Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/567EDECCE90E11EA998F5735C4F9AE02.roa
File: 567EDECCE90E11EA998F5735C4F9AE02.roa (raw, json)
Hash identifier: RUgibTkP+RCuMzgkYMWub9p0u9YqtJ3QeBVvT3RiR5w=
Subject key identifier: 16:AC:10:EA:52:AF:D3:1B:A3:6A:6A:14:0B:27:38:C9:14:A4:9C:4E
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3051
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/567EDECCE90E11EA998F5735C4F9AE02.roa
Signing time: Sun 17 Oct 2021 09:40:39 +0000
ROA not before: Sun 17 Oct 2021 09:40:38 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 61317
IP address blocks: 103.230.68.0/23 maxlen: 23
103.230.69.0/24 maxlen: 24
103.230.70.0/24 maxlen: 24
117.121.243.0/24 maxlen: 24
117.121.245.0/24 maxlen: 24
117.121.247.0/24 maxlen: 24
182.54.238.0/24 maxlen: 24
182.54.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12369 (0x3051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 17 09:40:38 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=616bef96-0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:8f:31:4c:b3:9d:b3:b6:34:02:45:82:b7:
c0:94:0d:8a:6c:ac:47:b0:d2:02:4c:dd:eb:b4:a0:
98:05:f3:04:01:b8:b7:84:e8:6b:a7:1f:f4:30:44:
e9:08:32:bc:7e:44:dd:48:bb:0e:3a:f3:26:1e:f8:
b8:01:10:23:11:45:9b:d3:ed:76:e2:5b:b2:85:cf:
94:c4:61:6c:68:30:0f:78:03:9b:9e:5f:04:5a:61:
c6:57:a5:82:4d:d9:6f:c0:26:4d:4b:cf:3f:38:1a:
df:80:62:62:4e:dc:0d:9f:f9:9e:03:e9:9c:c9:d7:
3d:ee:3c:2a:af:fc:1f:fd:df:e4:37:c0:7e:3c:3f:
fa:e1:c8:5f:89:2d:a3:23:07:b7:45:37:ce:15:a5:
7f:57:dd:1f:f2:8c:36:42:b3:1b:10:f0:c4:c7:2c:
49:a6:ff:4b:08:47:8a:13:06:ba:b7:ca:6d:30:f9:
0f:48:11:69:a0:5a:fe:64:8d:c1:9e:32:00:6b:c1:
04:f0:f9:86:9d:f7:10:a8:7f:f0:ba:0a:8c:2c:4e:
b5:ad:a8:84:2d:00:f5:b4:f9:05:a0:b9:f2:87:92:
db:4f:e1:8f:aa:e1:e9:5c:56:22:b0:f1:17:f7:f1:
69:a6:ea:36:ed:91:49:58:08:cc:05:3f:79:c1:b3:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:10:EA:52:AF:D3:1B:A3:6A:6A:14:0B:27:38:C9:14:A4:9C:4E
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/567EDECCE90E11EA998F5735C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0-103.230.70.255
117.121.243.0/24
117.121.245.0/24
117.121.247.0/24
182.54.238.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:6d:94:45:09:a2:df:d1:fc:09:8f:d8:57:bd:c4:26:74:92:
3a:3c:a5:9c:fb:2c:88:06:d4:25:5a:87:a8:00:06:ed:b4:f1:
d3:1b:a0:4e:66:47:58:b1:ff:ce:23:34:e7:a4:5d:92:e1:60:
89:e0:03:8d:11:d3:89:e6:b2:a8:d7:a5:e4:ae:ce:b6:95:71:
25:d1:3a:f3:8d:9a:b7:80:f6:4b:9b:85:94:f6:62:1f:12:67:
c1:b4:f0:c4:93:a2:10:15:2c:20:5d:64:be:a4:0c:84:6f:61:
2c:be:1d:1e:5a:74:00:9b:45:a9:19:1c:ba:97:97:21:14:48:
4e:f6:f7:87:05:f3:a4:55:dc:1a:f9:94:98:30:84:e1:49:bc:
a4:47:be:b5:49:11:74:8e:56:1c:6d:b0:bf:e0:94:78:d4:9b:
99:63:2a:19:3d:e9:07:0d:cf:1b:da:11:f6:22:ed:97:90:11:
a9:eb:d6:5e:b8:ad:29:93:b9:01:ed:9a:1b:10:cb:05:fc:75:
53:fc:b1:b9:53:b5:37:61:d8:65:09:37:05:ac:2e:0c:f0:bd:
ab:71:f9:24:95:e7:7e:02:58:6d:bc:48:82:6b:14:44:1e:75:
3b:db:21:35:8c:0a:ad:50:fb:8d:cc:13:12:7e:8a:97:7f:ad:
fa:61:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org