Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4A1F2774B18D11EC886B063CC4F9AE02.roa
File: 4A1F2774B18D11EC886B063CC4F9AE02.roa (raw, json)
Hash identifier: RKu04YoOQ+ydf3bcSJkGk0EgNkB0zYhq2+J+fqrw/Ak=
Subject key identifier: BB:FC:6D:AB:1D:55:10:FC:47:C3:4D:A9:53:41:B7:52:C0:E6:89:D9
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0A8B
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4A1F2774B18D11EC886B063CC4F9AE02.roa
Signing time: Sun 03 Apr 2022 19:45:28 +0000
ROA not before: Sun 03 Apr 2022 19:45:28 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 212238
IP address blocks: 103.83.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Apr 3 19:45:28 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6249f958-9fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:80:4c:0c:de:9a:1c:a8:0d:72:96:1a:8e:
d8:9a:5a:71:d0:72:1f:e7:1c:e0:19:95:d9:d3:69:
d2:6e:67:18:2a:17:84:1a:23:63:ba:62:af:30:0f:
d7:bf:b3:12:21:62:34:33:1e:3b:c4:ce:69:4b:20:
62:33:e7:6e:21:18:4d:a4:00:90:3c:f6:d3:04:73:
84:48:1c:f5:bb:25:16:fc:de:fe:61:b7:60:1f:90:
83:a5:87:86:d0:67:58:89:a5:6e:cb:9b:4d:7b:cb:
55:3b:64:45:fa:7d:27:a9:13:2c:d8:99:8a:e0:6b:
18:f5:d4:51:38:a5:70:56:5f:fb:3c:97:21:03:95:
df:be:ff:77:d7:b9:12:4e:ea:d5:9c:23:ed:86:08:
c5:00:de:bf:f3:6a:c1:a6:47:d2:45:60:57:d1:96:
0f:5d:df:13:cd:0a:54:ad:9a:a8:d6:b4:2b:d8:e5:
8b:fa:58:9b:f1:c3:78:00:67:a7:28:89:92:9c:2b:
fb:2d:c9:3a:1e:01:79:fa:54:8c:9c:76:9c:1f:be:
d6:de:20:1f:94:c5:6c:7e:04:0a:43:27:2b:ba:46:
70:0e:8b:85:f8:e0:c3:e1:49:c5:fc:93:4d:fd:d8:
55:da:50:65:b9:d3:d3:c9:f0:db:24:71:ec:4e:42:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:6D:AB:1D:55:10:FC:47:C3:4D:A9:53:41:B7:52:C0:E6:89:D9
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4A1F2774B18D11EC886B063CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f2:6c:6a:c0:c9:f3:c6:ac:8c:3e:86:8e:6c:d3:3a:a8:da:
d4:30:85:85:a2:25:35:9c:c8:12:5f:c3:b8:20:fe:72:96:a1:
35:57:86:b3:cc:69:40:31:01:9d:1d:5f:b2:eb:06:f7:78:aa:
0e:c8:6c:a4:72:36:93:76:22:79:5a:63:83:30:47:de:b7:3b:
72:d3:db:ce:d2:8b:90:7c:4c:0f:90:9d:e7:a4:b2:2f:7a:c7:
96:2c:49:d2:42:9d:4e:36:3e:67:09:53:99:50:be:b4:0e:bb:
4b:e1:44:67:15:81:38:bc:a6:2c:77:3d:98:31:8f:70:d9:5e:
0a:4b:28:2d:46:89:5d:77:0d:53:d0:c8:57:9c:d8:d2:d0:81:
d9:62:46:82:80:2d:44:22:0e:09:37:d6:44:67:8a:ad:f2:d4:
96:9b:80:61:72:95:82:cb:fb:e3:3b:35:10:95:30:a6:be:19:
8a:79:99:16:7a:84:6f:c4:60:73:bf:52:2b:4c:5b:a8:48:5d:
c5:18:17:29:c2:c2:7a:fa:36:12:f5:59:7d:c0:45:f8:79:5f:
b3:bb:f4:e1:19:bd:25:cc:a0:c3:85:48:84:35:a7:20:50:ce:
20:7b:23:64:cf:18:04:33:57:40:a2:10:34:48:44:57:1e:83:
21:42:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org