Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/553DB5EE4BB611EDA5F60157C4F9AE02.roa
File: 553DB5EE4BB611EDA5F60157C4F9AE02.roa (raw, json)
Hash identifier: E8PO3yEE8BNKV9eqJYEAt+1W8tUhndFOitRbE3rMU+Q=
Subject key identifier: F5:8A:5D:2A:C0:E9:0B:D2:0A:F7:A0:AE:49:B4:DC:13:DA:09:F1:AF
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0511
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/553DB5EE4BB611EDA5F60157C4F9AE02.roa
Signing time: Fri 14 Oct 2022 11:50:00 +0000
ROA not before: Fri 14 Oct 2022 11:50:00 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 55933
IP address blocks: 103.226.124.0/22 maxlen: 23
103.226.124.0/23 maxlen: 24
103.226.127.0/24 maxlen: 24
103.242.0.0/22 maxlen: 24
150.129.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Oct 14 11:50:00 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63494ce8-929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:58:f2:82:7f:89:2b:29:34:7c:6a:7a:24:
3f:bd:02:af:7d:11:05:d6:ed:cd:24:b5:5c:f3:bd:
c9:2f:da:bc:81:67:02:57:f0:5e:a5:42:72:3c:a0:
ba:83:d3:cc:1d:4d:6c:d0:72:c1:ba:ca:04:24:09:
2f:5e:5d:34:a5:92:9a:93:a3:a8:11:ad:84:c6:ab:
4c:6c:19:52:17:b3:fc:e6:aa:2e:4e:01:fd:b9:e8:
3b:72:91:e3:d6:5f:01:0b:a7:49:3f:1d:3e:05:2f:
01:4e:83:04:26:86:f9:b0:f5:40:f5:a9:4a:ab:cb:
d3:a4:62:80:88:5c:a6:8d:b9:09:42:10:b8:63:0d:
10:73:98:61:23:e1:fe:3f:d2:33:c9:b5:ed:86:ff:
80:39:b0:5e:a0:df:ed:83:99:23:e0:73:ea:fb:02:
57:0e:5f:2d:20:98:de:06:4a:d0:25:14:4b:ba:a6:
3f:e3:82:2d:ff:b3:e8:eb:8e:83:19:0e:f3:00:ce:
27:f2:11:a5:4e:89:c6:18:42:b1:a1:f4:7a:1f:cf:
36:8a:d1:6e:6d:7c:b2:84:8a:b3:bd:be:52:c1:48:
98:22:c9:a5:be:7f:b2:b2:f7:de:dc:af:94:6c:9a:
49:7a:c3:5f:42:b5:eb:5c:6f:b4:62:52:58:ae:02:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:5D:2A:C0:E9:0B:D2:0A:F7:A0:AE:49:B4:DC:13:DA:09:F1:AF
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/553DB5EE4BB611EDA5F60157C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.124.0/22
103.242.0.0/22
150.129.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d7:c3:de:64:99:57:1c:6c:16:5b:09:fe:b5:6c:77:04:e7:
e5:17:4d:64:4e:a5:25:75:ad:fa:7f:cf:f3:ae:5c:5e:b7:f4:
5a:73:b4:3b:11:55:d6:6b:85:59:65:7d:a2:54:63:af:77:61:
85:bf:0b:0d:ac:eb:a0:2d:72:21:00:5f:52:ba:95:0c:27:0c:
75:f1:d0:a6:6e:2d:69:7c:f8:2a:62:e5:9b:c9:98:3d:81:e7:
29:27:71:4b:52:9e:2a:5d:a9:40:c6:f5:ab:86:ac:06:61:f6:
6c:f7:31:e9:95:62:e7:dd:d2:6a:35:90:b3:1a:bd:1c:c0:6f:
4f:c8:ab:ec:07:d0:01:ce:9a:62:80:78:b7:36:fc:aa:b6:79:
3b:99:39:a5:4f:bd:23:d2:e5:fd:8e:fd:66:e0:79:4d:9c:ad:
1d:a8:ce:28:de:30:64:38:1a:e5:e2:ba:aa:e7:cc:6c:4d:b2:
81:60:81:45:da:e7:6e:97:dc:32:56:3f:9c:e2:a0:5e:89:93:
ea:57:9c:6e:08:bd:3e:5b:af:f1:65:fa:f4:ef:d0:36:51:59:
75:89:86:f6:b1:68:38:79:7e:ee:ea:20:d3:73:b6:33:ee:94:
f5:90:df:f6:b4:34:4a:21:ab:6a:85:2b:d6:01:d8:67:eb:fd:
3c:87:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org