Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/DCF611D291A011EC8C1C7A29C4F9AE02.roa
File: DCF611D291A011EC8C1C7A29C4F9AE02.roa (raw, json)
Hash identifier: JzWq21b8NuQzbNRcXYDNZtY4zMkx4P+IjYw2XVx6bQA=
Subject key identifier: 80:D8:90:13:90:F2:6F:2A:80:E3:71:09:93:B9:8F:35:76:D2:38:18
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 079B
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/DCF611D291A011EC8C1C7A29C4F9AE02.roa
Signing time: Tue 26 Apr 2022 21:47:28 +0000
ROA not before: Tue 26 Apr 2022 21:47:28 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 136429
IP address blocks: 103.148.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Apr 26 21:47:28 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6268686f-d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:a6:6c:81:12:83:48:b0:c5:b0:a8:71:8a:
3a:f5:d0:2d:7f:bd:89:c7:83:d1:d7:8c:41:f4:92:
f0:b4:7f:b8:a5:60:9d:da:f9:94:ac:18:53:aa:55:
77:d2:7c:80:1c:7a:06:52:36:c7:aa:22:05:be:a3:
f0:80:34:cd:44:95:1e:d4:3c:77:f7:69:b8:e9:dd:
cc:c7:2f:61:20:65:a6:0a:bd:48:09:63:43:a3:28:
79:c4:88:c2:eb:a1:5f:b5:9b:d9:08:74:ec:56:5e:
9a:c0:aa:d7:7e:b7:a2:1c:54:4b:83:39:56:d5:0c:
63:53:64:08:78:dd:81:07:24:1e:3a:19:48:f3:40:
d5:20:a7:04:fa:eb:b6:f6:89:06:d9:9a:9b:32:2d:
65:a3:88:2a:4a:c4:bf:3f:56:c1:a9:e4:e3:55:9e:
78:6c:16:e9:51:5c:a7:38:fa:aa:0c:ce:a4:db:47:
11:17:03:2d:9b:bc:0d:25:82:eb:51:a4:81:36:98:
06:bf:27:90:64:d6:e8:2b:8a:f2:e9:c8:17:59:64:
d5:4a:66:d0:cb:8b:f1:56:79:03:85:ae:02:a5:bc:
8d:94:36:a7:87:8c:bf:22:9e:cc:4f:a2:0d:a8:ee:
05:30:4b:ee:81:ff:14:a6:27:bd:70:bc:db:91:51:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:90:13:90:F2:6F:2A:80:E3:71:09:93:B9:8F:35:76:D2:38:18
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/DCF611D291A011EC8C1C7A29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:45:74:56:a2:22:99:9a:13:e9:d7:42:40:0c:16:1a:ab:f1:
5e:58:48:5f:d5:f3:6a:1f:df:ce:5a:8b:1f:17:d6:6e:76:27:
71:42:e1:44:b1:b9:09:29:03:54:bc:4f:46:67:d8:8e:77:1c:
c3:d3:be:97:ca:6a:a7:c3:9b:50:39:12:62:e7:5b:d6:0b:b3:
9a:f5:78:b9:f1:da:9f:80:6d:ec:aa:50:29:e9:d2:1d:ab:a5:
03:6a:a5:41:78:3e:64:5b:44:92:f5:db:42:67:a0:6f:60:59:
1d:57:dd:59:19:0f:01:0e:81:47:ec:f2:44:02:a5:76:0f:53:
cf:cd:33:73:0f:be:98:ea:c1:f3:7a:d1:b5:02:c8:ec:e9:c7:
63:5a:33:22:da:d3:83:36:ae:f1:87:95:91:0c:c3:bd:c8:aa:
6f:b7:74:c7:de:ef:54:6c:b9:1b:71:ef:5c:1b:97:4b:93:7e:
6d:f1:13:22:42:d3:46:4b:03:6b:10:eb:3a:00:d6:34:7e:57:
7a:df:67:57:69:19:d0:07:0d:a8:83:18:29:03:ef:63:e7:31:
fb:3d:06:70:b0:12:d4:79:5d:30:58:2f:c3:a5:fb:4f:c7:07:
ae:ab:eb:8c:c3:66:18:b3:cf:90:6d:ed:c3:35:d2:a1:60:6c:
e6:ec:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org