Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/FE45AEA0747311EC80E0BC47C4F9AE02.roa
File: FE45AEA0747311EC80E0BC47C4F9AE02.roa (raw, json)
Hash identifier: fLqi6m9ZGJETMAZZAmqU6/SC8a5exWu4et/yLjxPVMg=
Subject key identifier: 42:E8:43:A9:43:60:C8:05:A8:FB:35:21:F6:EC:1C:DE:64:98:C0:57
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 04
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/FE45AEA0747311EC80E0BC47C4F9AE02.roa
Signing time: Thu 13 Jan 2022 13:23:28 +0000
ROA not before: Thu 13 Jan 2022 13:23:28 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 140849
IP address blocks: 103.179.124.0/24 maxlen: 24
103.179.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Jan 13 13:23:28 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61e027d0-6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bc:36:d3:0f:4c:bc:bb:1d:46:25:87:85:ea:
ec:41:0a:20:0a:ee:89:da:b8:bf:70:dd:2a:e5:87:
6b:1c:53:fd:db:39:68:7c:ef:fb:a5:bb:66:4b:8e:
7a:1b:e0:02:6e:1f:00:b6:af:c6:86:d0:9b:39:cd:
d8:96:9b:d9:ce:38:8c:88:18:3a:65:a8:9a:7c:95:
7b:c0:4e:6a:e7:ef:f3:60:28:97:b0:21:18:ed:df:
85:74:ef:a9:4b:29:f4:71:58:9b:95:2f:40:02:b7:
f5:6e:96:cd:9f:75:26:a9:2a:fc:54:0b:dc:28:fc:
15:da:9e:c6:53:e9:52:e4:18:77:3d:74:ce:ec:07:
8b:ec:09:0a:9c:7a:4a:6b:1c:da:47:23:49:c9:8f:
77:92:6c:49:e6:69:f0:56:5c:58:8b:cf:31:f0:ea:
14:5d:07:db:02:8f:ee:1e:83:a9:05:59:19:e7:44:
98:54:4c:d1:35:e8:e5:e7:e7:19:27:ac:3a:8b:ca:
59:c4:cb:60:85:a0:31:8f:b3:cf:df:77:8a:36:a0:
e5:c8:5d:50:f0:d1:9d:c5:2e:94:6c:70:08:23:d8:
c4:eb:76:d3:e1:60:9c:8e:38:83:a7:8d:5b:17:06:
99:a1:94:62:42:6b:14:f1:33:d5:64:b6:a4:88:39:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:43:A9:43:60:C8:05:A8:FB:35:21:F6:EC:1C:DE:64:98:C0:57
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/FE45AEA0747311EC80E0BC47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.124.0/23
Signature Algorithm: sha256WithRSAEncryption
57:e3:a6:16:e6:52:3e:43:d6:99:0c:51:01:92:27:b9:04:a3:
fd:2b:ce:bc:34:fd:58:4e:4f:da:2b:1e:dc:c3:32:e8:b6:dc:
7c:6e:89:8b:7c:b8:7c:2f:85:5f:a7:8e:4c:20:12:14:53:d9:
a8:d3:2a:9c:ec:1d:97:c1:8c:51:84:e8:a5:91:94:a9:62:4d:
73:8e:09:48:c6:d9:d6:80:7b:94:fc:17:56:9e:1c:aa:28:be:
05:e7:ed:ac:15:43:fb:bc:ff:4b:36:80:5b:da:75:f0:f1:5b:
56:c8:b8:11:e1:4b:52:49:2c:c8:fb:f9:42:dc:64:53:b7:0c:
15:a9:7f:d7:21:18:07:52:8f:6f:17:bb:b9:5c:99:6c:81:5c:
18:90:a6:ee:c5:3d:f3:2f:8d:9e:4e:b6:b9:6b:ec:5c:c9:2f:
f8:68:2c:3f:68:bd:06:47:21:1c:9a:9c:f2:f4:8a:36:1b:75:
75:f7:ca:cf:50:0f:c2:03:7a:dd:50:f7:39:50:04:48:03:9e:
cc:88:83:e9:4f:7b:f6:ef:be:ce:46:e4:04:37:bd:f9:3f:7f:
fd:63:37:73:06:bc:6b:5d:18:88:26:39:e7:01:9c:2d:55:66:
59:7b:9d:e8:f1:94:eb:46:82:ab:51:db:ba:30:11:5f:d0:d3:
a5:4d:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org