Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/38101992ABEF11EC918C4E16C4F9AE02.roa
File: 38101992ABEF11EC918C4E16C4F9AE02.roa (raw, json)
Hash identifier: Ea6i1pKe/Bmu1nVQ458w/YIPni1Lf7UMIOcClAXtPGI=
Subject key identifier: 17:34:D4:A0:2A:73:20:63:08:7A:E6:3E:93:2E:AD:09:83:FC:3D:66
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 01C2
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/38101992ABEF11EC918C4E16C4F9AE02.roa
Signing time: Sat 07 Jan 2023 04:43:32 +0000
ROA not before: Sat 07 Jan 2023 04:43:32 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 54600
IP address blocks: 103.178.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Jan 7 04:43:32 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63b8f874-1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:02:be:48:eb:08:0a:c3:81:5d:1b:d3:2b:
1a:87:69:49:24:b8:81:7a:27:7d:ce:3c:3c:a6:b6:
0a:14:25:a8:f9:d3:fd:ae:5f:a1:47:71:5d:f0:16:
15:b7:5a:55:a1:71:b7:90:dc:b9:dc:54:33:a0:3b:
19:ff:94:11:4c:be:d1:4d:ab:f4:bf:c2:64:53:40:
00:69:ef:07:57:5e:07:d4:7e:a1:83:37:b0:3f:41:
26:9e:0a:96:ad:9f:fc:19:7c:fb:e4:33:a8:58:75:
13:7b:87:43:0e:e9:25:04:8c:b8:38:b9:f0:fc:a8:
c5:a0:dd:ba:c5:56:d9:5f:04:aa:2a:ef:ac:50:2c:
ef:3b:0a:4e:5b:ca:17:e2:d4:3e:b6:7f:86:a0:fc:
79:4d:0e:55:98:b6:eb:e6:e0:9f:6f:9e:b4:fa:00:
a6:52:06:b0:61:cf:fd:23:75:69:67:34:fb:80:7b:
3f:23:a2:9a:ae:32:f0:67:93:9f:34:60:b4:31:68:
f5:4d:83:ea:64:6d:03:9e:2c:2d:49:f0:2a:d9:b8:
ff:e5:0c:14:d0:7f:24:99:be:01:e1:bf:9e:73:eb:
b4:5b:61:b3:21:45:2d:d6:c2:7a:53:b9:50:9d:7b:
e3:ba:7f:fe:de:a0:48:56:6d:81:1f:a5:d0:61:d1:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:D4:A0:2A:73:20:63:08:7A:E6:3E:93:2E:AD:09:83:FC:3D:66
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/38101992ABEF11EC918C4E16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:aa:d1:b1:e3:8a:da:b5:3e:d9:6f:8c:d1:fc:4e:68:ec:67:
92:41:f4:8c:09:f7:13:8a:1f:78:f3:11:c4:2c:fa:98:7c:6b:
a0:f5:09:45:d2:4f:33:c3:5b:8f:ef:06:4e:4b:f6:9b:74:70:
83:1b:18:e4:69:82:6f:96:48:ba:f1:bd:2c:d3:59:c8:01:c4:
b7:26:18:ff:43:37:99:05:f3:0c:27:cd:08:3d:a7:31:ef:75:
77:82:63:a2:ed:79:0e:2f:f1:d9:ea:d9:de:c1:97:8b:18:ee:
61:8e:4f:6e:d7:80:63:34:0c:87:4b:bf:11:17:27:5d:62:24:
49:d3:c4:01:e6:56:ef:4a:2c:1b:24:d2:38:e3:eb:d5:e6:23:
90:33:77:bf:90:84:97:e9:9d:f0:e6:b5:33:31:1b:07:a6:f1:
af:88:a1:ef:e5:fd:80:7c:4f:12:e5:bc:45:cc:3b:f9:e8:b2:
97:5f:a3:c4:8c:91:54:63:05:af:cf:71:66:99:2a:da:e2:74:
3f:9c:98:c6:a7:ae:a9:32:03:df:e3:0f:3c:c8:5a:41:48:c1:
c7:90:72:ce:d5:07:3b:d1:ba:7a:f1:86:95:fe:63:27:8c:82:
3e:eb:2e:a1:90:c3:22:67:50:56:0d:3a:78:5f:b1:bd:ea:ac:
24:27:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org