Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/543C41DC727011EABA68C536C4F9AE02.roa
File: 543C41DC727011EABA68C536C4F9AE02.roa (raw, json)
Hash identifier: CY5M0XfMfgO3pGUsY2W/ki0MfMy5+qX0myCdiNRY/zg=
Subject key identifier: 86:CF:A7:95:23:E5:23:92:78:35:F4:9F:32:6D:A5:8F:ED:DC:E1:2B
Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial: 1652
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/543C41DC727011EABA68C536C4F9AE02.roa
Signing time: Wed 14 Sep 2022 05:34:09 +0000
ROA not before: Wed 14 Sep 2022 05:34:09 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136970
IP address blocks: 103.71.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5714 (0x1652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Validity
Not Before: Sep 14 05:34:09 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=632167d1-6f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:c7:12:1c:16:7a:50:34:0d:35:62:3a:d2:
4d:27:65:f7:0b:e7:7d:90:98:46:f8:1f:11:65:fe:
08:69:fd:02:85:63:dc:7e:da:e9:51:5f:69:a5:80:
9a:7f:dc:85:49:28:2d:bf:c8:93:12:30:21:ff:3b:
ab:11:d0:f3:2b:76:da:da:c6:16:86:1f:54:46:fe:
69:49:4c:52:83:0b:96:3e:9d:fc:d7:a9:11:50:71:
12:3d:c3:ad:61:b9:c8:44:c5:f7:b0:97:df:b5:f3:
fd:48:25:2e:10:b0:85:ba:1d:da:b9:15:82:c5:32:
b3:e8:a7:81:52:1f:6e:86:cc:7f:d1:f0:3b:1e:50:
dc:70:f6:75:d6:95:93:5f:49:be:38:da:b5:3e:c2:
27:89:a7:f0:fc:3a:75:8e:94:7a:81:89:2c:ad:9e:
7f:cb:4b:3f:26:ac:ff:3f:49:ca:f1:ec:e8:5f:6e:
ad:65:0e:2c:cc:0d:ed:7e:57:f2:0b:e5:1e:96:61:
1c:25:52:71:4c:2b:ad:1d:95:6c:fe:c3:88:e9:ce:
12:ad:ee:1d:db:5e:58:ff:70:50:40:f4:4a:7c:d2:
30:2e:54:73:48:c1:ea:b5:1f:9b:2b:d5:20:5d:a7:
cc:4a:ce:39:18:d5:71:44:e5:3e:e7:43:1b:67:33:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:A7:95:23:E5:23:92:78:35:F4:9F:32:6D:A5:8F:ED:DC:E1:2B
X509v3 Authority Key Identifier:
keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/543C41DC727011EABA68C536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bd:e7:97:b9:d8:9a:88:f7:94:86:76:5b:de:95:06:ac:ad:
f5:3d:99:bb:28:fe:cf:63:ae:8b:49:f7:97:c9:df:e5:c0:0d:
07:1f:6e:fd:06:d6:e7:71:c7:1c:d8:44:97:de:26:08:74:1d:
67:d4:90:5c:3f:bc:69:1f:10:a5:e7:38:26:04:16:79:fc:94:
11:89:94:0a:5b:d9:9d:96:87:a8:c7:13:cf:d2:0b:d9:cb:c1:
3b:30:a0:03:d3:29:e1:2c:e3:f7:f3:20:33:4d:b7:27:3f:a2:
49:b0:30:e0:a1:5f:4d:17:8b:fc:f4:1a:00:31:f2:d8:4d:cc:
a2:2a:59:6a:1d:13:41:54:6d:7c:86:d1:d1:d0:19:61:08:a8:
e3:92:40:3c:e5:6d:89:1c:c0:4c:de:06:82:32:80:35:42:92:
4e:a6:7f:bc:9d:a5:f6:f6:5e:14:98:a2:8a:5e:1e:a7:9b:16:
2b:3b:b5:63:fa:fd:58:7f:34:44:8e:71:60:ad:df:6f:95:5e:
1d:2c:62:46:f5:32:2b:4f:d3:35:71:22:01:5f:08:0f:c6:c9:
86:c8:42:32:af:a2:0d:d1:d6:49:4d:f3:da:a2:5e:48:d8:45:
d8:86:f6:89:57:14:f1:0c:14:a0:2b:31:8f:76:46:c0:7a:60:
94:00:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org