Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/53F9F4E8B50811ED993ABB65C4F9AE02.roa
File: 53F9F4E8B50811ED993ABB65C4F9AE02.roa (raw, json)
Hash identifier: aBVfv8R5TnZIMTLKdatKXQl/p9dly782bg3+ikHssio=
Subject key identifier: 4B:C3:9A:73:02:4E:38:26:C6:1A:A7:A4:79:65:1D:16:E6:AA:84:62
Certificate issuer: /CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3
Certificate serial: 04BA
Authority key identifier: FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/53F9F4E8B50811ED993ABB65C4F9AE02.roa
Signing time: Sat 25 Feb 2023 12:31:30 +0000
ROA not before: Sat 25 Feb 2023 12:31:30 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 58678
IP address blocks: 103.104.92.0/24 maxlen: 24
103.104.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3
Validity
Not Before: Feb 25 12:31:30 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63f9ffa1-27a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:5c:01:6f:10:0c:91:e3:c8:61:a2:bb:0f:
22:b0:ed:20:81:3d:01:19:3d:90:74:a0:4a:80:0f:
58:49:6e:94:17:92:01:b2:e7:d8:27:ea:52:55:13:
e5:63:4c:6b:e2:cc:d5:34:30:df:2f:24:91:c5:8a:
b7:99:c7:f9:2a:9f:4f:d7:46:de:30:fa:3b:45:f8:
fa:6e:9f:e1:5b:cc:52:0d:4c:8d:5d:49:77:3d:97:
98:64:0a:e7:ab:9a:a1:15:f3:cd:e5:7b:7c:b6:40:
bb:10:ec:51:8d:c0:9d:f5:50:c4:ef:46:0e:fd:36:
17:bb:0e:d4:74:ef:d6:97:37:92:db:2f:d8:4a:22:
6f:ca:13:59:b4:58:b0:6f:76:3a:2f:25:9f:3b:86:
ef:54:ea:4a:fe:1e:96:b8:30:58:4c:a9:62:59:9f:
01:62:f5:6b:92:17:e3:9c:2d:98:59:e4:c7:a9:47:
0b:7f:45:4e:11:e4:12:a6:59:cf:69:d2:09:65:92:
c4:a7:a1:48:fd:36:af:50:92:dd:1f:e8:c7:c8:6c:
ed:8b:88:23:1b:93:e6:27:2d:5c:f0:15:6b:ec:96:
06:08:d1:60:83:ca:94:33:14:09:59:68:9a:47:91:
f1:7d:43:12:ea:54:00:16:68:50:ee:6c:ac:83:8b:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:9A:73:02:4E:38:26:C6:1A:A7:A4:79:65:1D:16:E6:AA:84:62
X509v3 Authority Key Identifier:
keyid:FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/53F9F4E8B50811ED993ABB65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.92.0/23
Signature Algorithm: sha256WithRSAEncryption
52:46:fa:0b:69:f0:5c:51:fe:b2:d7:2a:6b:57:b8:6b:26:66:
51:47:27:38:a7:cc:aa:35:84:7d:a8:00:29:24:f6:59:1e:d3:
e0:92:58:98:23:59:89:1c:85:c8:2a:ab:35:5b:a0:af:8e:42:
07:df:eb:58:b0:1b:5e:5f:f9:4d:08:3e:e1:f4:9a:c0:fd:af:
a8:25:c5:f8:8d:37:3b:93:ce:b9:d1:a2:fb:07:93:69:61:b5:
90:8c:a9:6d:b0:6d:f3:97:95:a5:c8:9a:49:4f:87:f7:f2:80:
cd:ed:c1:17:7b:c0:32:23:5e:26:19:9f:9a:a4:18:8e:76:9e:
fb:2b:c6:95:ee:3f:74:31:66:53:00:ee:29:ea:67:78:59:4a:
8c:1e:28:da:b6:4e:73:83:a9:9b:28:dd:3b:69:8b:4e:06:f8:
2c:26:06:67:77:4c:c3:c6:01:e4:19:f8:8e:06:6b:98:22:53:
7b:54:8f:8c:bb:fa:6d:73:be:f6:fb:d6:37:4a:f2:b8:08:3a:
d4:83:d9:2e:a8:c0:f9:e3:5b:37:0c:1f:7c:58:70:47:c6:f2:
f1:23:b1:e9:90:35:ed:55:bd:4e:d2:af:09:96:2a:43:5b:06:
f5:ba:a4:37:87:f2:0e:88:ee:13:93:89:41:26:d7:42:b6:83:
7e:dc:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org