Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
File: 9392E0E0337711EEB3CB232BC4F9AE02.roa (raw, json)
Hash identifier: CEAOBdSZAS0q9MuyvdphC2YkAEA/tyKxBDmSb4rghtg=
Subject key identifier: 23:C5:1A:86:99:BF:AF:AA:35:14:7D:C0:D6:17:46:4B:21:96:2F:4B
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 02C4
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
Signing time: Mon 07 Aug 2023 05:57:04 +0000
ROA not before: Mon 07 Aug 2023 05:57:04 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 149436
IP address blocks: 103.179.124.0/23 maxlen: 23
103.179.124.0/24 maxlen: 24
103.179.125.0/24 maxlen: 24
2001:df0:4c40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Aug 7 05:57:04 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=64d087b0-ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:48:11:0f:ac:08:89:05:a3:51:e5:2c:a1:
1b:e9:99:98:15:7e:75:7b:0b:d5:e0:c7:de:b8:a6:
d9:c4:37:cc:2b:8e:37:56:33:41:4f:61:2b:15:00:
cc:12:6f:e0:ff:09:20:ca:3c:52:7f:51:69:db:1d:
da:59:6c:ba:c9:46:d2:79:f4:9a:c0:1a:e6:dc:68:
af:25:63:f9:df:ef:09:1d:28:f4:f9:4e:98:d4:0a:
c2:8d:c9:54:25:c2:2b:f0:16:25:a5:33:76:54:9d:
a8:0d:61:75:bb:d2:99:29:cb:e2:20:34:98:75:80:
a6:58:18:f1:74:c8:92:01:62:dc:b1:66:e8:2e:da:
03:6a:c6:af:cc:5a:2d:8c:7a:62:b1:26:4b:03:6c:
2a:e3:5f:ae:0f:10:0d:c3:ee:67:32:0c:73:4d:16:
cf:21:30:df:da:42:bc:20:d7:c2:d8:22:01:1f:37:
40:a9:43:01:8f:5f:c2:1f:26:a6:f1:ab:1e:e1:75:
f9:75:d1:7c:af:05:fc:58:bc:6d:cf:61:ea:55:55:
e0:0d:a4:f7:6f:b8:88:b2:b5:06:5b:96:dd:3d:d0:
62:e3:fd:4b:39:d5:15:f1:86:35:b8:ab:2c:9b:86:
a7:5a:5a:ca:55:35:e5:d5:b9:b1:80:18:4b:82:0a:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:1A:86:99:BF:AF:AA:35:14:7D:C0:D6:17:46:4B:21:96:2F:4B
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.124.0/23
IPv6:
2001:df0:4c40::/48
Signature Algorithm: sha256WithRSAEncryption
8c:01:fa:70:b1:f0:9e:61:53:ba:50:63:62:a6:97:d2:05:2a:
2e:36:ea:85:d3:ea:cc:41:40:a6:9e:95:78:58:a1:ee:cd:17:
64:5c:55:30:6b:66:aa:c8:d2:f6:2f:df:69:cc:67:b7:46:fc:
02:b8:c4:af:23:0a:88:19:f1:fc:09:b8:b4:31:45:a8:8d:79:
d4:e5:8f:95:31:12:98:9a:3b:a6:da:0d:e6:34:c5:62:6f:3b:
66:db:e0:e9:47:79:7d:b0:06:5e:69:19:a3:f4:30:16:51:36:
92:8a:cc:9d:c2:fb:b6:a4:68:51:cc:fb:b9:e0:1c:4e:dc:90:
13:dd:01:70:80:b4:54:8f:17:16:e1:a1:5d:04:84:9a:c2:51:
13:59:80:23:27:ec:df:18:c5:b0:58:d8:35:1c:41:10:31:a4:
f2:7e:fe:72:ac:ff:ca:04:ba:9c:85:3e:0c:3e:87:c2:5f:fd:
60:87:bd:bd:15:32:dc:96:e3:95:17:df:83:dc:83:d6:98:02:
fa:5a:40:a7:d8:3e:86:4b:02:3f:e9:ae:ea:13:7a:40:65:98:
3b:9a:3e:40:5c:22:68:a6:ef:86:8c:3b:83:10:7f:e9:91:72:
ca:a8:1d:b6:52:88:2d:b5:09:14:c0:c4:6b:9f:1c:01:75:d6:
7d:1e:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org