Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/6AE6EE7AE15211EC8EEE9668C4F9AE02.roa
File: 6AE6EE7AE15211EC8EEE9668C4F9AE02.roa (raw, json)
Hash identifier: p7xV6544IrkC0FRENr3Pt5EhlVH+uTM4jqYDSofoG2w=
Subject key identifier: 2D:71:DE:3E:25:3D:69:31:36:C9:D2:69:00:65:43:E1:4F:4E:ED:36
Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial: 032E
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/6AE6EE7AE15211EC8EEE9668C4F9AE02.roa
Signing time: Wed 01 Jun 2022 14:57:32 +0000
ROA not before: Wed 01 Jun 2022 14:57:32 +0000
ROA not after: Sat 01 Oct 2022 00:00:00 +0000
asID: 141778
IP address blocks: 103.163.254.0/24 maxlen: 24
103.163.255.0/24 maxlen: 24
2001:df6:3580::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Validity
Not Before: Jun 1 14:57:32 2022 GMT
Not After : Oct 1 00:00:00 2022 GMT
Subject: CN=62977e5c-7f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:e6:2d:73:a6:36:57:95:fb:67:2c:75:36:
11:8a:6d:9d:96:8e:c4:1a:ee:fb:bb:41:e9:f0:80:
64:fe:78:80:6c:77:eb:4a:ba:6c:58:c0:50:1d:61:
4f:50:11:e7:2f:b3:8b:b7:c2:5c:69:9d:08:35:6f:
8b:51:f5:f9:98:cc:3e:c4:df:5a:42:6c:34:fd:fa:
ac:09:bf:c6:6a:7d:c1:6e:73:1a:7d:de:0d:8c:3b:
8a:eb:d0:ab:70:df:22:85:85:58:88:a4:6d:29:ef:
88:2a:21:b0:6f:23:81:5b:ae:67:a4:ef:21:3f:ba:
e3:1d:22:2b:5c:1d:29:69:04:e2:6b:a7:f3:f0:09:
49:fb:b7:2b:d8:3d:fd:5b:a9:71:9a:e5:a9:a5:f6:
4e:f3:33:e0:f3:e5:da:c5:d4:b9:28:f5:03:86:b1:
e4:bd:5b:53:22:82:32:dc:9e:73:21:c7:93:61:8e:
8f:2b:5d:c0:ac:a8:11:1b:3a:55:c8:1a:de:16:61:
38:d6:a1:62:c6:8c:d9:22:06:35:12:f9:73:24:91:
5d:9c:db:96:b3:8f:75:8e:10:60:0f:9c:83:f0:b6:
27:97:56:61:58:bf:b0:57:78:4b:97:91:c4:6d:42:
c0:ab:6d:61:12:48:0b:6d:e1:cc:93:dc:b3:fa:8a:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:DE:3E:25:3D:69:31:36:C9:D2:69:00:65:43:E1:4F:4E:ED:36
X509v3 Authority Key Identifier:
keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/6AE6EE7AE15211EC8EEE9668C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.254.0/23
IPv6:
2001:df6:3580::/48
Signature Algorithm: sha256WithRSAEncryption
36:4b:fb:47:67:91:7b:61:65:a1:f2:e1:e3:51:a5:e1:c8:9e:
4c:13:08:98:16:10:a5:78:5e:53:bf:65:74:ba:f3:94:6c:ff:
b2:63:17:11:6f:e7:d1:3a:f3:9a:56:1a:0a:ce:00:f2:26:1e:
6e:4b:05:ac:1b:9a:0d:41:aa:cd:fb:f9:9a:64:a3:96:45:d7:
56:85:58:91:09:03:19:b7:6c:c2:c1:2b:b5:da:73:28:f5:da:
4b:90:14:4d:48:06:86:44:14:91:6a:c3:df:2c:a7:04:2e:53:
40:0b:f2:fd:18:5f:e2:d8:fc:4b:5e:5e:97:43:3b:08:b6:a9:
3d:48:7b:bf:56:67:b3:a9:3d:36:bd:26:22:f7:6a:2a:13:16:
1a:92:b7:f5:cb:a3:f3:10:21:f8:60:36:0a:57:d8:52:0d:9b:
32:77:9f:98:02:ab:b3:c8:92:8a:be:4f:43:c5:8e:35:9f:ff:
dd:c5:a2:c2:33:08:1d:2b:25:a5:44:ea:cd:b0:30:8a:6a:cc:
7a:62:ae:d5:96:c3:42:99:a9:d8:a5:6b:a7:73:26:1d:99:ae:
7b:34:82:74:c7:22:6b:ef:dd:87:b1:8a:38:27:0d:3c:47:28:
d9:30:3c:d7:68:f4:09:6f:e5:79:85:0f:d9:71:49:6c:62:7c:
6e:cc:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org