Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/D4681ED4D48511EC86A1AF45C4F9AE02.roa
File: D4681ED4D48511EC86A1AF45C4F9AE02.roa (raw, json)
Hash identifier: Fn//3LPDQTPFTkfudmxxK+AA9Vsb6t1HhFtpJNYKmRA=
Subject key identifier: FE:6D:B1:B0:3C:DE:08:31:9A:FA:F9:6C:48:E9:78:3A:97:50:B4:32
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 0123
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/D4681ED4D48511EC86A1AF45C4F9AE02.roa
Signing time: Sun 15 May 2022 19:33:01 +0000
ROA not before: Sun 15 May 2022 19:33:01 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 137871
IP address blocks: 103.178.66.0/24 maxlen: 24
103.178.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: May 15 19:33:01 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6281556c-d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:5f:f9:06:2e:b2:58:ad:47:6a:bf:aa:8e:
95:f9:a6:64:e6:18:c9:71:ca:7d:1e:98:90:78:3e:
68:96:3e:65:29:23:14:95:6b:b3:34:4f:e8:60:03:
63:3c:7a:6d:b0:72:a6:59:7a:5b:98:84:d6:ed:2e:
8b:b3:6a:a7:7f:17:a0:6f:57:b0:30:69:24:e5:fe:
56:7d:18:33:ad:79:59:4c:b0:67:00:49:cf:4d:c4:
3e:68:c2:a4:aa:12:ec:24:93:10:21:e7:c6:ca:93:
e0:7b:9c:f0:3f:f6:24:74:83:b4:51:06:01:73:1f:
0b:2c:c1:a2:dd:72:48:ee:63:50:81:6b:e5:b7:91:
79:e4:ce:67:c1:42:b6:98:27:c4:ba:04:93:56:0a:
b6:e4:57:f7:83:fa:4c:44:79:ea:d8:35:8d:a2:8e:
33:ae:3a:6e:57:2c:7e:f7:76:90:6c:63:a4:10:1d:
dc:55:3d:82:41:bf:f3:c9:a0:08:9d:f6:c9:1a:c2:
a6:57:09:0c:7d:ca:ef:80:e0:93:b0:38:da:ef:89:
a2:78:e7:df:35:ec:2c:bd:0c:ac:bc:24:ef:85:50:
40:84:33:d2:fb:01:ef:e7:e6:1f:bf:8d:61:97:48:
26:37:9f:35:8b:4e:c1:fb:73:41:53:08:24:f0:0f:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:B1:B0:3C:DE:08:31:9A:FA:F9:6C:48:E9:78:3A:97:50:B4:32
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/D4681ED4D48511EC86A1AF45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.66.0/23
Signature Algorithm: sha256WithRSAEncryption
be:ec:dc:b9:7e:0c:03:cc:59:cb:e1:14:2e:e0:c8:e9:26:8c:
a6:15:f1:22:15:6d:cf:42:6c:f3:0d:92:3e:98:65:59:d8:41:
4d:11:d7:1f:30:7f:65:e4:e4:1f:56:01:3d:7f:bb:5b:45:cd:
aa:df:c7:54:de:51:24:2f:fc:10:06:72:54:8d:cf:38:b6:1c:
63:41:fe:3e:5f:21:70:b6:9c:1b:59:d9:5f:57:4e:f8:1b:f5:
cc:5d:73:7e:4f:e6:7f:e9:40:32:68:2e:4b:ce:ce:e8:f0:47:
6a:d8:2e:a4:86:19:c9:ec:86:94:56:63:9e:29:5a:4d:a7:5c:
bd:2d:6f:38:7f:3a:d8:16:b9:13:b5:ab:94:50:fd:27:45:ff:
77:4d:f6:c6:67:0e:c7:99:36:7c:1f:29:cb:d7:06:34:03:58:
4c:ad:cc:f6:99:e5:e7:e9:da:e6:3c:75:53:09:81:4f:83:b6:
05:ff:34:f1:4d:b0:45:59:54:be:dc:aa:05:64:8e:df:20:3c:
72:16:b2:b2:24:71:c2:a5:b4:6d:f7:a4:4d:ed:5e:23:54:2e:
bf:75:ee:91:84:15:27:15:14:41:7a:79:9c:c4:74:50:f4:bf:
d0:31:e3:ad:62:64:77:c1:30:14:5d:bf:f9:1d:0d:7c:d3:1e:
d6:04:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-ams.rpki-client.org