Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/DFFFD668C3E211EDAD7F6973C4F9AE02.roa
File: DFFFD668C3E211EDAD7F6973C4F9AE02.roa (raw, json)
Hash identifier: Drnfw6hZgap7J3aAvpXaGsa8ew80TWhKDFY2CssFNPc=
Subject key identifier: 7B:00:DB:9C:C0:42:1B:A9:CF:A0:26:71:E4:CB:98:9E:73:18:70:CA
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 0510
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/DFFFD668C3E211EDAD7F6973C4F9AE02.roa
Signing time: Thu 16 Mar 2023 10:11:11 +0000
ROA not before: Thu 16 Mar 2023 10:11:11 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 150774
IP address blocks: 103.162.50.0/23 maxlen: 23
103.162.50.0/24 maxlen: 24
103.162.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Mar 16 10:11:11 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6412eb3e-ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:d0:d0:a0:6e:76:cf:99:b0:15:a2:c2:56:
77:9f:29:86:89:87:dc:3c:4f:13:de:92:9a:06:01:
ee:10:63:18:22:57:13:07:0c:dd:74:04:d4:d0:e3:
89:42:22:9b:3b:13:da:6a:aa:3a:32:d7:7a:d4:1f:
a5:52:90:a1:33:ed:35:be:19:ca:8a:48:a3:f2:78:
f1:c2:76:54:46:32:2c:f7:0e:4c:db:6a:4b:c1:3a:
0a:23:2e:1a:61:dd:61:7c:5a:36:c8:4f:01:df:37:
7a:28:9e:36:76:b7:40:0a:77:09:dd:88:4c:e0:64:
61:36:9f:c9:e3:46:3c:a9:8d:ab:84:5d:53:fb:1c:
27:0e:1b:0b:cf:7d:57:29:09:aa:df:cf:86:56:78:
bc:df:d1:63:f8:0f:cf:9b:9d:82:9e:2e:c9:8f:64:
df:5d:b3:43:d4:dd:8c:90:8f:3e:54:79:5e:e7:4a:
ab:35:e7:3e:58:3c:0f:49:37:60:e7:b3:1b:e9:df:
12:01:6d:a9:22:fa:cc:b4:4c:3d:42:9a:4e:c2:94:
a9:ad:04:38:e3:34:ac:48:c7:ef:c6:2d:fa:e4:8b:
a6:33:f9:66:ce:39:0b:8c:9f:4d:bf:ca:03:a6:3f:
24:85:4e:11:6f:32:52:c2:8d:47:66:dc:53:cf:5b:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:DB:9C:C0:42:1B:A9:CF:A0:26:71:E4:CB:98:9E:73:18:70:CA
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/DFFFD668C3E211EDAD7F6973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/23
Signature Algorithm: sha256WithRSAEncryption
82:7b:3b:33:c6:97:8a:32:42:87:5d:2f:6e:f3:98:5f:a7:84:
bc:a2:29:a7:a9:fb:c5:36:0c:cc:a0:b7:a2:85:2a:d0:38:e0:
97:a9:4f:87:94:86:b5:3e:f4:4b:43:94:26:25:6e:79:56:dd:
0d:b7:cc:ff:2d:e8:e8:62:41:28:1a:5b:b6:22:d2:e2:1a:00:
ab:d5:3b:dd:1f:73:fe:9b:de:1a:1f:a0:59:ee:58:76:d1:9f:
70:c5:c0:4e:56:00:ff:b4:6a:ae:81:0f:61:ca:2e:b7:f1:02:
3f:3c:5c:79:19:c4:1d:07:46:48:22:ec:1e:65:5a:f4:34:2c:
1a:97:ba:88:ca:40:94:21:4f:66:81:cb:7e:cf:49:2e:95:f6:
cd:34:1f:99:5f:6e:fd:cb:0d:82:36:48:c3:69:47:97:3d:39:
35:f7:68:14:fb:23:7f:d9:66:f2:8f:0c:2b:66:7c:4c:cd:08:
02:92:39:a7:dd:08:93:47:9e:0c:c1:aa:d8:64:9c:0c:3a:e3:
8d:d2:bf:8b:92:1b:e9:9b:25:60:93:d1:1d:f2:b1:de:e0:6e:
ca:6f:74:7e:b4:3c:88:5c:b5:90:1d:b2:b2:c2:e2:b6:5f:0a:
91:5a:38:c2:e8:a5:ed:3a:ee:3e:94:09:31:f0:4d:0a:81:ce:
13:48:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org