Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/251C40E2861811EC9AA35B51C4F9AE02.roa
File: 251C40E2861811EC9AA35B51C4F9AE02.roa (raw, json)
Hash identifier: V2kCQkddSx94diwJICCJgpJ9bpTlqZTdJ1e2Wm8d6Ek=
Subject key identifier: 0B:B1:67:B6:7D:05:7F:9D:D9:84:64:3F:BC:D4:06:89:ED:F5:95:83
Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial: 0235
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/251C40E2861811EC9AA35B51C4F9AE02.roa
Signing time: Sat 05 Feb 2022 00:11:20 +0000
ROA not before: Sat 05 Feb 2022 00:11:20 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 142000
IP address blocks: 103.163.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Validity
Not Before: Feb 5 00:11:20 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61fdc0a8-2668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:7a:3e:98:a6:1c:cd:72:8b:17:3c:7e:3f:
79:cb:39:cc:14:a4:fb:b3:a6:8a:fb:39:d0:21:72:
ba:4a:99:ce:41:8a:db:b9:8d:08:1f:c4:41:27:ca:
85:02:ba:da:42:0e:d0:10:11:bb:a1:ba:ef:25:a2:
5c:88:ae:75:6d:da:99:a0:ab:79:e0:9b:5d:54:a0:
61:24:dd:31:a8:31:e2:2f:72:81:d9:51:89:b4:b5:
0a:5f:32:37:9b:86:5d:dc:82:ad:23:1c:a8:dc:19:
c9:88:22:d3:43:84:7e:ca:7c:6b:10:01:e8:47:78:
76:b8:22:84:6e:7f:fa:30:bb:cc:8f:ce:f1:1e:ab:
47:87:d6:2a:e8:b5:4d:44:11:89:77:af:eb:e7:ae:
c0:a7:8a:f2:81:f6:0a:50:48:ec:92:32:c1:03:50:
50:8c:30:95:cd:3d:a7:7a:f2:a9:48:0a:22:bd:69:
bb:eb:cb:49:3c:9b:a4:93:69:97:42:50:35:be:7b:
e3:1e:48:7c:d3:9c:a1:14:dc:9b:cc:d9:a2:bd:c6:
d5:9c:1d:54:30:b3:c7:10:50:dc:cd:34:02:47:92:
be:e6:b3:f1:dc:5d:78:78:99:5f:7b:d1:b3:64:b6:
68:b5:00:85:6d:16:f1:96:21:fb:17:5c:ad:10:66:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:67:B6:7D:05:7F:9D:D9:84:64:3F:BC:D4:06:89:ED:F5:95:83
X509v3 Authority Key Identifier:
keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/251C40E2861811EC9AA35B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b3:7f:6d:b4:d3:d6:bc:f2:43:96:04:1e:6d:ee:d8:27:12:
4f:9e:c1:96:5a:24:48:5e:d8:e4:6a:d8:eb:b8:8f:98:da:aa:
2a:ab:3b:81:ce:7d:f2:c3:dd:4b:74:50:47:df:5e:99:a8:88:
4e:eb:ef:80:d8:7e:ae:18:4b:e5:6e:60:8b:a8:b2:57:86:35:
7e:f6:d0:42:54:94:98:21:17:59:f8:33:69:1d:7b:fa:ec:ad:
bb:2b:8b:cb:b6:cb:a8:81:75:1b:51:10:d6:b7:f3:73:5d:2f:
98:db:8b:70:37:12:09:aa:9f:2d:ae:c1:48:99:92:0a:27:55:
5c:87:8e:9c:56:95:9c:21:8c:06:6e:01:04:65:c0:d7:c2:21:
51:3e:f3:a8:1a:df:27:3b:cc:4f:ec:22:c4:08:e1:b8:0f:a7:
78:29:d0:31:ea:63:7b:ca:7f:f6:21:d7:13:ce:80:ee:67:a4:
5d:d8:29:de:f9:2a:a5:b0:69:b7:51:42:58:bf:4c:63:cb:5d:
ad:60:95:41:97:1c:52:43:ba:e7:1f:d5:88:18:bd:b5:58:73:
19:f9:01:17:01:0c:d8:4c:53:58:00:90:ef:a2:01:b8:f3:92:
4b:21:a5:13:e6:95:4b:ca:69:36:4f:33:c4:89:9f:c8:39:43:
93:e4:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org