Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4868A00CB54F11ECA2000561C4F9AE02.roa
File: 4868A00CB54F11ECA2000561C4F9AE02.roa (raw, json)
Hash identifier: PUXTf7SaNeHwhTZQWvoDC2Am/aNc3lfCLQ6eJble0Gs=
Subject key identifier: 49:4A:CD:5F:69:3C:CD:74:4F:91:FF:9A:8D:2A:4B:B2:2B:C6:8C:A5
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 24
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4868A00CB54F11ECA2000561C4F9AE02.roa
Signing time: Wed 06 Apr 2022 02:14:27 +0000
ROA not before: Wed 06 Apr 2022 02:14:27 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 64021
IP address blocks: 103.178.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Apr 6 02:14:27 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=624cf782-2524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:0a:5f:9d:b4:27:46:f0:71:1e:ea:d6:63:
b3:5d:c4:a2:68:b1:21:7c:f9:55:ae:18:fd:25:c6:
83:12:4c:d3:d6:a4:1b:38:36:74:ea:95:da:3d:73:
c4:5b:56:e4:e3:ee:6e:bd:7d:0f:b9:80:83:e8:bf:
26:e4:8e:be:1d:1e:eb:ea:c2:6a:57:61:59:fa:ac:
0c:89:d9:ac:c6:11:cb:cb:db:7c:63:5b:20:37:20:
35:e6:ed:fe:d2:68:9c:2e:d5:73:dd:d2:e3:e1:3e:
42:2d:06:21:a6:fd:83:b7:8b:f2:98:23:b4:45:f2:
7b:a1:b6:80:35:bc:e2:47:26:7e:63:1d:50:d7:09:
00:4d:c7:60:c1:ba:c4:40:f2:7d:8f:a9:7c:5a:90:
e1:f5:1d:e5:54:46:6f:fc:7a:bf:9b:b4:be:c6:30:
6b:d4:6e:19:07:b7:df:1a:47:c0:db:f3:d1:ff:db:
e5:2e:e0:25:7f:7e:d3:52:b0:42:a5:c5:9d:83:7d:
17:29:a2:7e:c7:ed:0e:cf:b7:87:df:31:62:51:72:
b8:c1:a5:00:6d:b6:4a:d4:71:57:36:01:0a:81:d6:
cd:bb:62:3d:dd:d9:79:b7:0f:23:f4:4e:0e:72:3e:
8a:f2:77:16:39:fe:7f:de:bf:01:3f:7f:6b:30:e0:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:CD:5F:69:3C:CD:74:4F:91:FF:9A:8D:2A:4B:B2:2B:C6:8C:A5
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4868A00CB54F11ECA2000561C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.56.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cd:6d:72:2a:f9:1e:ad:ba:e8:e2:95:76:1f:e6:5a:5e:48:
21:9b:f7:4b:3c:16:72:c1:7b:c8:c6:40:15:09:12:28:97:26:
47:7e:e2:d0:57:1a:1f:12:1d:be:38:b8:6a:23:b0:66:7b:43:
f4:b6:f0:43:24:3e:42:7c:c9:a2:9d:2d:0f:1b:cb:dd:df:9a:
14:54:2c:24:34:eb:da:e5:54:7b:b5:94:a4:00:d7:8e:57:58:
29:83:a2:04:08:9c:04:80:58:80:dd:2a:e0:5e:2a:92:4b:ea:
8f:68:3b:69:1e:bc:d8:1c:0e:4d:21:ef:98:62:7a:8f:2c:03:
9b:14:1b:fa:3e:8b:4c:67:03:77:ce:43:a6:11:c3:d4:97:24:
63:9e:ba:99:42:1d:d7:66:b8:d6:03:b0:ce:3e:d3:75:24:91:
de:9c:01:5c:7e:3b:e5:c5:b3:34:e6:77:e7:25:50:ab:d3:5b:
4a:7f:4e:40:32:30:a5:02:1c:bd:86:1e:1b:b0:c8:65:a8:c9:
2d:d7:07:8a:45:4e:16:49:3a:99:f4:be:b8:9e:6f:41:73:23:
ce:56:3c:4b:62:d5:b6:5c:f7:ed:d8:1c:70:fb:cd:79:0e:42:
61:84:60:da:e6:c9:9e:d4:e3:b2:5d:ec:c1:c3:9f:b3:bb:3b:
07:c2:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org