Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4934D598B18D11EC886B063CC4F9AE02.roa
File: 4934D598B18D11EC886B063CC4F9AE02.roa (raw, json)
Hash identifier: Np8CgPjOEgQ/Sq/DLwf9iiDm8v9zCBsMe1EAQ3bX1mU=
Subject key identifier: 31:79:DE:75:15:5A:BF:D4:E0:83:7C:9F:AD:42:49:8A:5F:95:C2:E5
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0A8A
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4934D598B18D11EC886B063CC4F9AE02.roa
Signing time: Sun 03 Apr 2022 19:45:27 +0000
ROA not before: Sun 03 Apr 2022 19:45:27 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 19437
IP address blocks: 103.83.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Apr 3 19:45:27 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6249f956-e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:1a:ab:b1:cf:62:13:2f:25:4a:b3:d0:fb:
8b:e4:73:f4:c3:68:b8:94:e8:c7:4d:b4:b3:ec:5a:
b5:a0:bd:15:cc:83:23:99:da:73:d9:9f:35:c2:61:
28:aa:61:e9:92:4e:72:99:3b:70:10:1e:62:67:ac:
e9:99:b4:3a:25:08:64:2c:05:73:39:6b:88:ad:0d:
f3:75:25:0e:76:4c:af:09:c9:74:6f:07:2e:d3:90:
ca:a6:de:66:2f:a8:43:9d:7d:4e:de:3b:bc:33:03:
a3:31:c3:6a:9d:33:a7:e2:24:1e:bc:5f:fc:bd:b6:
48:6f:36:a9:87:35:ed:ab:85:01:31:d2:47:7f:6b:
02:2d:f8:f9:49:19:26:c8:9c:42:c3:1c:6c:54:d9:
3a:7c:33:86:fe:04:a9:89:bb:90:c1:19:35:24:50:
84:a1:e7:0d:62:ea:84:52:17:8f:20:7c:31:60:8d:
68:b1:1d:fb:c0:26:59:60:f7:a6:0c:93:17:30:58:
68:a2:45:ec:c4:d6:68:d4:cb:cc:47:e9:71:0b:2a:
78:1b:6b:97:f0:58:d1:68:34:9f:98:6d:36:e0:80:
c1:f1:35:7f:5e:eb:31:b4:89:a4:52:a3:cc:50:0a:
9e:5d:f9:26:1b:71:a7:b6:35:7c:99:cd:0d:c8:21:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:DE:75:15:5A:BF:D4:E0:83:7C:9F:AD:42:49:8A:5F:95:C2:E5
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4934D598B18D11EC886B063CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:18:dc:ab:c1:37:5f:73:1c:92:0b:b8:3a:3a:45:c7:a7:
82:5b:8f:f7:36:60:04:43:8f:5b:a8:12:29:e9:b9:d2:fd:5a:
11:4f:e4:1e:aa:2f:be:2a:74:1d:46:07:c6:f4:b3:a5:3a:a8:
50:23:7d:45:06:8c:49:26:68:f1:7d:87:14:4e:ac:28:cb:6d:
5e:3d:fd:2c:89:d9:22:2e:d3:e7:81:3c:ba:9e:bf:7b:c1:e6:
74:e1:19:80:de:60:7b:e4:d6:7c:8b:24:92:22:00:be:44:48:
5d:a2:f2:51:7d:07:e9:c3:5b:58:4f:92:5c:a6:7e:75:88:57:
3c:b8:74:46:0f:8d:f0:3f:f4:4f:26:3d:f8:19:4c:f6:29:28:
b3:17:21:bd:a0:76:41:9c:41:60:0e:60:6f:38:54:8a:b9:a7:
75:d4:6e:b6:26:08:9c:3d:4e:24:b9:c8:48:91:24:65:0f:61:
d4:cb:23:2a:53:39:53:cd:e0:95:1f:41:90:4a:5e:f4:77:84:
f6:83:2b:27:db:ab:ef:e1:01:dd:23:5c:d0:25:c5:40:1e:dd:
53:23:4b:5c:9f:64:d4:9b:58:d0:6f:cb:30:c9:a6:e3:a7:01:
1b:8e:b3:74:8e:0d:31:b7:c8:ac:42:f9:5d:2b:6e:3a:88:a8:
71:1c:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org