Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/DA0557FACC9211EAB5D39F49C4F9AE02.roa
File: DA0557FACC9211EAB5D39F49C4F9AE02.roa (raw, json)
Hash identifier: ay0fAIv78G7DzFyOWxgbK1A5oAQeoc5N7yDFS6hUP5o=
Subject key identifier: 27:5A:8D:D3:A5:39:83:36:B2:23:10:9C:DF:35:F6:C2:49:38:87:AA
Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial: 02BC
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/DA0557FACC9211EAB5D39F49C4F9AE02.roa
Signing time: Tue 29 Jun 2021 11:02:13 +0000
ROA not before: Tue 29 Jun 2021 11:02:13 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 136933
IP address blocks: 103.94.76.0/24 maxlen: 24
103.94.77.0/24 maxlen: 24
103.94.78.0/24 maxlen: 24
103.94.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Validity
Not Before: Jun 29 11:02:13 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60dafdb4-794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:f2:44:cf:21:f4:dc:68:37:8d:d3:6a:8f:
51:9d:ce:7a:92:89:ee:51:88:c7:00:ac:57:a4:25:
32:e9:6b:c9:0c:08:7d:37:d3:f1:65:c7:e8:10:75:
3e:7a:26:ec:c3:1b:54:01:df:33:cf:4e:ea:5e:97:
c6:b8:60:6b:5d:92:81:e6:0c:ea:ab:fc:c3:2c:a6:
e4:29:06:b6:31:98:b5:87:66:fb:17:c5:20:4e:fb:
c3:de:6e:ba:22:85:31:2f:12:db:2f:46:58:58:95:
65:77:61:98:1f:9a:9e:e0:62:c5:d4:e6:e8:4a:77:
ae:ee:f6:56:b8:29:62:26:2b:a0:6c:f0:af:d4:d2:
fe:1d:92:2a:46:54:83:d6:fa:ee:59:e3:fa:e3:00:
6e:1f:85:45:e2:b8:f6:50:b0:48:6b:79:c1:fc:09:
e6:c7:b0:2a:5b:fe:92:56:67:d0:f0:e2:98:8a:a9:
4e:fb:84:86:26:6b:73:7c:81:13:03:c1:a3:20:80:
a0:da:e3:52:b7:ce:52:da:e4:7a:48:08:95:24:12:
4f:18:2d:b9:f7:e0:74:23:7e:fe:ff:2e:f7:ca:52:
26:2d:6b:b2:3c:3d:c0:81:22:16:57:c7:f8:b2:d8:
19:9f:b3:ef:49:2f:83:5f:65:1f:33:10:01:b8:73:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:8D:D3:A5:39:83:36:B2:23:10:9C:DF:35:F6:C2:49:38:87:AA
X509v3 Authority Key Identifier:
keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/DA0557FACC9211EAB5D39F49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.76.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b0:64:e8:4d:20:26:b3:8f:9e:c2:89:1e:bb:f8:a3:12:43:
85:9a:3d:87:ff:c2:aa:c8:7d:e2:6f:3d:4b:a3:e8:c2:52:fc:
42:06:35:62:6b:26:b6:0d:dd:28:1e:e4:93:fb:9d:f5:f0:49:
5c:7c:65:85:1b:39:06:e7:2a:6d:d9:ea:7e:88:45:08:13:08:
d4:f8:18:8f:db:7e:5e:6b:eb:38:fb:7f:12:21:e1:a9:26:db:
eb:0e:75:76:7e:75:58:59:c7:7d:82:71:9d:5f:93:e7:79:77:
7c:b5:4b:c9:51:41:cf:9e:40:19:e4:e2:cf:bd:eb:d4:8e:fc:
76:3d:86:0b:70:d8:1e:f7:b1:b0:1d:b1:1f:d7:4d:38:2e:05:
d4:f4:1d:13:56:39:4c:74:d5:2e:97:96:c3:52:0e:b0:15:0d:
45:07:6f:f1:27:b6:e5:53:69:fb:3b:40:9a:d8:0f:6b:7a:fe:
da:6f:65:d1:ab:4e:86:0a:6d:af:42:e1:38:02:02:a7:6c:a7:
22:ab:eb:6f:4c:33:90:d9:8c:81:70:38:2d:7a:5d:3b:2d:6f:
a7:f7:e6:0e:6a:31:25:88:b8:fb:ae:1e:25:2e:d0:c3:2d:1c:
87:ba:df:c5:7a:98:3b:dc:d4:df:6a:1e:ff:b3:4c:a9:1f:c1:
19:fa:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org