Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/507FF290D7C311ECA4ADFB70C4F9AE02.roa
File: 507FF290D7C311ECA4ADFB70C4F9AE02.roa (raw, json)
Hash identifier: CeMlGrVkrcejU+sBfkZg3cNdyhACvLY/Q8SzOA1eRPc=
Subject key identifier: F9:36:97:69:94:E0:EA:59:92:0F:4D:C7:1A:78:3A:AA:0F:D9:1B:49
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 320A
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/507FF290D7C311ECA4ADFB70C4F9AE02.roa
Signing time: Thu 19 May 2022 22:30:41 +0000
ROA not before: Thu 19 May 2022 22:30:41 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 61317
IP address blocks: 103.230.68.0/23 maxlen: 23
103.230.69.0/24 maxlen: 24
103.230.70.0/24 maxlen: 24
117.121.245.0/24 maxlen: 24
117.121.247.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12810 (0x320a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: May 19 22:30:41 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6286c511-e628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:7f:07:d1:0c:4f:1b:68:4c:20:d7:a9:e5:
df:b3:93:ba:bb:e7:64:69:c2:92:10:80:11:31:04:
8b:19:3e:72:78:5e:04:7d:e8:ce:f4:10:17:bf:0c:
ed:0f:7b:fa:8a:2a:da:b3:7d:c2:e7:3c:f2:e2:71:
ef:99:cf:a5:6d:a6:2d:58:bb:1a:d5:44:8d:53:9c:
58:d4:e2:a9:70:03:90:dd:72:b8:ee:14:fb:4a:67:
46:15:63:16:d7:74:81:ab:65:0c:c3:9d:47:06:cc:
86:b9:69:6c:52:d9:d7:27:c4:82:b4:09:4d:1c:48:
19:82:74:20:de:36:a4:41:e9:50:22:f0:a5:b1:95:
90:39:d9:14:28:05:2c:55:bb:6f:79:be:32:91:57:
cb:6b:97:80:de:2b:f0:ac:04:cc:0c:3e:66:94:bf:
37:c1:1e:f7:11:b9:c6:58:f3:07:1e:bd:0f:f2:41:
1f:43:ac:a9:2d:21:b1:15:b6:50:bf:c8:a4:23:f4:
81:48:1c:18:22:10:fe:68:ce:26:5f:cf:e9:f5:87:
67:3c:75:0e:54:27:cc:87:01:c4:9f:f0:28:12:71:
48:e1:22:d6:2b:ee:ea:63:32:cc:8b:85:02:55:b6:
4d:4f:96:b7:9a:79:ec:be:d5:82:2d:07:cf:9f:b1:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:97:69:94:E0:EA:59:92:0F:4D:C7:1A:78:3A:AA:0F:D9:1B:49
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/507FF290D7C311ECA4ADFB70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0-103.230.70.255
117.121.245.0/24
117.121.247.0/24
182.54.239.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d0:df:f1:12:83:b6:0e:5f:8a:23:d3:5e:80:6f:b1:f1:a4:
1a:2e:00:8b:ca:3d:47:f7:d0:1a:62:9d:6d:b0:a2:f9:50:9e:
89:95:de:01:1b:7e:d6:2a:b1:ed:54:fb:2c:1c:5d:86:81:a1:
8a:3b:53:de:c9:c3:f7:58:aa:62:45:85:72:04:68:1e:27:81:
0a:b2:a5:ae:47:36:97:48:2f:fd:c0:db:fa:cf:8e:ed:aa:25:
3f:39:53:2b:a8:5f:ad:e9:ee:43:10:d9:36:27:ea:55:f5:75:
54:62:10:eb:d6:79:45:18:95:52:dd:5b:d4:20:fc:a3:27:52:
c0:8d:74:2f:26:c5:00:14:26:65:3e:e9:a1:9e:95:9c:9f:37:
79:56:53:0d:05:bb:a8:17:b3:d6:5e:91:5b:b4:7d:62:83:e4:
8b:03:3d:19:7f:58:67:34:29:d1:24:fa:99:c7:e6:49:b5:42:
4d:cf:c3:9c:a4:0a:c5:ad:af:9a:a9:2b:16:6d:7f:b7:75:4f:
53:96:09:2a:86:f5:40:3a:be:6d:ab:e1:74:b7:c9:97:4c:9a:
31:4d:65:66:ee:6a:9f:65:31:8b:d9:64:32:a4:14:ff:fa:22:
85:0e:74:f5:5f:9f:1f:be:ed:8c:27:a3:c7:2a:81:2a:ed:bd:
49:1f:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org