Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/50C5992CECDC11EABF528844C4F9AE02.roa
File: 50C5992CECDC11EABF528844C4F9AE02.roa (raw, json)
Hash identifier: wqmpk0nDRv541BI8fBCuQ+LvwLzEkCnIm7A6Iw4dwuE=
Subject key identifier: 15:C8:03:45:02:87:39:61:84:A4:23:58:21:40:69:D2:16:92:1E:8A
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 0266
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/50C5992CECDC11EABF528844C4F9AE02.roa
Signing time: Thu 01 Jul 2021 18:04:23 +0000
ROA not before: Thu 01 Jul 2021 18:04:23 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137706
IP address blocks: 103.113.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Validity
Not Before: Jul 1 18:04:23 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60de03a7-b997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:70:f3:88:1e:c4:89:ed:cf:34:ff:cb:e0:
7f:bf:21:4f:4a:ca:19:53:2b:16:cf:21:7a:ef:e9:
2a:61:ac:d8:06:78:6b:98:70:31:95:fc:c0:21:b1:
23:64:3d:ff:a3:01:58:0d:44:43:04:34:5c:f4:fd:
14:3d:d1:20:a3:83:d6:49:36:97:92:74:2c:80:cd:
eb:a7:c5:f1:7b:89:17:de:a6:03:ed:f1:ab:77:39:
36:03:39:c3:0d:22:bb:2a:2c:cf:85:50:e1:ee:5a:
cf:e2:0b:bd:b2:ca:0c:6b:1b:9a:91:73:f3:4c:1d:
aa:54:f5:db:87:15:fd:48:a9:24:d5:95:49:7f:0a:
6f:c5:b8:92:cf:79:c4:d2:d8:4c:08:6b:da:4b:e3:
a5:9b:f6:59:c5:a6:17:27:84:02:e7:3e:53:63:cd:
4b:18:35:2d:ff:21:c5:43:92:b5:33:a0:68:77:89:
32:ae:f0:b7:ee:0e:c8:7a:2b:80:0a:a0:48:32:e2:
64:e4:bf:31:b6:aa:5b:98:54:f1:73:49:2f:dd:fd:
1c:6f:bc:5d:8b:47:fb:c9:79:e6:4a:cd:39:71:2d:
1c:a0:e5:b0:29:5d:3a:8c:2e:2d:cc:06:30:69:3f:
5f:bb:dd:5e:1a:48:30:da:0d:28:5d:6b:80:1a:46:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:03:45:02:87:39:61:84:A4:23:58:21:40:69:D2:16:92:1E:8A
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/50C5992CECDC11EABF528844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:8d:58:a2:d1:b7:8f:44:a6:7f:d1:7a:66:f6:7b:55:ab:64:
cb:37:20:a1:23:d9:32:fb:e0:42:4e:52:c9:27:a4:55:29:e5:
00:81:05:31:ad:9a:5a:fd:85:95:40:9a:70:37:11:32:ee:29:
29:04:a0:a8:39:6d:c6:0f:c6:07:ab:4b:76:ba:3d:b4:ee:e3:
fe:a5:27:e9:60:fc:a1:d3:7b:f5:dc:68:c5:01:d5:cd:be:df:
76:47:3c:d0:aa:76:ce:28:f1:3f:3b:8c:d5:b0:54:0a:d0:1b:
15:dd:20:95:28:0d:79:d3:6f:ad:54:6d:44:75:61:07:28:80:
a8:7a:f4:2f:b5:ba:b6:3a:0c:9e:b1:dc:ba:c9:8f:bf:cb:53:
dc:03:a5:b9:e7:ef:0c:0f:6c:1b:ea:15:17:48:14:33:98:2d:
ed:c3:e8:5d:f8:d2:ad:0b:95:b9:e2:24:e4:a2:3c:30:dd:64:
68:a3:8d:89:71:7a:61:1b:35:f1:72:04:2c:65:b8:52:fa:a5:
ad:be:65:f8:dd:0f:05:f4:e9:46:e2:69:04:9b:92:d4:9e:f5:
9d:f6:a6:44:cd:a5:1f:c4:88:74:f3:71:52:ed:c8:21:b8:5d:
17:0d:a6:33:2b:54:ad:53:74:be:4d:e8:07:49:c0:66:5c:ed:
5b:61:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-ams.rpki-client.org