Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
File: 11C774520C5611EDBBC3A10FC4F9AE02.roa (raw, json)
Hash identifier: +T0noQRIZZ3HpVSqD6A5YfDDwp2f4P7DT9rlIW2OcUI=
Subject key identifier: 03:68:93:66:BF:EC:BA:FE:08:DB:B9:4C:BB:3C:91:96:89:94:7A:64
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 026B
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
Signing time: Fri 23 Dec 2022 04:03:26 +0000
ROA not before: Fri 23 Dec 2022 04:03:26 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 142600
IP address blocks: 103.178.66.0/24 maxlen: 24
103.178.67.0/24 maxlen: 24
2001:df0:3540::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Dec 23 04:03:26 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63a5288d-6999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:e9:25:a4:44:97:a8:2f:6d:9d:d2:31:8e:
d8:3b:41:46:00:cc:56:6f:ec:2d:4d:3c:49:8f:7f:
a0:5f:d1:cf:80:f4:0c:df:af:51:42:a6:7b:3b:e1:
d2:8a:d7:7e:87:3d:16:f1:8c:1b:f0:b6:59:d5:4d:
b7:60:8e:04:7b:1b:cf:2c:36:79:b2:f8:63:35:59:
0f:fa:4d:73:85:66:ba:af:59:d3:bf:f1:f8:22:d2:
67:98:df:c1:33:2f:11:ea:bb:d5:c8:83:0e:45:1c:
39:6c:27:33:5e:1d:6b:d8:f0:f8:f8:42:af:7b:a9:
7b:57:dc:ef:8d:24:d2:03:92:81:48:12:d5:d3:3b:
4e:d1:7e:61:8a:a9:f2:20:a9:8e:3e:27:d3:8d:b1:
0f:6b:76:13:7b:71:b7:b8:55:6f:15:05:5b:96:c3:
00:44:f4:3d:45:53:af:10:03:76:e5:05:1a:69:d1:
f9:a3:f2:3c:0a:99:fa:18:c2:f3:0a:e4:13:6f:fc:
bb:6b:76:64:31:c0:5f:42:1c:18:21:cc:11:8b:74:
79:ff:f0:00:f0:00:95:e9:21:0f:52:d6:67:e1:c4:
d7:5a:d2:bd:e0:ff:3b:19:c9:42:03:6e:60:c1:4b:
68:68:62:7f:54:b9:62:b7:ec:67:9e:49:15:bc:aa:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:93:66:BF:EC:BA:FE:08:DB:B9:4C:BB:3C:91:96:89:94:7A:64
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.66.0/23
IPv6:
2001:df0:3540::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1c:24:e2:62:8b:9d:f8:d7:f7:ba:7b:86:37:44:82:be:a7:
e2:10:35:9e:3f:4e:cd:10:db:4b:27:f6:c4:b1:f2:06:2f:d2:
43:64:b7:13:dc:0d:38:95:27:ed:47:30:50:9a:55:ea:ea:4f:
9c:93:ab:d3:17:18:12:e8:84:d9:e6:88:51:14:8f:06:69:03:
19:71:1d:49:c4:28:49:c5:79:37:f9:87:b0:0b:a5:2d:82:a6:
9d:15:72:25:9f:f9:1a:54:7b:4c:d5:ae:cd:78:af:07:1e:7a:
78:31:a2:df:57:93:a5:c9:af:a0:29:94:f3:ac:8b:de:cf:3d:
0c:66:25:50:7a:a9:72:c1:36:23:b8:2f:ef:22:ad:40:fa:00:
c9:09:54:69:56:75:38:6a:97:ed:ff:ef:a1:40:6b:84:f1:85:
ca:05:d7:af:f6:44:70:ee:02:63:bc:7c:16:68:7c:42:2c:d9:
65:d9:2a:72:01:c9:ed:7b:6f:0e:50:f9:24:a1:d8:b9:6e:29:
84:88:9e:d4:c5:94:68:e0:78:9c:9b:7a:80:56:e0:98:74:38:
8d:aa:e0:e1:e9:95:22:a0:91:fb:18:34:78:ed:02:03:94:e5:
c2:9e:02:6a:9e:6f:0e:30:e3:98:e7:9a:07:86:b5:a9:b3:b8:
4f:a4:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org