Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/C89B4B58618311EE88624033C4F9AE02.roa
File: C89B4B58618311EE88624033C4F9AE02.roa (raw, json)
Hash identifier: f6ltQr35kWL8dELXT2mysUPKsi5cHtijt5ejJ2YrMbQ=
Subject key identifier: 6C:A3:9C:8A:4C:E0:CD:1B:33:C8:20:DD:BD:37:FC:24:04:80:4C:B2
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 51
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/C89B4B58618311EE88624033C4F9AE02.roa
Signing time: Tue 24 Oct 2023 03:56:55 +0000
ROA not before: Tue 24 Oct 2023 03:56:55 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 60117
IP address blocks: 103.83.40.0/24 maxlen: 24
103.83.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Oct 24 03:56:55 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65374087-837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:d4:1e:94:06:b5:70:4c:cc:d3:95:ed:67:
69:ff:c7:a1:0d:9c:61:08:6a:e1:b8:ab:c2:24:ed:
e3:29:71:4e:7b:b2:46:91:96:99:1a:d7:c1:7e:d2:
c7:70:94:f6:33:dc:e5:b5:86:c7:3f:78:f8:d3:17:
1e:78:4f:36:02:c5:c5:8f:f7:73:a4:e0:ea:21:44:
2a:ae:c1:fb:c5:5d:05:74:b9:3a:1e:ed:16:90:4e:
48:78:a7:65:8d:04:74:95:1f:d9:fc:a9:28:fa:29:
6c:e0:fe:64:b4:4a:7b:b4:ad:ef:08:90:6e:e9:b4:
5a:87:47:63:58:97:57:93:f5:5b:fc:92:15:30:e8:
9b:4a:0a:87:fd:a7:6e:29:e4:36:04:00:f2:02:a9:
60:de:25:b3:52:13:d1:27:8c:1d:35:21:d5:5d:43:
d5:19:29:10:16:5d:df:68:39:2f:3b:84:2d:87:a9:
ef:82:10:de:d6:ed:38:6a:a9:81:ef:1c:21:fb:66:
98:08:b8:c9:b1:20:5c:36:c7:09:0b:85:f5:29:68:
a8:07:06:a5:5e:a3:64:7e:d9:96:55:c0:9a:7e:f9:
59:54:97:00:8b:c8:b4:22:50:3e:da:8f:35:3e:8a:
c4:8c:05:7c:f7:ed:6b:4d:bb:03:29:aa:91:6e:58:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:9C:8A:4C:E0:CD:1B:33:C8:20:DD:BD:37:FC:24:04:80:4C:B2
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/C89B4B58618311EE88624033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.40.0/23
Signature Algorithm: sha256WithRSAEncryption
06:b5:67:e0:6e:92:c3:1a:2c:a2:4b:c4:fc:85:76:0c:ab:63:
b5:fe:a2:e8:21:fb:ed:27:1b:d9:5c:fa:9f:c1:4e:97:e0:39:
6c:3c:e5:39:9d:d3:a1:35:35:7e:1d:15:58:0f:70:ee:3b:d7:
16:e1:18:a6:aa:57:e8:22:ea:e2:b6:2e:f0:d3:f9:7b:3d:16:
66:6f:85:46:3c:2d:b8:23:45:ad:51:5f:5e:41:15:06:23:82:
9e:ed:60:36:ff:f5:c5:2b:18:39:3f:6a:52:23:16:fd:a9:39:
5b:90:c1:72:c9:85:8c:73:cd:24:3d:d5:7a:b5:95:af:c0:8d:
c9:88:22:16:40:75:bd:27:0c:45:89:aa:2d:db:77:4a:e5:9d:
c3:5a:77:d5:8a:7c:92:ca:de:4e:3c:d7:b9:f3:23:3f:c6:ec:
71:ff:4e:7d:ff:f6:7c:87:cf:6f:ad:96:8b:0e:a3:f3:11:98:
05:7e:2a:53:5c:92:8c:e6:73:bf:d6:04:c9:79:b7:88:33:b5:
9a:0a:36:90:47:b5:e4:c8:1f:c2:21:b4:e4:f5:4f:b4:a6:8a:
57:d9:7d:ee:8f:a0:9b:c3:38:67:f7:c7:4a:18:6f:01:78:2d:
0d:a7:7e:09:8c:35:75:83:46:56:80:56:6c:38:f7:83:86:f1:
54:06:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org