Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/075690545A6F11ED847D743CC4F9AE02.roa
File: 075690545A6F11ED847D743CC4F9AE02.roa (raw, json)
Hash identifier: x5UsGfg/egjMih1TB+k60zYDCOprIJxj7FAM4AhEiGU=
Subject key identifier: 11:2F:A8:8A:FA:31:51:B2:9C:B6:E5:F8:5B:B6:BD:5D:E0:DA:6F:2A
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0885
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/075690545A6F11ED847D743CC4F9AE02.roa
Signing time: Wed 02 Nov 2022 05:27:23 +0000
ROA not before: Wed 02 Nov 2022 05:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55714
IP address blocks: 103.149.32.0/24 maxlen: 24
103.149.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Nov 2 05:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6361ffbb-78c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:a2:76:80:69:b7:23:dc:73:12:e1:5f:96:
9b:18:24:5a:bc:9c:5e:fb:9a:51:b5:76:0c:94:30:
f9:82:6a:2f:0e:2b:f5:79:72:39:53:b1:1c:7e:11:
11:09:87:9e:ea:b5:a7:56:aa:74:b2:dd:e1:f8:fa:
f4:84:9c:25:99:23:1e:b0:65:1d:92:01:d4:0e:21:
f5:91:8d:1c:4b:4c:b0:ae:16:56:9c:13:72:4d:5e:
88:69:f3:fc:01:72:6f:94:fc:aa:8a:56:e2:30:07:
22:19:a0:dc:fc:53:42:8d:21:da:de:a7:82:ab:78:
fe:90:a9:a1:58:c6:c6:e8:62:08:a8:56:67:e2:c3:
79:8b:7c:ff:b1:ec:2f:cf:75:5a:e4:a4:4a:c0:db:
0f:8a:be:47:2e:a3:6e:30:12:e2:98:a9:aa:e9:84:
e1:97:58:4c:34:30:bc:59:e2:9f:28:39:31:65:b9:
68:d6:17:ce:07:7a:f2:a1:35:1a:ee:23:6b:37:5b:
23:35:06:83:f6:4e:7f:a6:8f:55:72:61:e8:0b:36:
53:0a:08:01:92:dd:b8:fe:72:5f:4d:87:73:f5:54:
e1:03:eb:b8:bd:84:7e:37:da:cf:2a:2a:e9:87:d8:
0a:df:91:9f:c8:1f:cb:c0:8b:a7:fc:4c:8e:8f:e9:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:A8:8A:FA:31:51:B2:9C:B6:E5:F8:5B:B6:BD:5D:E0:DA:6F:2A
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/075690545A6F11ED847D743CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.32.0/23
Signature Algorithm: sha256WithRSAEncryption
21:44:bb:4b:31:77:a9:23:84:f0:29:8a:a5:56:5c:fc:81:18:
a6:ca:86:48:7e:3b:84:60:dc:1c:8c:ec:03:83:14:ed:5d:5f:
b1:9c:a6:ee:c3:e7:af:27:b2:64:bc:1b:57:7f:c9:16:1f:bd:
52:9c:c5:7a:61:cb:24:50:8d:81:eb:46:39:d4:e4:08:71:4c:
b8:00:08:b5:2f:22:04:d7:cc:53:f8:1a:fc:1b:79:96:15:b1:
c7:57:aa:d2:df:59:b7:6a:fa:d8:a3:89:8b:6c:88:77:db:d7:
15:be:b6:6b:4c:6f:61:b1:b7:11:a3:61:c4:d5:53:75:b6:2b:
87:48:2f:ec:fa:ca:6e:63:4c:4f:61:bb:e8:a1:07:66:87:74:
e4:38:15:be:66:55:51:64:22:27:e6:44:77:34:99:ad:09:7b:
02:26:ca:17:bb:6a:de:b0:c3:80:1a:8b:c8:91:c1:cd:bb:bb:
de:fc:89:8d:50:64:91:dc:ab:2c:ef:5a:80:6c:ef:14:5f:1e:
cc:df:b3:71:64:08:c8:cd:f8:d1:cd:6f:b8:ad:e6:66:69:48:
2f:b7:48:9d:64:32:e6:38:6b:27:b6:1c:dc:f4:ef:cd:67:97:
0c:4f:ec:47:f3:ea:7d:30:3f:66:4b:5c:e9:f8:28:4a:77:d4:
b4:fe:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org