Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
File: 53CA93624BB611EDA5F60157C4F9AE02.roa (raw, json)
Hash identifier: u5udZr4OIhecOsYlycFji1Qgcx4cTBm7jUaWLEkhNXU=
Subject key identifier: 88:CC:2F:A2:BD:2B:9F:EE:E6:AD:E3:3D:50:41:6C:01:55:95:F5:63
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0510
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
Signing time: Fri 14 Oct 2022 11:49:59 +0000
ROA not before: Fri 14 Oct 2022 11:49:59 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 137510
IP address blocks: 103.226.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Oct 14 11:49:59 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63494ce6-8976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:b9:7e:f9:12:72:51:b9:fb:96:4a:80:80:
2d:9a:da:97:fa:90:1c:16:73:fc:48:66:82:61:03:
a5:82:2d:99:fd:7b:ba:f0:00:8a:5f:d8:87:e5:bd:
ec:0a:96:b2:04:46:bd:7e:93:b5:88:8d:a7:ea:f6:
2c:d9:08:c0:ad:33:40:42:6d:2d:c4:b5:ad:1c:df:
ac:34:c3:11:60:ad:e4:e7:21:55:30:8f:c0:d2:6e:
6d:cf:fe:85:b1:00:9d:62:7b:a9:df:7c:9f:66:cb:
27:93:0b:2b:88:dd:ff:9d:90:82:a5:d8:cd:ab:79:
b1:8d:3d:66:c8:27:24:19:59:4d:f7:4c:01:eb:01:
75:be:75:d6:b1:d8:f0:69:b3:87:0b:b5:4a:7f:86:
45:d9:f4:78:a3:56:57:b9:23:36:fe:ca:53:b1:7e:
8e:9f:0f:ce:51:e6:d8:ab:88:6b:6b:96:c6:a5:0c:
c9:78:e4:5b:af:6d:3f:80:24:c8:e2:64:6c:77:87:
f0:e5:d1:a8:8f:10:7d:32:16:40:b6:27:e5:1e:1c:
55:28:4d:e2:65:b8:1e:bd:93:27:b3:f8:bf:18:91:
fe:75:94:65:a8:32:66:78:80:67:ab:68:b8:a9:e3:
40:fc:d4:06:df:1e:08:2f:ab:df:fc:e8:06:a5:dd:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:2F:A2:BD:2B:9F:EE:E6:AD:E3:3D:50:41:6C:01:55:95:F5:63
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:54:f4:0c:e7:ea:8e:0f:5c:57:69:78:76:81:b9:f0:c2:a3:
e0:2a:a6:0e:85:80:45:cc:33:22:13:4b:cd:a7:2d:ac:5d:15:
f6:cf:0e:98:62:eb:0e:5f:7f:ac:5f:84:23:4b:8d:a0:b2:c2:
64:4e:23:26:d2:d5:f2:55:d2:2e:ff:ca:05:b2:a3:52:3c:ee:
68:90:06:cd:fe:93:b3:c1:8c:7b:4d:24:da:b2:80:cf:e3:31:
58:4c:66:d7:8a:01:87:d8:dd:65:87:cd:07:84:58:39:bd:10:
c8:43:77:1b:d1:9b:02:6b:dc:6e:f8:de:7b:8e:24:39:14:d5:
e2:e0:af:b9:f9:8e:0b:68:33:dd:1b:96:a6:93:1e:be:82:7a:
27:0e:b9:f4:c5:88:df:76:d4:db:d2:6b:ce:de:5f:c2:9d:05:
27:96:17:0d:14:5a:fd:b2:df:7e:de:28:d3:c1:f3:3c:17:32:
37:0c:2a:3f:15:e7:5d:d3:8a:dd:59:9b:1b:a2:e4:a0:6d:de:
4e:6b:4b:60:3e:e1:6e:ae:51:a4:ef:f5:ec:87:ca:e3:a1:34:
da:e1:89:f5:7d:7f:be:d8:f0:78:a7:dc:c5:d4:b8:61:73:38:
30:4b:64:1d:77:59:f8:e2:4c:19:9b:77:16:88:2b:71:03:1b:
32:42:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org