Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FCAE0AF8E71711ECA4C60269C4F9AE02.roa
File: FCAE0AF8E71711ECA4C60269C4F9AE02.roa (raw, json)
Hash identifier: iicY4F/ZADkrq6Jecx1UtLVVseBAji/4D9hedbHxNx4=
Subject key identifier: 32:C1:3A:F1:DB:FC:94:C9:9B:86:F8:D8:D2:B9:ED:72:C0:32:26:E1
Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial: 8B
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FCAE0AF8E71711ECA4C60269C4F9AE02.roa
Signing time: Wed 08 Jun 2022 10:44:36 +0000
ROA not before: Wed 08 Jun 2022 10:44:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4864
IP address blocks: 103.185.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Validity
Not Before: Jun 8 10:44:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a07d93-5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:bc:92:a2:af:2f:46:9f:40:12:a4:a7:ac:
5b:8d:dd:17:5d:22:9f:df:69:bf:c5:a3:b1:ab:23:
0e:91:29:48:41:6e:6b:de:cb:0a:45:f5:66:af:74:
53:23:11:be:d8:51:d2:83:e9:7b:d4:45:8d:d9:28:
4d:b2:57:9a:c5:31:5d:72:d2:c4:8e:f8:d6:f0:5f:
60:1d:e3:58:20:cf:c5:e8:b9:bd:bd:bd:94:88:7a:
f0:16:c9:4a:b4:2a:8d:a3:6c:42:d2:d8:03:a0:a6:
db:39:08:21:91:8f:cc:75:8b:e3:67:c1:7b:cc:db:
ec:3a:c7:dd:e1:9a:0c:01:aa:6d:2e:60:f7:68:40:
1f:05:8f:58:54:d3:f1:85:e4:7a:20:32:87:39:34:
6b:5b:db:71:8c:85:45:6d:52:55:70:f0:09:bb:42:
b3:25:95:0c:ee:6c:78:89:86:38:2b:ce:3d:35:93:
eb:12:2f:9c:9e:79:25:93:57:7e:c2:8a:0c:64:54:
c7:68:3b:49:28:86:b6:29:bc:3e:d8:24:92:80:f5:
07:d9:41:83:29:99:5d:90:3d:bb:37:ec:a1:d2:74:
56:41:13:02:37:17:25:bc:6a:6f:55:f2:25:12:59:
5c:af:48:a0:33:df:6e:96:c3:b9:bb:16:35:da:fe:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:3A:F1:DB:FC:94:C9:9B:86:F8:D8:D2:B9:ED:72:C0:32:26:E1
X509v3 Authority Key Identifier:
keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FCAE0AF8E71711ECA4C60269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:58:b2:76:a1:8c:23:5f:78:56:97:73:1a:7d:de:f5:d0:2f:
b8:83:c4:b9:9c:ac:c8:13:80:24:a9:48:39:68:00:64:31:78:
fa:34:ae:05:a2:66:20:0f:1d:5f:c5:0e:99:cc:ab:d5:2f:df:
d2:0a:98:3c:19:0d:99:25:ce:71:45:d5:02:61:d3:79:3d:bd:
ad:fa:9f:9d:1f:76:46:20:0b:bd:2b:43:4b:15:21:80:26:80:
da:74:c8:bf:b7:ff:6b:0b:e7:f8:8d:c4:df:6e:06:40:c6:d4:
47:25:1b:01:65:4e:cb:fd:65:13:15:f9:93:fc:72:29:69:b5:
25:48:1c:52:c7:0d:3d:ce:92:fe:08:11:59:5b:8c:7e:67:11:
57:a1:1f:40:b9:0e:26:af:f8:12:98:8a:9e:c0:9f:ef:d8:a8:
10:80:6e:b5:0a:cb:1f:51:1a:92:b7:36:24:e4:f5:b5:a6:b1:
7d:41:8d:91:42:35:88:90:30:4e:48:d3:db:d1:8d:d2:83:6a:
35:8f:21:fb:54:5c:68:84:cf:5b:e6:0d:f4:da:ae:a1:dc:c9:
7c:7e:33:ec:a7:5b:4c:6b:18:3b:25:86:62:3f:2f:98:01:b2:
df:7d:62:11:6d:26:08:95:9f:06:7a:63:ef:00:13:ee:be:0b:
71:1d:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org