc:6d:67:a5:3e:74:c3:
c0:ca:5c:f6:30:7f:79:ef:d2:04:53:61:53:a7:79:
fb:42:70:09:24:71:b6:5a:10:ee:8d:62:91:e3:f8:
d1:1e:9a:e2:36:34:cb:95:84:1f:bf:f1:67:cf:22:
4a:d1:cb:ee:24:0d:8a:2a:75:64:b0:37:c6:bb:e5:
db:bd:fe:74:3c:10:eb:b3:b9:34:2f:b2:39:31:c9:
7d:e6:0f:b9:df:e1:14:4d:e1:07:1f:60:9b:9b:3d:
a1:0f:0b:c6:e2:5e:c7:6c:93:04:08:da:e6:6e:81:
28:d6:2a:f3:14:7f:93:3e:57:5e:7e:38:37:b2:e7:
c5:49:94:6a:68:24:f4:ad:ee:71:89:df:b5:d4:cc:
cb:f5:a3:f3:81:30:b7:f7:ba:aa:68:42:d0:3f:4a:
4b:ea:d5:03:64:c3:4f:2d:59:9f:0f:ef:74:ad:93:
25:c9:98:5d:11:ed:2f:50:39:36:d8:cb:a9:c8:32:
34:3a:97:ab:03:3c:63:5c:30:5d:b8:1b:d2:66:86:
19:b8:3d:03:39:78:e6:a0:df:46:81:6a:ac:67:39:
84:72:bf:13:37:6d:cb:96:33:07:8c:fd:4a:ea:73:
9f:cb:64:32:fe:d8:14:c3:11:27:b7:7e:fc:81:f2:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:04:13:E2:A8:AE:16:73:05:C3:BC:FE:4E:DD:93:C8:98:FE:64
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/7516E0F27A8911EBADBE8982C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2e:73:21:0e:a7:cc:dc:67:e8:37:e5:71:7c:ea:52:f0:61:
6a:93:71:1d:9b:50:09:13:67:26:4d:57:73:3d:58:84:38:f9:
ad:f8:25:a9:76:d6:62:3b:82:b6:b6:db:f9:2f:7d:fe:cd:46:
07:3c:6a:3c:3e:da:cc:ee:7d:ea:4f:e4:4e:70:af:7f:3f:7e:
23:aa:21:f5:7f:dc:80:e6:61:19:89:bd:6b:4f:bc:f6:64:3e:
b4:aa:8e:60:fc:b7:e0:5c:f6:e6:58:6c:c4:cf:ea:7e:49:4e:
fd:28:11:ef:f4:3a:b9:1c:b9:87:19:d4:bd:b7:1d:f7:84:4e:
b5:3a:13:21:ea:1f:11:78:55:19:ed:cc:5c:99:dd:02:d6:3d:
aa:ce:97:be:2b:a7:06:ce:bf:4c:3b:2b:a5:24:d6:68:00:bf:
20:5d:80:67:7d:33:99:63:86:9b:bc:13:bd:7b:35:e3:d4:cf:
ba:cc:b7:e2:5e:15:54:9a:85:f8:04:80:c1:d5:03:1c:f5:7c:
f3:bd:a5:f5:71:55:08:22:40:54:b3:50:8a:05:09:3c:5d:0c:
d6:07:9e:5d:83:51:4c:c7:2f:a6:20:60:2e:84:c7:fe:37:7d:
46:e0:b1:8e:5f:c8:83:00:29:39:65:8f:06:8b:4b:56:53:ee:
55:bf:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org