Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4830A398B18D11EC886B063CC4F9AE02.roa
File: 4830A398B18D11EC886B063CC4F9AE02.roa (raw, json)
Hash identifier: dZjcDLJeGP5wYd4UWLKk9Ds35z7IkWKsQV3nyTa+ZpU=
Subject key identifier: 69:7C:63:B4:69:C4:F6:02:85:AC:0E:B7:E6:6D:A3:9C:15:92:2A:AD
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0C56
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4830A398B18D11EC886B063CC4F9AE02.roa
Signing time: Sun 12 Mar 2023 19:26:07 +0000
ROA not before: Sun 12 Mar 2023 19:26:06 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 132335
IP address blocks: 103.83.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Mar 12 19:26:06 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640e274e-d401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:8b:68:b5:06:aa:b1:8e:42:6b:3c:b9:f8:
36:ce:d9:7e:95:83:d7:42:fd:0c:dc:51:e7:42:d2:
c6:0d:45:09:e5:7f:b8:04:b6:d2:12:1f:ff:a4:76:
70:45:52:be:38:fa:3a:c3:a8:3e:53:b6:dd:1a:5f:
72:56:64:b0:58:74:09:58:83:9d:f1:fe:6e:63:5d:
6a:1d:cc:35:13:0f:1d:a9:83:4d:e8:d1:8b:e6:02:
4c:41:8b:bc:66:48:1b:46:ed:9e:34:aa:b8:8c:63:
df:b3:bd:c7:16:c8:de:f1:b0:e0:5f:81:3b:0a:e8:
dd:14:61:03:23:43:59:4b:7e:be:c7:7e:10:c3:de:
27:a7:e9:11:b8:ac:a3:65:61:d6:db:f4:ef:20:e8:
ce:1d:69:a7:37:98:18:85:81:f9:02:5e:dc:39:ef:
f7:92:31:34:a9:55:d6:8a:b5:90:0d:ea:28:fc:cf:
37:04:c5:58:54:d0:e5:17:41:2e:2e:00:c8:bd:a7:
79:41:88:51:01:2c:48:fc:31:0b:19:87:74:0b:bf:
ab:ca:b2:d5:ae:97:13:4c:86:b8:f6:c8:e0:33:af:
be:9c:76:d9:d0:50:86:e4:ec:1f:20:8b:7c:a0:78:
ea:b2:3f:3d:4c:7f:bd:a9:99:0e:c3:16:f1:70:f1:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:63:B4:69:C4:F6:02:85:AC:0E:B7:E6:6D:A3:9C:15:92:2A:AD
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4830A398B18D11EC886B063CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.192.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0b:e2:77:f2:33:4a:e9:b8:b9:2d:65:07:d8:a0:9e:1b:57:
fb:76:9a:4d:ee:f6:25:90:2a:86:5e:7a:8b:43:2c:8e:d4:1d:
b0:75:be:05:86:97:cc:b5:0c:d4:5d:db:7a:83:4d:a3:cb:bb:
7d:df:5a:66:d6:60:fc:27:23:15:b0:6d:c4:30:a8:d6:a8:a1:
9c:9e:f5:ea:81:3d:a6:74:c7:2a:20:3b:fc:81:6e:25:a2:96:
50:90:06:63:b1:d4:fb:56:10:6c:91:fe:24:8a:81:1d:34:49:
98:60:73:7b:89:dc:fb:f5:0d:45:b9:2d:9d:f2:3d:0e:a9:32:
8e:00:00:37:91:c1:ff:f8:24:d6:89:ec:26:73:9e:81:54:69:
5a:4d:35:17:d9:49:43:a9:ba:36:35:e4:e7:2c:4b:0d:a2:de:
f4:c5:a3:e5:73:e8:40:99:94:38:18:8d:85:39:f4:b2:01:ce:
e1:aa:8e:dc:a4:ac:49:cb:9c:15:29:a8:09:9d:20:52:91:a6:
54:83:07:69:d6:a9:38:40:9d:cb:29:67:53:cc:2d:ad:5c:12:
96:09:da:b6:ec:34:b8:09:47:c0:dd:9a:bf:0f:2b:10:ef:81:
93:77:c4:b4:ab:b5:e1:0c:e0:2e:02:0b:2e:d8:f2:8a:22:3a:
77:59:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org