Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/EA5664ECBBF411ED84109E51C4F9AE02.roa
File: EA5664ECBBF411ED84109E51C4F9AE02.roa (raw, json)
Hash identifier: aY84AMwGFgd0pGVLgMXSJLrMeuUrYbvn26I5+aQyGQc=
Subject key identifier: E7:26:CE:67:46:33:EC:DC:87:1A:D0:A2:6A:6D:A3:FA:BE:98:8D:C0
Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
Certificate serial: 3316
Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/EA5664ECBBF411ED84109E51C4F9AE02.roa
Signing time: Mon 06 Mar 2023 08:00:10 +0000
ROA not before: Mon 06 Mar 2023 08:00:10 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 103.16.102.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13078 (0x3316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
Validity
Not Before: Mar 6 08:00:10 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=64059d89-0ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:c6:08:5f:41:94:d3:4a:4e:52:51:c3:b8:
40:66:fa:35:6c:86:4c:63:0a:e4:75:9a:24:ce:3d:
3c:a8:e4:b2:9b:8d:08:75:93:15:15:60:6c:23:e4:
88:0a:c1:89:86:b0:08:3c:07:5e:64:b2:5b:ce:e1:
d7:28:49:64:8e:f7:2b:2d:fa:9b:1d:2a:96:d0:50:
a2:e7:4e:89:51:df:c2:b6:0b:03:06:4b:f8:56:b1:
e3:e8:5d:ee:e9:58:b9:de:54:5f:f7:dd:58:53:ad:
ba:e0:aa:ac:5d:c6:6f:94:03:5e:f5:93:76:28:6e:
2e:94:2b:f3:c7:3e:7f:3c:3b:49:19:05:e2:64:11:
8a:0c:af:1b:64:10:02:3e:c6:60:9f:e3:9f:cb:77:
5a:40:e5:e8:e3:87:af:29:42:4e:db:4d:03:6e:32:
74:a1:cd:97:75:95:c7:06:09:cc:04:c6:94:8d:fe:
a9:b6:f3:1c:ba:dd:75:a0:d5:8b:18:93:42:98:ad:
ee:48:63:be:99:c6:ff:50:e1:fd:5b:86:05:19:95:
ce:38:07:11:e9:4f:90:65:ee:75:7d:e7:39:cd:7f:
bf:32:78:eb:93:f3:68:d5:8f:5f:63:59:29:1e:03:
33:8f:e3:52:50:26:a9:2f:e3:04:ab:07:5b:c5:8a:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:CE:67:46:33:EC:DC:87:1A:D0:A2:6A:6D:A3:FA:BE:98:8D:C0
X509v3 Authority Key Identifier:
keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/EA5664ECBBF411ED84109E51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.102.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:e1:33:d4:97:35:1e:9c:30:34:a0:bc:43:e2:26:36:11:67:
90:5d:d9:b6:c1:dc:5b:d8:89:4b:ff:67:c5:22:56:41:88:27:
4a:c6:9d:a2:40:38:ce:e9:a7:4e:66:e1:bd:b9:6d:7c:02:c7:
d0:7c:da:bd:7a:06:74:32:06:a2:4b:9a:38:92:4b:26:62:4d:
9c:87:df:5d:e1:39:86:f0:75:87:b8:06:f6:83:32:98:d6:21:
56:f1:01:c3:ce:3b:c6:d6:2f:68:a1:0d:93:2d:ca:35:a3:3f:
97:f7:92:93:50:14:5e:79:1c:2e:21:a1:db:5b:a5:ef:2f:b9:
7d:e8:97:db:e3:62:e7:e2:cc:be:78:1d:79:a6:b7:8f:39:17:
a1:fd:78:1b:3f:02:03:39:be:ec:2d:15:1c:b6:21:ce:ae:bc:
0a:4d:e1:98:16:bb:de:eb:7e:83:a0:33:7c:66:0f:f3:5b:4d:
fd:92:41:fa:d4:33:ab:3e:c4:79:37:b8:32:37:6c:a4:35:5b:
b0:08:d8:cd:03:20:8a:da:19:73:8d:5d:55:0e:e4:0a:f4:33:
dd:8f:d7:b3:f1:b3:58:2c:65:a5:fe:35:35:18:f8:68:df:3c:
83:b6:d7:21:4a:50:a6:e1:85:98:b2:2b:04:22:1e:b1:43:0f:
cb:f8:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org