Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/58CBDA64113011EBA8684B7EC4F9AE02.roa
File: 58CBDA64113011EBA8684B7EC4F9AE02.roa (raw, json)
Hash identifier: yQTJUH6+Rgzv9YvWvfsUUKcbJUNA3sypjo8kTC/KLtc=
Subject key identifier: 67:C6:80:73:D7:A0:CD:73:9A:3D:A6:86:DE:6E:DE:F3:75:55:17:9D
Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial: 0306
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/58CBDA64113011EBA8684B7EC4F9AE02.roa
Signing time: Tue 14 Sep 2021 12:11:15 +0000
ROA not before: Tue 14 Sep 2021 12:11:15 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 63526
IP address blocks: 103.156.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Validity
Not Before: Sep 14 12:11:15 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61409163-4ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:e1:2a:2e:fb:06:2b:6b:07:26:51:87:9a:
82:37:7c:4f:3b:75:5a:e8:de:89:1a:24:47:74:4b:
a4:b1:a5:a2:ce:95:29:e8:bb:6c:90:d3:00:7f:1b:
e2:29:9f:7f:a3:26:65:f8:48:17:bc:81:a8:62:11:
ad:e6:3a:83:fa:91:03:2b:01:09:65:9b:2f:2c:c7:
13:78:81:0d:09:cb:40:42:38:80:ef:42:2b:d4:32:
60:ac:fb:eb:53:79:ec:17:ca:8a:96:30:6f:ea:6e:
5d:b1:0e:47:ba:8e:1c:91:6b:4a:d6:18:10:be:6a:
3e:7b:6c:e1:b0:f9:62:73:c3:40:0a:cf:70:26:93:
36:fd:14:d9:01:12:fe:94:78:2e:7a:1d:f4:e9:04:
be:0c:27:37:30:14:30:f4:fb:3f:bb:d9:6e:e2:84:
a6:71:c0:57:49:15:b2:55:eb:4b:4c:a7:49:71:62:
a9:d3:4d:38:34:c8:fe:ca:48:c7:f5:68:4f:eb:dc:
4c:7a:bc:38:37:db:2a:c3:f4:d5:ce:51:83:b3:c6:
c5:2a:9b:8e:66:69:21:8c:ec:80:59:00:4d:a4:dc:
d3:e2:93:ad:d1:3c:80:f4:16:ad:e2:8b:9e:f5:fb:
1a:81:e4:32:6c:1a:23:85:83:60:c9:41:cf:a2:bb:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:80:73:D7:A0:CD:73:9A:3D:A6:86:DE:6E:DE:F3:75:55:17:9D
X509v3 Authority Key Identifier:
keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/58CBDA64113011EBA8684B7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ee:da:08:fb:33:c2:6c:c9:35:76:d0:e9:a7:47:c4:2c:06:
e2:92:e3:9c:80:78:f6:e3:eb:b0:7c:84:97:e2:15:a1:0a:dc:
1c:89:e0:19:2a:97:d0:40:02:91:cc:aa:35:72:46:7f:a7:fd:
dc:14:81:ea:03:5b:9c:55:dd:0a:bc:fb:dc:46:a5:12:a6:47:
28:fc:8f:70:9d:00:c9:33:9c:5c:e0:55:3c:2b:ca:d4:3f:86:
38:55:ae:1a:81:73:42:00:27:b7:51:44:19:a4:ed:2a:06:cc:
d0:ba:6e:5a:58:cd:18:3f:ee:fb:dc:f1:1a:ac:c8:35:e1:19:
24:a8:ce:03:d0:7f:12:d9:06:dc:01:60:34:47:61:ae:31:d6:
be:38:04:90:30:d5:19:33:fd:eb:2d:6d:08:df:02:82:fd:c2:
5f:76:81:71:a7:45:0d:f7:0c:db:2e:d7:5e:ab:19:b3:d9:4c:
8d:66:d1:f6:f2:1a:cc:26:b4:c8:27:4c:43:07:da:5a:93:e3:
3f:2d:f4:1a:07:5d:e7:08:75:fa:42:3b:06:93:00:7c:29:40:
44:21:24:d9:e4:ba:0b:bd:62:69:8e:c2:74:a1:69:ec:08:56:
8f:0d:b9:c4:db:e6:a6:83:11:6c:a5:49:fd:87:ed:37:23:94:
f1:80:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org