Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/87B5355E3F0111EDA5175473C4F9AE02.roa
File: 87B5355E3F0111EDA5175473C4F9AE02.roa (raw, json)
Hash identifier: EPN95nelK/IKuxDGKgrxjdkf2sI42IlzggTRSZawHM8=
Subject key identifier: 5C:E0:25:56:E1:4E:4E:D8:75:32:C7:CD:7A:5B:65:3C:EA:A4:89:BC
Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial: 16
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/87B5355E3F0111EDA5175473C4F9AE02.roa
Signing time: Wed 28 Sep 2022 07:45:33 +0000
ROA not before: Wed 28 Sep 2022 07:45:33 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 136244
IP address blocks: 103.65.184.0/24 maxlen: 24
103.65.186.0/24 maxlen: 24
103.65.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Validity
Not Before: Sep 28 07:45:33 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6333fb9c-8b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:75:ca:26:35:8b:1d:9f:5b:ae:ca:ec:7a:
46:59:12:1f:e5:26:8f:28:ab:26:80:75:5f:49:80:
49:7b:a4:ed:5a:b7:cb:e8:d8:c3:8b:d7:9f:5e:29:
4d:48:53:28:e4:fe:34:35:08:7f:1b:94:e1:15:58:
ae:58:12:8f:07:df:5d:3b:0e:c3:35:f5:54:f8:b8:
4c:fb:85:1c:bc:54:88:4f:4e:8a:60:48:bb:b3:e3:
4b:60:68:27:e5:15:bb:28:3a:0c:07:ae:2c:ca:88:
2f:39:8e:de:f0:8d:bc:f8:29:80:29:e0:8c:fe:c3:
56:f5:7b:ea:5c:9c:36:20:64:c8:cd:d4:98:82:87:
52:ad:de:fa:2e:28:f7:b6:1a:9f:a9:a3:e1:aa:56:
f8:b8:dd:18:d0:7b:2b:64:6e:69:12:76:7b:75:ac:
fd:c2:cd:cd:9c:60:31:3a:da:ab:b1:f2:b0:19:cd:
b5:78:a0:e5:0f:a2:23:78:0b:96:d3:d7:77:3d:27:
e5:3e:57:8a:b0:32:31:92:c1:e4:2d:42:da:8d:3a:
3b:87:87:c3:dd:7f:aa:5d:55:ec:ff:00:16:c6:98:
3d:a5:dd:65:95:db:59:74:a4:46:93:c7:5d:f2:cc:
ae:62:2f:57:1b:74:5b:f3:73:5c:3a:fa:db:27:ec:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:25:56:E1:4E:4E:D8:75:32:C7:CD:7A:5B:65:3C:EA:A4:89:BC
X509v3 Authority Key Identifier:
keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/87B5355E3F0111EDA5175473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.184.0/24
103.65.186.0/23
Signature Algorithm: sha256WithRSAEncryption
70:96:53:7b:48:3e:1d:ef:44:b4:e8:54:e8:c0:77:4d:dc:fe:
63:83:64:59:65:1f:eb:0f:c1:ee:fe:12:34:db:2f:50:f1:1b:
06:b9:e0:af:2d:6f:36:90:97:ee:06:23:59:41:f1:27:6b:88:
08:2c:0a:db:cb:ad:a5:ca:46:d6:aa:05:83:a2:b2:39:69:f0:
61:a1:fb:d7:f4:61:f0:9d:b3:f3:75:5c:77:d9:24:15:a1:a3:
ad:7a:1d:e5:07:34:7c:0f:69:93:cd:05:eb:10:f0:e3:14:d9:
07:ec:0d:39:50:46:0e:a0:73:e4:b1:50:48:4d:6a:88:9d:ef:
0a:62:9c:9f:04:9e:6e:5c:ee:b4:29:b2:45:0a:08:51:69:d2:
06:21:75:82:55:81:fb:15:de:78:ce:e1:ab:8f:b4:05:fb:b8:
a5:73:14:c9:25:de:92:41:5f:d0:2d:96:37:66:c7:08:83:2a:
a6:54:5a:cd:0a:c3:b2:36:0c:b6:dd:13:a5:46:0b:c5:85:8b:
81:3c:05:27:96:6a:05:ff:e1:28:ca:5d:75:5f:5b:3f:52:c7:
42:83:fe:b2:1f:31:21:de:4e:bf:3a:78:df:86:3e:1a:f0:65:
98:93:65:07:54:af:6d:a1:51:95:1a:f1:5c:24:26:73:e1:02:
fe:41:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org