Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
File: E5599F266ACA11ECA4391B3AC4F9AE02.roa (raw, json)
Hash identifier: L20wqAccEGuEOXJFugxscbkTYOiP3XIgpdOswS5K1Hk=
Subject key identifier: 71:CA:98:8B:DD:42:73:9F:DD:F4:E8:3E:79:CA:17:8F:7A:CE:C4:D5
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 0317
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
Signing time: Fri 11 Mar 2022 01:50:23 +0000
ROA not before: Fri 11 Mar 2022 01:50:23 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 134599
IP address blocks: 103.162.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Mar 11 01:50:23 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=622aaadf-953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:0a:72:5e:73:7a:45:8c:7a:35:37:ba:92:
3e:f7:c8:dc:ff:43:bb:65:6c:01:73:f0:9a:9c:cd:
75:e2:ba:c9:e0:32:ea:d0:55:b8:c0:48:6f:ab:d3:
a4:a5:b3:59:54:97:68:f2:89:d9:51:e8:63:8f:05:
7f:00:b3:f5:e5:2d:f7:81:c4:9c:f9:22:d6:4f:50:
54:37:cd:dc:10:c5:70:aa:c0:87:09:04:88:d0:e5:
8b:19:ed:3d:38:e2:9e:83:05:38:bd:91:9f:22:37:
68:f9:fe:d5:1c:99:cd:90:ca:25:62:d9:82:bf:49:
68:b9:9d:ff:53:5f:ff:45:3e:b8:44:c8:73:0d:42:
30:aa:8b:57:4f:57:07:42:a2:e5:54:76:cd:88:aa:
b9:07:bd:00:5f:70:72:15:35:c4:b9:8c:11:6b:00:
0d:c2:5d:b5:8e:7b:7f:c5:91:8d:95:1c:96:f2:6a:
e5:2e:e1:3b:e0:7f:8e:10:84:15:0d:3d:cd:fb:fe:
e4:6b:42:24:6b:d4:1d:43:84:65:c5:a5:93:13:ec:
4e:a5:ef:8e:f2:cc:bd:fe:ce:db:b9:6c:c7:21:d3:
e7:ba:29:5e:e8:3f:58:a0:03:34:cf:0a:54:56:5c:
72:80:4f:d0:40:9f:0a:77:cd:59:22:fd:72:58:53:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:98:8B:DD:42:73:9F:DD:F4:E8:3E:79:CA:17:8F:7A:CE:C4:D5
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3a:cc:1d:85:53:50:f3:65:72:11:aa:db:06:c7:69:1b:a9:
b1:8a:02:7b:f6:1e:3c:b1:1f:8a:40:92:84:a8:a9:6c:9e:29:
ce:3c:b3:5e:6c:42:3f:42:7a:ba:56:b4:e7:31:ad:4a:e0:8c:
92:ab:78:4d:36:4e:a9:37:b1:d6:fc:a9:77:97:36:5f:54:f4:
57:8f:39:3a:b7:b7:dd:2a:75:52:a2:70:20:ba:4e:fc:e7:c1:
de:43:6a:ec:8e:7c:9f:3b:85:72:10:32:05:ab:8c:bd:f1:88:
05:22:ee:9d:fa:5b:92:fc:f5:a6:e7:23:6e:af:42:eb:c5:96:
c9:77:8f:5b:52:57:fa:d7:f4:9a:49:22:72:46:e6:16:cf:e0:
5e:cb:1f:c4:06:ab:7c:28:83:8e:b4:e5:7b:4a:1f:c1:54:e1:
26:02:ac:fc:c9:e8:1c:85:7c:0c:08:33:fd:96:7b:72:68:14:
bb:22:d4:b5:60:0a:01:9b:1e:fc:6f:82:84:ab:a6:f1:38:89:
6d:37:aa:13:05:4d:44:e7:e1:db:78:42:a7:91:75:d3:50:50:
c9:83:d1:29:01:bd:93:23:b9:44:60:aa:ca:58:ac:da:82:d5:
3c:b6:d3:f8:df:81:d5:cc:90:bd:72:2f:6f:39:3b:18:1b:1a:
09:a0:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org