Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/574377CE841611EC99459D83C4F9AE02.roa
File: 574377CE841611EC99459D83C4F9AE02.roa (raw, json)
Hash identifier: KA79GgsqAtMeANHe2lCTpXy6Fq+eQMphKUg5gQoYr6s=
Subject key identifier: 9E:09:F1:C5:E6:5C:F3:F9:87:68:59:DE:2D:ED:2E:1F:55:D5:92:29
Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial: 01FC
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/574377CE841611EC99459D83C4F9AE02.roa
Signing time: Thu 03 Nov 2022 04:13:25 +0000
ROA not before: Thu 03 Nov 2022 04:13:25 +0000
ROA not after: Wed 01 Mar 2023 00:00:00 +0000
asID: 58701
IP address blocks: 103.20.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Validity
Not Before: Nov 3 04:13:25 2022 GMT
Not After : Mar 1 00:00:00 2023 GMT
Subject: CN=63633fe5-47de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:8a:d1:a9:f8:e4:1e:57:c9:6b:99:75:c4:
30:9b:70:55:26:e9:4c:9c:e7:cd:33:84:ae:4c:42:
ed:4e:62:ad:95:14:83:c5:69:c1:52:54:3c:ee:cd:
05:08:09:59:96:26:4d:f4:b8:74:fc:ff:6b:6f:7a:
f6:56:8b:1a:d3:8e:9b:f8:4c:9c:a8:a7:0a:66:fb:
9d:5a:a5:5a:c7:e9:15:d9:f2:e6:71:38:d4:10:ae:
56:b5:83:44:14:15:6d:68:2e:e2:03:14:22:44:90:
bb:18:0c:84:7c:42:33:fe:ea:52:f5:de:a8:bf:27:
5f:ef:62:18:ce:11:2f:d1:b1:b1:3d:e2:02:01:5d:
28:03:0b:12:06:fe:a9:dc:ca:34:cd:fd:84:57:73:
ad:6c:1d:b7:4c:80:4e:96:41:60:40:ad:a9:8f:9e:
4d:68:a5:1f:9c:f9:b6:be:b9:1c:e1:03:a8:c5:0a:
63:63:0d:c8:ad:97:76:64:bb:a7:41:56:ec:f3:81:
d1:72:f7:43:52:54:98:38:ec:ea:a2:10:2b:74:ce:
3f:19:6d:06:e5:c5:de:4b:2e:92:df:02:09:cb:7e:
b1:e6:1b:5d:8a:d8:69:fe:5c:8a:1a:ac:1f:1b:39:
ac:14:fc:89:9a:8e:34:c0:06:e3:6b:6f:cb:c9:1b:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:F1:C5:E6:5C:F3:F9:87:68:59:DE:2D:ED:2E:1F:55:D5:92:29
X509v3 Authority Key Identifier:
keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/574377CE841611EC99459D83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3b:27:f7:e9:be:0e:73:b7:65:35:b0:fa:d3:42:f8:06:2d:
19:a9:fe:b9:72:33:ca:de:ec:18:9d:29:c4:40:ef:b3:2f:d6:
52:b4:79:0e:fb:5e:10:ae:6b:ff:25:2f:8b:7a:6e:cf:a2:4b:
c0:cd:4b:db:06:ee:72:28:7a:50:8b:cf:c6:14:97:c2:5d:2e:
c8:95:c9:ed:8a:21:40:bd:79:05:2f:6b:24:d1:44:25:79:b1:
58:5b:ea:f5:10:8e:eb:d1:5a:3c:98:46:21:50:f2:b1:01:b7:
7b:05:61:41:09:1a:7a:21:51:04:53:92:b1:07:3b:98:1c:13:
c3:b2:ac:b0:37:9d:53:ba:73:c1:91:91:18:e7:f8:d9:ae:95:
0c:b6:72:8c:5a:b6:f1:4f:c0:20:67:bb:60:df:74:de:ee:8a:
da:3e:d0:b5:e2:ef:d5:38:06:46:6d:84:d1:7b:70:c6:18:57:
7a:c7:ca:d1:19:83:6b:eb:4a:b6:9a:43:c1:c7:d2:34:47:8c:
62:b1:a0:d2:23:3b:ad:3c:e6:ca:b8:40:e6:31:87:4b:c6:4a:
4c:dd:85:d4:f9:96:77:6d:fa:0c:e2:76:dc:55:0f:9c:7b:c3:
0f:5a:7a:93:48:dc:3e:74:ea:28:39:da:32:5d:99:d9:bc:de:
c1:09:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org