Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/90C05904D0D811EC8DF4377FC4F9AE02.roa
File: 90C05904D0D811EC8DF4377FC4F9AE02.roa (raw, json)
Hash identifier: L4FbtKxi45oObuhyAL3FYmL1WOrLsgR4p5MOI14oe7g=
Subject key identifier: 20:F9:58:70:75:00:DC:13:EB:43:42:96:CA:2E:A7:D3:70:3A:40:90
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 49
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/90C05904D0D811EC8DF4377FC4F9AE02.roa
Signing time: Wed 08 Jun 2022 13:11:30 +0000
ROA not before: Wed 08 Jun 2022 13:11:30 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 40747
IP address blocks: 103.163.77.0/24 maxlen: 30
2001:df1:c081::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Jun 8 13:11:30 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62a0a001-e679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:d4:ac:7f:2c:d2:ef:07:c3:b8:e6:7d:28:
9a:a5:b7:37:89:e3:5a:14:3c:48:b0:22:d0:70:2b:
4c:33:96:c5:50:9f:1b:07:a8:ee:5e:25:52:18:ec:
ab:b5:de:db:55:53:72:6e:22:1f:b2:26:43:86:f4:
c2:43:5d:80:9e:e3:c7:64:44:22:f6:10:30:15:63:
1d:b1:97:dc:95:cd:31:74:87:22:2c:49:6e:85:bc:
c4:7c:ec:7a:b5:30:b2:4f:c8:ba:ce:45:5d:c6:8e:
25:b2:94:a5:50:06:19:ad:c5:0d:4b:eb:a1:f4:c9:
0e:7f:4a:07:20:0e:fa:cb:45:04:6c:0b:39:b5:ee:
a0:cd:39:f3:cd:82:98:6d:eb:b3:e1:0c:88:93:53:
6d:07:ea:57:66:6a:b3:9e:b2:db:d8:ac:ef:9e:82:
aa:7c:70:8f:ef:ae:e5:89:4c:3b:f3:2c:78:77:ff:
d4:96:1f:7b:4e:a1:7a:c9:b1:da:ee:3c:d7:08:12:
32:ba:d4:db:dd:b6:6e:21:6b:ab:6d:2f:7e:90:04:
02:69:3e:00:2c:da:d7:d7:e2:54:f1:d6:5e:54:39:
bd:39:57:57:e5:71:b8:fa:2d:15:55:80:68:d9:c8:
f0:4d:f8:bc:68:bc:15:cb:4c:10:a3:29:33:e0:5b:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:58:70:75:00:DC:13:EB:43:42:96:CA:2E:A7:D3:70:3A:40:90
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/90C05904D0D811EC8DF4377FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.77.0/24
IPv6:
2001:df1:c081::/48
Signature Algorithm: sha256WithRSAEncryption
82:50:f6:75:df:5a:a8:05:d2:f8:63:2a:fd:8d:29:ae:59:d3:
13:68:e3:54:cb:98:60:9a:bf:e0:8b:f6:d1:0e:dd:aa:92:e1:
59:ce:1f:71:bf:28:66:28:ea:9c:df:32:02:f8:17:76:2f:2d:
e1:f5:ec:9f:35:f3:86:9a:4f:18:a3:18:6b:97:6c:c2:57:6b:
72:b5:e8:37:5b:3a:b1:54:ed:f4:95:c0:08:1b:cd:46:27:8d:
81:bb:f0:ca:8f:f6:8d:e5:4f:63:8e:f7:71:82:5d:5d:c3:cf:
29:36:23:09:70:01:92:c3:1f:2e:41:5e:ac:26:01:6e:de:5b:
86:ad:56:7b:f2:55:a3:9b:ed:64:d7:42:44:42:5e:a3:28:76:
23:5d:6d:06:a7:44:66:bb:a1:91:c2:a5:ea:f8:82:02:2b:ff:
d6:25:3f:bd:07:bc:2e:45:a3:ae:d8:58:5a:4e:c2:bb:07:f0:
df:6b:2a:7d:ac:6e:64:fe:2e:5d:24:08:87:27:66:42:35:2a:
aa:96:86:c7:86:79:96:72:f0:22:6f:68:35:2f:79:35:a7:17:
db:69:2c:06:90:8e:f4:fc:05:47:3c:72:c4:a7:cb:8c:4e:d8:
76:f6:e1:c7:8e:2a:5d:cc:fc:62:c7:62:70:2e:3a:ef:67:86:
08:d3:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org