Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/99142CB0DE4611EAAC675415C4F9AE02.roa
File: 99142CB0DE4611EAAC675415C4F9AE02.roa (raw, json)
Hash identifier: 6NxdybgIRSBHKdksKKh6p8Q+UhPngpsDuMujV95ipT0=
Subject key identifier: B3:FD:3F:E0:89:6F:0D:65:B9:B0:A9:18:BF:2C:81:8F:1E:ED:DB:BB
Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Certificate serial: 02EC
Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/99142CB0DE4611EAAC675415C4F9AE02.roa
Signing time: Tue 18 May 2021 22:46:32 +0000
ROA not before: Tue 18 May 2021 22:46:32 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138997
IP address blocks: 103.149.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Validity
Not Before: May 18 22:46:32 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60a443c7-bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:34:00:aa:3b:23:5f:d5:f9:71:0f:80:8c:
50:bb:1b:c5:77:8b:7b:11:70:57:85:d6:5a:0b:6d:
bb:3e:55:c1:82:84:00:82:03:83:76:49:22:c1:4a:
32:4b:f3:7b:29:c6:c5:3c:60:0b:83:4e:72:f6:f9:
32:16:22:c1:83:de:9b:fc:dd:0d:e5:5a:c2:e6:da:
da:db:33:f0:6b:fe:2f:5e:0e:50:bb:c9:37:4d:66:
91:77:48:5c:27:c3:b1:c0:ea:63:09:7d:be:8d:a8:
cd:a4:b0:03:b7:15:97:6b:65:7c:11:0d:2a:54:2c:
ba:5d:38:45:08:3e:c3:31:a0:b1:d6:d4:33:4f:4d:
b3:70:c1:fd:c4:3e:a2:36:af:fa:16:36:30:d1:36:
ed:19:54:cf:34:c9:c3:b0:56:0b:44:f3:8b:04:aa:
c7:4f:8d:cb:ff:bf:4a:d3:cf:d5:bd:8f:bb:56:e0:
83:e0:a1:17:a1:67:b3:bf:05:f5:eb:3d:e7:66:4e:
7d:9a:7b:3a:93:a7:69:9e:30:4c:08:6f:01:ea:e5:
bf:16:5a:e8:11:00:99:60:fc:ae:c3:79:44:e5:f3:
26:a3:0a:06:70:d0:af:1c:54:ed:8d:52:ab:7b:23:
9a:7b:96:5e:33:f8:4b:98:b1:7b:db:b5:02:64:29:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:3F:E0:89:6F:0D:65:B9:B0:A9:18:BF:2C:81:8F:1E:ED:DB:BB
X509v3 Authority Key Identifier:
keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/99142CB0DE4611EAAC675415C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.248.0/23
Signature Algorithm: sha256WithRSAEncryption
23:2f:50:e5:42:86:b3:6e:28:86:86:56:b8:90:42:0a:57:3c:
09:8b:69:3e:35:9c:48:8c:b7:0f:28:36:a4:77:9f:7b:e2:26:
7d:1f:09:04:d3:4d:e8:f9:57:d3:d6:29:c1:22:af:68:2e:e0:
97:e9:74:b4:03:1e:1e:d2:b6:10:bf:15:3f:30:44:02:bf:01:
bb:0c:22:eb:28:90:5c:de:6c:f9:75:29:c9:ec:14:0b:10:f7:
41:03:56:df:ea:f8:41:87:7b:80:0c:3f:f5:f0:69:ab:3d:a8:
61:57:79:84:13:8c:bd:9d:3b:9a:3d:6e:e7:31:d5:10:18:0c:
5e:18:35:b8:bd:ed:29:9c:6a:39:71:f2:a4:ac:d6:d7:65:6a:
33:be:cc:82:c1:75:b2:57:ef:e6:bf:7a:15:77:61:c6:c5:15:
40:d8:d8:e1:e6:e2:76:2c:17:ef:70:81:80:26:bb:5b:12:bf:
60:8c:1d:c9:5a:cb:d6:2e:35:90:ea:e5:34:58:79:f4:5d:0c:
62:12:86:fc:d0:1f:76:66:b4:6d:3a:aa:14:e8:fe:4c:55:93:
f3:6f:42:3e:27:00:7b:49:78:ad:4b:17:e6:33:80:26:eb:fa:
e7:40:3a:be:1a:96:de:27:02:6e:06:9f:b3:28:cf:90:64:b1:
24:27:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org