Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/33EFDA8260EE11ED8FC98084C4F9AE02.roa
File: 33EFDA8260EE11ED8FC98084C4F9AE02.roa (raw, json)
Hash identifier: YXKiDjjE8CSQLlXyTrMYiOlBZezsXRHFdQelkRcnZhI=
Subject key identifier: A5:1C:34:B8:81:F4:19:F8:FE:9E:D6:AD:9C:84:B4:8D:3F:EF:3C:82
Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial: 01BC
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/33EFDA8260EE11ED8FC98084C4F9AE02.roa
Signing time: Thu 10 Nov 2022 11:52:51 +0000
ROA not before: Thu 10 Nov 2022 11:52:51 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 142615
IP address blocks: 103.170.230.0/23 maxlen: 23
103.170.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Validity
Not Before: Nov 10 11:52:51 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=636ce613-183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:63:1b:5a:51:87:a7:c6:3a:4d:8a:d6:47:
6c:bb:90:a9:86:6d:27:c8:ff:ea:e2:27:bc:78:30:
38:cc:84:e7:7a:0c:5f:52:6e:43:4d:01:c9:2e:24:
2c:fa:84:76:63:71:57:88:ee:76:7a:13:86:8c:ac:
95:1e:c9:d9:cf:17:18:42:5e:63:e3:93:f5:75:66:
c2:ad:7f:9b:dc:24:9b:5c:86:6a:a9:ea:e3:61:df:
49:10:57:c6:03:5c:11:fa:23:cf:99:f7:df:d8:d5:
3a:03:64:5e:23:53:12:95:34:ca:77:be:da:a8:de:
a4:d0:ba:ae:61:bc:e0:5a:f3:88:b0:d5:ec:c8:c1:
db:93:20:16:41:f0:85:e9:a3:e1:5a:42:af:50:d6:
58:df:3a:27:0e:3c:50:3a:8f:89:5d:fd:c8:06:06:
e0:58:47:9f:58:31:3a:1a:55:d9:00:53:6a:ab:37:
9e:bb:65:7f:0a:0f:96:62:34:0d:4a:1a:a7:c2:bb:
b6:9b:bf:ad:1e:53:b5:4f:0f:98:bc:2a:f3:f3:03:
8e:e1:2f:c5:bb:79:2a:67:86:f8:30:6d:b7:56:41:
6d:f4:08:6f:98:5d:3b:7d:eb:1a:a7:f7:2c:3a:08:
ba:8d:83:cf:18:90:94:67:c9:87:ea:e0:a8:20:37:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:34:B8:81:F4:19:F8:FE:9E:D6:AD:9C:84:B4:8D:3F:EF:3C:82
X509v3 Authority Key Identifier:
keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/33EFDA8260EE11ED8FC98084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.230.0/23
Signature Algorithm: sha256WithRSAEncryption
98:07:93:04:9d:22:e7:c4:f8:c3:40:fb:fc:b9:79:86:f2:8c:
df:c7:2d:7d:0c:02:64:73:ca:42:61:46:1b:b7:59:dd:9e:23:
58:a1:fe:14:3f:71:f8:1b:86:84:71:8e:a7:9c:2c:57:5d:dc:
cf:b6:6b:4c:a3:93:dc:de:c3:30:5a:f2:2a:04:a7:e6:61:f4:
bc:1c:d5:34:dc:df:ca:2a:51:ef:80:41:d8:25:97:17:9f:c4:
22:14:c0:7a:8c:fa:fd:01:77:79:6f:8c:da:1b:a3:7c:1f:30:
3e:92:3b:ca:aa:af:7a:fe:af:45:a5:8b:e7:78:22:47:0a:a6:
dd:6e:43:63:7d:da:f2:cd:e3:2a:c4:2b:51:27:24:78:a4:17:
43:54:fa:14:9a:1a:e2:be:8e:fa:cc:a2:e7:36:49:0a:da:0f:
bd:a0:9f:ee:7b:d3:7c:e6:8c:fb:94:9c:90:08:a8:61:94:ab:
21:9c:a1:1b:17:ce:a1:dd:ed:a9:14:29:b7:8e:84:5d:2f:56:
ad:e8:c1:3c:19:1c:3a:d4:e6:6c:9f:f7:0b:73:7f:5a:96:47:
3f:cb:a7:57:7d:6d:01:0d:5a:e3:1e:63:f2:8c:e5:08:c0:f7:
e4:49:5d:8d:b0:1e:bd:dd:77:31:c0:9f:eb:54:7d:a5:fd:bb:
0b:85:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:48 2024 by rpki-client on console-fra.rpki-client.org