Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D0C0BE64CEDE11EC9281BA0CC4F9AE02.roa
File: D0C0BE64CEDE11EC9281BA0CC4F9AE02.roa (raw, json)
Hash identifier: BHuPMYx2Td0fvUxmWuMzfNRXVIz2b9oxWhYCGsNQ7Do=
Subject key identifier: AE:B9:5F:45:BE:68:0F:97:6E:31:17:42:9A:DF:69:9B:56:BA:33:0C
Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial: 9E
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D0C0BE64CEDE11EC9281BA0CC4F9AE02.roa
Signing time: Sun 08 May 2022 14:54:52 +0000
ROA not before: Sun 08 May 2022 14:54:52 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 58460
IP address blocks: 103.127.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Validity
Not Before: May 8 14:54:52 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6277d9bc-3d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:55:cd:36:10:2f:69:66:6f:64:1d:b7:40:
a8:57:32:7d:4b:a9:53:83:62:1b:25:2b:f3:49:7e:
b9:4c:dd:6c:de:7a:c3:65:09:b0:7a:b9:a5:64:f6:
23:88:b1:72:f0:98:f8:de:03:b5:01:24:85:04:53:
2a:ca:fd:9b:6d:b7:0f:25:4d:6a:02:57:8d:06:2e:
cc:d9:0f:ac:c9:b5:dc:19:52:70:25:f7:a5:c2:3e:
97:f3:99:7b:12:45:88:6a:a1:c4:3a:11:58:26:82:
81:53:86:b9:73:07:3f:1f:47:e6:34:bf:fc:66:81:
8a:c6:30:df:39:f3:28:e8:ab:b6:b0:7b:d6:e8:7b:
9a:70:c2:5b:8c:b0:04:c1:1a:09:04:9f:7e:c3:20:
df:11:ab:16:db:fd:37:64:28:a7:43:a7:d1:8b:5a:
45:bc:fb:10:12:84:05:ab:64:42:a0:b2:18:08:89:
02:f6:5a:16:6e:70:c4:bf:0d:86:21:ba:98:cb:94:
f8:e2:89:d6:a7:cf:59:92:00:6c:87:c2:f3:87:c9:
fe:48:f6:fe:9e:91:0b:cb:c4:64:2d:cf:9e:0c:57:
eb:75:f8:1b:d1:13:06:69:be:f2:2b:84:08:8c:bc:
5b:0c:da:3a:16:52:74:7d:24:41:50:c5:26:20:4e:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:5F:45:BE:68:0F:97:6E:31:17:42:9A:DF:69:9B:56:BA:33:0C
X509v3 Authority Key Identifier:
keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/D0C0BE64CEDE11EC9281BA0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7c:7f:31:0e:ca:5a:67:23:6d:1c:41:dd:bf:6e:71:33:34:
b9:91:d7:5f:16:62:53:ed:1b:0c:9a:4f:53:47:08:0c:fa:8e:
65:d1:60:37:78:15:b5:87:9e:8a:bc:02:3e:58:33:e0:84:4d:
0a:fc:c3:60:1c:42:1d:e1:7d:82:9f:a4:b5:c1:6b:f0:67:7c:
12:be:94:1b:c0:ee:49:62:13:8d:84:95:2a:12:fd:c4:20:33:
d8:62:9c:e4:0a:ff:d2:62:1f:c8:e8:ee:61:1b:a2:8d:2e:a8:
26:5b:ab:c0:bc:29:95:cd:8c:b3:c7:51:6b:3d:6d:37:c6:32:
c3:94:de:cf:3e:10:f8:7d:aa:e2:21:1d:09:9a:62:f8:00:f5:
63:84:48:12:78:1b:31:47:3f:86:9f:61:66:05:05:4c:b6:f0:
ed:9c:4e:39:09:0f:24:f1:3d:53:43:e3:eb:50:af:24:9b:a3:
48:bf:47:bd:45:fa:88:b2:96:70:4f:ea:18:c5:db:94:e5:15:
f3:3c:4c:ed:8a:b3:75:17:d7:50:52:fb:73:62:01:6d:55:98:
3f:94:0a:e0:a4:33:45:e4:6a:0f:db:01:ea:03:1e:d8:b2:d8:
f3:d5:8f:d1:f3:78:88:0f:6a:35:58:a6:58:87:69:40:ea:c8:
b5:33:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org