Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/539E92186B3611EDAFC69F83C4F9AE02.roa
File: 539E92186B3611EDAFC69F83C4F9AE02.roa (raw, json)
Hash identifier: wxPJ+2mIFEP1A++6h0dOHBuKNDiRrXGMqQueV0ECeTU=
Subject key identifier: E3:E4:4C:B3:F7:64:81:C1:F1:B4:06:65:0D:D1:C5:3B:03:75:42:57
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 02
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/539E92186B3611EDAFC69F83C4F9AE02.roa
Signing time: Wed 23 Nov 2022 13:54:19 +0000
ROA not before: Wed 23 Nov 2022 13:54:19 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 140586
IP address blocks: 103.246.205.0/24 maxlen: 24
103.246.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Validity
Not Before: Nov 23 13:54:19 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=637e260b-eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:bb:81:2b:6f:6c:a3:ea:43:e3:95:05:b1:
46:30:e5:f8:ea:9f:e6:60:9c:80:39:cc:38:ac:f6:
39:a5:00:5d:1f:6c:09:15:db:57:a4:e9:2c:e9:db:
04:18:e3:c2:30:8a:e7:98:9b:4c:75:13:63:91:77:
95:55:0e:c1:ad:fc:7e:56:05:4e:7f:89:e2:9a:5c:
42:63:62:ba:1a:60:c2:10:68:8e:2e:05:b9:f7:1a:
f0:b9:2f:cf:28:bb:02:c4:00:d1:d1:35:f1:6f:24:
e0:5c:b6:65:f0:3a:1f:d4:22:f0:fb:4c:e7:72:ef:
8d:36:75:58:d1:33:ce:af:06:77:8e:cf:42:6d:e3:
9a:b2:5d:b5:23:ac:ef:ee:e0:c0:44:03:62:25:a1:
16:4c:e1:ee:1a:97:c3:98:94:10:e4:42:15:77:f4:
f7:a0:9e:51:17:ed:a3:69:04:b4:81:c3:09:48:1b:
e2:f3:e3:9a:9f:a2:88:d9:41:ac:b7:ff:b2:bd:98:
61:81:01:96:ae:07:fc:c2:cd:07:34:1a:d9:81:be:
8a:7d:ba:fc:66:02:0f:f7:80:fb:b3:cb:b3:24:aa:
1e:9c:d0:25:a2:94:5d:73:f6:cd:de:95:7b:46:11:
ef:bd:f5:09:4d:93:82:7d:63:a9:f8:d0:db:ae:8a:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:4C:B3:F7:64:81:C1:F1:B4:06:65:0D:D1:C5:3B:03:75:42:57
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/539E92186B3611EDAFC69F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.205.0-103.246.206.255
Signature Algorithm: sha256WithRSAEncryption
4d:1a:4c:1c:53:cd:d3:63:3c:01:27:02:86:71:36:7b:3b:8d:
8b:0c:8b:d3:7b:c9:9a:28:c0:06:ff:99:f1:6d:3f:ed:f4:1c:
d9:dd:fa:4f:ed:17:8d:32:41:73:18:3a:96:36:6d:76:ba:8c:
47:20:24:5a:fc:4b:52:4f:dd:cd:a3:ef:08:8b:7f:b6:41:f7:
db:74:44:8d:32:13:73:66:c4:32:5b:fe:1e:38:88:a9:c8:51:
a6:06:4d:60:24:bb:09:47:21:96:76:23:26:38:35:74:44:56:
f7:c0:9c:b4:8f:c3:67:d5:96:80:61:bb:2b:41:13:04:34:3a:
04:ef:d1:a6:2a:4a:66:1a:ae:fc:18:44:1f:3a:a7:8a:da:6b:
6a:99:14:d7:30:df:b2:7e:8d:fb:c4:52:df:66:fb:83:53:14:
e5:16:14:ef:be:85:42:03:b5:8f:d1:ed:e5:9a:d0:9e:e1:f0:
34:e5:ee:fe:fa:34:2a:34:d6:85:94:ca:f8:87:eb:10:86:26:
84:a8:15:0e:a7:6a:54:fd:94:98:37:08:ad:f2:0e:9f:da:d5:
43:a2:46:f8:10:e0:a4:c6:74:36:8b:b4:f8:94:05:13:9e:e1:
b5:51:ab:0f:4e:c4:1a:f4:46:3a:a1:3b:49:a0:32:ce:b1:33:
21:04:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org