Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DE7DE3BAF9DB11ECB70D8E76C4F9AE02.roa
File: DE7DE3BAF9DB11ECB70D8E76C4F9AE02.roa (raw, json)
Hash identifier: UX0rxiLNPWTmm9lJaYLf449jgzKTSJsMU8fs7CA3Y4Y=
Subject key identifier: 6F:A7:38:D0:E8:DA:F2:B4:E6:90:4F:12:07:57:5D:DB:F7:75:53:66
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 0262
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DE7DE3BAF9DB11ECB70D8E76C4F9AE02.roa
Signing time: Mon 27 Feb 2023 04:13:48 +0000
ROA not before: Mon 27 Feb 2023 04:13:48 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 140849
IP address blocks: 103.179.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Feb 27 04:13:48 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63fc2dfc-0654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:89:a6:c9:66:8e:ef:6a:d4:71:34:a5:55:
a1:2b:f1:9b:90:1b:22:40:96:20:d4:e3:1b:1d:45:
68:e1:3e:27:ad:5c:5c:3b:e3:56:14:b0:28:ff:e5:
96:99:62:04:e4:74:37:b4:d0:39:50:ba:81:43:ba:
1c:b3:cf:a5:58:fe:e4:b6:3f:27:98:e3:68:32:33:
68:9f:b9:4c:f3:0d:f1:29:54:87:bb:19:86:d9:54:
6e:c4:02:f6:43:b6:7b:06:a8:2a:13:43:43:f9:a2:
dc:7e:71:48:9c:6e:22:03:80:a5:94:e1:02:70:7b:
b1:16:12:11:f1:ad:64:3f:79:f9:72:1f:8e:77:1f:
af:c4:79:7e:bd:e7:b1:b1:97:a9:8e:82:ab:26:b3:
b6:89:5e:0b:5f:f0:ef:c9:2e:15:b1:a6:4c:65:e6:
4e:19:b5:74:4b:38:1d:af:41:a2:62:62:bd:a3:da:
a4:d9:0c:89:6c:4a:6e:bc:48:62:90:5a:0d:fa:89:
d7:a4:6e:d6:39:30:45:34:e4:04:fd:1a:0c:df:49:
9d:9d:99:f4:81:af:6b:b5:6e:bd:ab:2d:37:54:d7:
76:98:a8:61:ba:7d:48:f4:29:32:7d:ff:55:86:cb:
7e:1e:43:f7:f1:a2:d2:c8:e5:96:06:49:09:60:4d:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:38:D0:E8:DA:F2:B4:E6:90:4F:12:07:57:5D:DB:F7:75:53:66
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DE7DE3BAF9DB11ECB70D8E76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.124.0/24
Signature Algorithm: sha256WithRSAEncryption
97:52:39:d9:a0:b9:e0:3c:0b:5f:e5:d0:1f:2c:e8:d7:0f:41:
b6:49:87:70:03:d6:20:c2:55:34:9b:f6:7f:ac:23:d0:41:62:
36:05:52:7f:d3:15:27:2b:b7:f7:9c:a2:26:ed:a1:0e:5a:9a:
b2:c1:df:64:6c:f5:82:23:cc:b0:d1:b9:c9:35:f0:e4:20:96:
4b:76:9c:c7:3b:19:48:00:29:69:17:f1:14:60:f8:e1:49:b8:
a5:74:63:7c:55:2f:94:f0:b1:57:59:7c:72:de:15:14:f3:36:
5d:b8:90:6b:55:3e:98:61:c8:66:83:2f:3b:eb:84:1a:d1:11:
17:96:aa:7b:7b:b2:71:06:00:34:94:3c:d4:81:27:d5:09:39:
74:f7:6f:03:ff:9d:7f:91:69:14:04:b6:2c:cc:c6:6f:8b:95:
dd:54:3f:06:fd:bd:48:20:9e:17:dc:f9:c4:a9:ba:f9:4e:11:
1c:04:d2:0d:26:1d:08:9b:80:d4:e3:26:f0:db:4e:7b:8b:7f:
ab:5e:d7:44:9d:dd:80:90:fc:33:3c:9e:9b:ac:44:4d:af:50:
9c:99:12:f6:40:f0:a6:a3:9e:9f:6e:98:60:76:ee:ff:8f:45:
ea:b2:d5:d6:5e:a7:ed:01:e3:71:25:c5:59:15:5f:83:3a:68:
40:97:15:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org