Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/6350AC12615C11ECAC75D44DC4F9AE02.roa
File: 6350AC12615C11ECAC75D44DC4F9AE02.roa (raw, json)
Hash identifier: wjW1ciNTwYi21VLaaYdqY9JR9vjFgFB9WRcu5ORQIpw=
Subject key identifier: 97:05:EA:57:D7:40:50:DE:4C:EC:1E:50:36:E4:1E:86:3E:08:2B:52
Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial: 080E
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/6350AC12615C11ECAC75D44DC4F9AE02.roa
Signing time: Mon 20 Dec 2021 06:16:38 +0000
ROA not before: Mon 20 Dec 2021 06:16:38 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 141411
IP address blocks: 103.138.202.0/23 maxlen: 23
103.138.202.0/24 maxlen: 24
103.138.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Validity
Not Before: Dec 20 06:16:38 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61c01fc5-fa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:5c:23:3f:4d:57:70:38:30:c0:6f:d8:4f:
35:e7:3d:38:88:4f:46:2d:ff:74:69:1f:72:6f:3e:
da:52:8f:ee:e8:82:cf:1e:8a:01:34:6d:ab:b1:b8:
9d:71:17:a2:93:76:cb:99:9a:1c:0b:a6:6c:9c:aa:
5a:32:8a:a2:5b:54:3c:79:6c:bf:f9:42:b7:9a:aa:
2d:02:58:a9:35:b0:4f:94:76:c6:78:ea:9b:2c:75:
c3:7d:06:75:69:90:26:c2:b9:1c:a9:63:57:5a:51:
41:69:44:53:01:50:cb:67:18:bf:c5:a8:62:f9:39:
a5:a5:5e:01:e0:95:11:43:d0:c1:06:c9:d5:57:21:
9a:ef:c8:90:b2:af:bd:c7:ca:49:c2:e7:c3:ab:2d:
39:2f:5f:bf:88:65:2d:3b:1b:9f:b4:ac:45:2d:77:
ae:45:dc:09:e0:ce:94:49:ca:d1:32:4a:8d:2b:99:
40:da:51:ea:87:5a:ab:d0:96:b2:80:3e:a5:48:01:
f6:03:44:67:d9:63:75:d5:84:97:c7:a9:52:25:ad:
18:8d:42:a8:b7:6c:af:7e:d7:2d:1e:fa:1a:ac:95:
ee:8b:06:68:10:1b:ff:dc:46:46:a1:ba:27:1f:52:
f4:f4:ec:96:8e:94:92:68:fc:37:d1:cb:fe:c8:2e:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:EA:57:D7:40:50:DE:4C:EC:1E:50:36:E4:1E:86:3E:08:2B:52
X509v3 Authority Key Identifier:
keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/6350AC12615C11ECAC75D44DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.202.0/23
Signature Algorithm: sha256WithRSAEncryption
40:24:38:1c:fc:9c:51:67:a1:b8:04:63:e5:0e:02:83:ed:ad:
d4:6c:f7:1a:f5:42:d0:84:98:4c:c0:4f:16:ce:d4:4a:fd:17:
2b:4b:d3:e1:f8:6d:b3:61:bc:3c:0a:98:d6:6b:a1:38:ef:b1:
67:5c:ce:51:e4:5b:d2:82:a8:1a:c0:01:aa:62:12:0e:ec:01:
35:0f:ce:b4:59:e6:0d:4c:fc:9f:30:dc:f1:ae:a7:bb:ba:75:
82:e6:bf:f4:a5:c3:f6:db:a7:1a:91:4c:8d:aa:8d:a3:da:e2:
6e:88:34:b9:e4:b8:65:e9:12:01:1c:79:76:a1:e5:74:e0:ef:
9a:55:85:f5:15:34:d7:c0:3c:9d:40:9e:bc:e5:e4:ca:72:44:
63:ff:fd:7c:ae:5c:6c:b2:e8:42:5d:72:3d:33:f9:ba:d8:ed:
be:00:e4:ee:79:01:5b:4e:8e:37:b9:77:66:2f:42:5d:a3:82:
71:dd:1b:cb:75:38:84:7a:2b:0c:0e:39:ff:67:40:62:19:52:
a8:d6:fd:ce:75:6b:be:73:47:33:2c:48:90:b3:1d:c1:58:fa:
d1:20:31:4d:c9:76:66:5a:82:9e:2c:70:24:86:28:97:ba:ca:
fb:9e:e4:5a:39:ec:94:8a:39:08:d9:de:93:31:a9:e3:ba:7c:
af:44:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org