Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
File: F1695EAC6FC211ED8B959D32C4F9AE02.roa (raw, json)
Hash identifier: bp1ojgCMFs8kXWnGXnHlWvgVIxpx8scv48k9VZDdSXc=
Subject key identifier: D1:FF:03:0D:69:5A:69:4C:D3:EF:47:39:B7:B8:05:00:AE:05:59:C2
Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial: 047C
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
Signing time: Tue 29 Nov 2022 08:50:58 +0000
ROA not before: Tue 29 Nov 2022 08:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 103.164.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Validity
Not Before: Nov 29 08:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6385c7f2-038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:dc:87:b3:d0:00:2e:39:3d:0f:36:3f:de:
4c:c7:ef:b3:79:16:0b:ca:95:66:5a:77:7d:00:8a:
ee:5a:5b:62:20:1e:8a:c0:24:d0:16:b5:1c:00:69:
ed:1e:dc:51:18:9f:44:34:b4:ff:cf:72:6f:9c:8b:
2c:48:38:91:cd:4b:97:b1:17:15:0a:d4:c2:9d:b3:
cb:0d:0c:0e:99:0e:d2:e8:70:c1:2e:b3:f5:64:d6:
e6:d9:08:54:74:34:76:82:f7:82:48:28:5c:42:e2:
27:37:bc:ed:3f:36:89:af:84:ee:be:e5:b3:9d:16:
b6:d1:af:f2:2d:7b:4b:7b:f6:38:6c:fe:76:4c:dc:
96:55:1b:84:d8:df:28:fe:d0:e2:3a:c6:a3:d7:7f:
b8:00:9d:41:d7:f3:87:1c:a1:a6:11:7d:26:bf:ec:
ee:a1:42:84:8a:e8:6c:8c:d6:7c:43:ee:f2:9a:46:
5c:bb:64:8f:c3:70:5d:0d:c4:1f:3a:1c:97:73:63:
bd:53:78:c9:1e:49:fd:09:dd:41:e1:0d:7d:9b:5d:
3a:b7:79:a9:f0:e2:e6:08:3e:72:2f:3b:5a:c9:40:
46:12:0c:10:ab:f0:3e:30:b7:5f:c0:45:c5:8c:20:
d4:b1:69:0e:84:db:27:46:b5:d8:b7:b4:ff:63:e3:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:03:0D:69:5A:69:4C:D3:EF:47:39:B7:B8:05:00:AE:05:59:C2
X509v3 Authority Key Identifier:
keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.237.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c9:43:24:a7:13:0a:02:bd:2c:32:16:bb:8d:ec:bf:74:84:
73:bb:5f:85:18:e1:ad:dc:17:90:17:de:35:3e:6a:62:03:9e:
ea:9a:52:70:6a:f6:29:b4:d9:d2:c9:f5:0b:5c:61:fa:c6:34:
1b:6f:65:54:2f:af:42:db:f0:c4:ad:60:33:bf:92:da:9e:43:
0c:cf:2f:31:07:37:94:84:f3:c2:85:b5:e9:a2:ff:9d:e4:17:
d2:84:41:3b:14:c8:e8:b3:f3:65:30:6a:b1:83:79:a6:7c:de:
70:4c:a8:7a:35:a2:33:66:d7:25:c5:fd:0e:63:4a:d5:14:eb:
45:e9:2c:40:5b:75:70:b4:a6:39:59:cb:ae:1c:95:f0:58:54:
7b:6c:8f:39:45:8a:a4:33:4f:3d:0d:3f:89:d0:1f:5b:12:e2:
4b:76:0a:9a:d7:86:5d:32:18:0e:ef:53:25:a3:ea:06:85:50:
42:06:ea:52:a2:41:72:c0:85:52:63:ce:72:be:c4:2a:0b:66:
0b:27:e1:af:a4:02:f8:f8:d3:1a:0c:a2:79:b0:31:95:a2:b6:
4c:ee:93:b1:67:90:51:39:d5:47:09:b6:68:01:fd:42:e7:dc:
c7:91:3d:27:11:23:2f:c4:c6:4f:c2:db:3a:95:ca:50:a3:10:
09:fd:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org