Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/1E345B20D19A11EC81A8B80DC4F9AE02.roa
File: 1E345B20D19A11EC81A8B80DC4F9AE02.roa (raw, json)
Hash identifier: k++YbLLqkKMWmzKTZ/K8XupPLSu+X7kw5cGI/qAn4Vk=
Subject key identifier: 25:7F:38:09:49:31:3C:EE:B5:14:AE:A0:2D:28:A2:25:82:9C:79:6E
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3334
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/1E345B20D19A11EC81A8B80DC4F9AE02.roa
Signing time: Sat 01 Oct 2022 15:11:09 +0000
ROA not before: Sat 01 Oct 2022 15:11:09 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 8100
IP address blocks: 103.230.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13108 (0x3334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 1 15:11:09 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6338588d-bb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:ec:86:fa:20:f7:6d:6d:96:30:d5:ec:82:
69:5f:24:32:61:14:96:4e:3f:5b:2e:0f:0c:21:2b:
4e:d8:bf:bc:a9:04:7b:7d:d1:25:f9:1e:7a:d6:43:
bd:2f:31:ca:be:92:79:fe:d3:01:56:f7:ca:c6:30:
42:54:09:0c:76:88:39:53:d5:0b:af:92:83:d0:a1:
9c:42:80:c5:22:99:d6:f5:03:e1:a5:2d:f3:3f:8e:
78:74:63:d0:de:e9:ed:0b:ff:ee:7e:a6:24:b1:84:
33:ac:7a:f1:7e:45:39:c7:90:ac:db:1d:f3:65:82:
ac:2d:8f:63:40:67:d1:80:64:f5:52:0c:6f:5e:5a:
e5:0d:fe:b4:42:f4:c6:c4:e7:37:8a:58:58:8c:51:
71:cc:b4:d3:76:a9:7f:aa:28:a0:0f:a3:2f:f2:7b:
72:b6:97:a6:84:67:c0:c6:6e:c3:61:ad:6f:55:0e:
87:2c:ee:3e:b2:b1:60:76:b0:3d:cc:34:60:a9:ec:
68:b0:d7:4a:6a:55:6f:16:20:55:72:78:91:a8:d1:
1e:93:02:20:fd:a4:f2:57:74:34:e3:dc:82:73:59:
2b:e4:59:17:45:6d:f2:c1:ff:81:25:db:3f:30:aa:
15:e0:bd:39:48:db:45:13:20:cd:39:8d:70:b9:2b:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:38:09:49:31:3C:EE:B5:14:AE:A0:2D:28:A2:25:82:9C:79:6E
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/1E345B20D19A11EC81A8B80DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:07:98:de:ed:00:f8:70:e2:25:ed:b4:17:77:54:40:2c:06:
7c:99:02:4e:d5:7d:06:d5:1b:97:90:93:97:48:92:88:e7:a9:
c3:01:c7:3b:69:bd:4d:89:c9:2c:bb:a2:19:65:8c:53:de:81:
2e:49:a3:73:b2:27:87:46:48:c1:77:3c:5a:b8:27:16:77:62:
ac:f3:f3:c1:41:d3:96:1f:ad:d6:9f:fe:17:7c:b2:d9:b5:f2:
e9:8a:15:49:79:5b:15:6e:28:84:e8:d4:09:ad:63:2d:ea:f0:
40:36:8c:03:16:ca:3f:3f:f9:d2:ca:45:a1:3d:d4:b7:7d:3b:
08:5a:d6:7b:5b:1a:05:ab:b8:59:20:bb:c4:fd:67:6d:8e:f6:
5b:40:a9:5b:3a:5c:d9:ee:ca:ff:7e:e8:55:c1:c8:73:30:48:
65:e5:37:5b:93:12:e5:6f:df:ca:bb:79:75:4b:4a:c2:38:f5:
77:54:65:1d:b4:28:f2:cd:61:fa:61:73:8e:de:ff:60:cd:7d:
02:03:23:49:52:6a:98:c6:71:c2:46:f0:75:cd:8b:c1:ab:da:
9d:86:56:14:12:e4:23:1b:01:17:de:1a:1e:62:8a:46:52:60:
ae:bc:5a:23:7f:02:16:83:db:eb:0b:2d:70:02:7d:f1:bf:d3:
8a:7a:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org