Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/CA5B8304710311EB9B9D9170C4F9AE02.roa
File: CA5B8304710311EB9B9D9170C4F9AE02.roa (raw, json)
Hash identifier: HBULNUulThkVi4UcaeA9DDscc7ey/7Awj+kgYuYqn84=
Subject key identifier: 03:D4:59:8C:09:99:2C:57:58:D9:C8:E0:72:84:A7:F4:87:77:0F:91
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 031A
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/CA5B8304710311EB9B9D9170C4F9AE02.roa
Signing time: Fri 11 Mar 2022 01:50:26 +0000
ROA not before: Fri 11 Mar 2022 01:50:26 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 141698
IP address blocks: 103.162.50.0/24 maxlen: 24
103.162.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Mar 11 01:50:26 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=622aaae2-52d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:d2:42:74:33:5d:be:08:8c:ae:1b:cd:ac:
52:06:4b:4a:20:9c:94:23:64:de:12:79:13:eb:67:
f4:01:99:85:ed:6d:a9:33:c4:b2:8a:33:5d:3b:96:
bc:f6:fc:6c:0a:3f:9d:7a:70:60:e1:4e:72:9c:78:
fd:06:28:45:28:e3:d8:e3:7c:e9:18:ac:dd:da:e7:
b3:ba:c1:48:b2:cd:50:16:04:4e:1c:e4:23:47:d0:
d2:9e:53:82:fa:02:e1:f9:f7:e7:1c:27:3c:b1:40:
d3:ac:a4:c3:5b:28:8e:bd:3a:53:19:cd:24:78:38:
47:6b:5c:e8:e1:c1:9f:e7:0f:f2:82:df:84:21:1e:
99:79:54:2c:ab:90:7e:53:d1:c9:16:53:1b:c7:97:
36:b1:f1:c9:7b:a0:63:67:40:fd:85:93:7c:75:90:
f2:27:88:0a:47:46:0e:3b:6b:26:a9:28:e1:7d:21:
dc:f8:20:57:7a:81:43:a7:f4:b3:4a:25:dc:7a:32:
32:7d:5e:e8:be:57:c9:2c:1b:73:e3:dd:9f:43:63:
8b:6f:e3:ef:56:01:ed:d4:3b:ff:40:dc:98:81:52:
d7:08:4d:ea:79:fc:5d:67:dd:7e:09:7b:cf:14:fa:
72:3a:08:7e:5e:93:c2:fd:1a:b1:3a:83:3b:22:95:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:59:8C:09:99:2C:57:58:D9:C8:E0:72:84:A7:F4:87:77:0F:91
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/CA5B8304710311EB9B9D9170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:cc:ef:f3:45:b6:97:05:8d:8c:d9:1e:66:94:85:49:e4:42:
2c:59:23:2f:02:c7:77:71:de:a6:9b:53:0e:fe:33:be:6f:a3:
54:5d:a7:ad:eb:46:c0:68:25:cf:ad:6b:2a:f7:61:b9:7b:06:
5b:1b:d1:da:bd:e7:a2:32:a3:26:70:c7:83:4f:26:1d:ba:fa:
d6:bf:6e:82:ec:fc:4f:c1:6d:2d:d9:5d:3b:c0:61:32:12:7a:
55:2a:8e:18:e2:16:81:57:5b:af:8f:b5:89:b6:ce:97:9c:a8:
7d:4b:b1:a5:e9:8b:13:21:59:55:5c:8e:4b:c3:65:f3:ca:23:
b1:43:ca:e3:e7:bf:96:64:59:b7:44:09:d5:c5:31:7c:ed:76:
4f:ea:78:8d:df:cd:bb:34:e4:72:d1:ba:73:bc:92:70:a9:f4:
c9:77:4a:c9:d8:06:e1:4b:d0:ed:16:2f:42:6b:66:37:7a:29:
82:dc:c6:4d:83:94:f1:0b:1c:80:94:ba:2b:97:fb:9e:d4:15:
23:da:35:90:c2:5b:de:e5:a5:68:c9:73:18:88:4c:24:2a:a9:
3c:06:c2:25:6b:b6:83:46:90:e7:96:0b:89:2f:96:18:a3:4a:
29:3e:9c:95:70:d2:36:a3:56:a5:d4:51:ba:81:02:cd:6c:c3:
1f:a4:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org