Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/53F9DF44F08311EB8268373EC4F9AE02.roa
File: 53F9DF44F08311EB8268373EC4F9AE02.roa (raw, json)
Hash identifier: uqu+W6YfgZKzDZHyCRWey+NTRLqaVXFrCdEmWhsSxvA=
Subject key identifier: 2A:36:2D:B1:2C:F0:8B:61:34:93:AA:5A:C9:46:97:DD:C6:98:86:DB
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0229
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/53F9DF44F08311EB8268373EC4F9AE02.roa
Signing time: Mon 11 Apr 2022 02:52:41 +0000
ROA not before: Mon 11 Apr 2022 02:52:41 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138346
IP address blocks: 103.112.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Apr 11 02:52:41 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=625397f9-59da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:b2:71:d8:5e:d0:5b:1c:de:d2:3f:a6:1c:
1c:cd:49:57:2f:f5:3f:9e:26:46:59:63:d2:0c:6f:
c9:0c:02:f9:40:d5:ab:c7:f8:8e:16:e4:91:4e:11:
e7:65:8c:25:a7:b9:7d:e8:b6:dd:4f:9c:92:1a:4f:
d1:9a:82:7a:b2:7b:7e:3c:5a:bf:a8:a5:b0:a2:04:
bc:0e:9e:18:7d:b8:6c:3d:49:9b:ca:f5:ad:44:8a:
93:6a:2c:45:74:ef:29:3e:65:d2:0e:b6:ee:9f:b1:
d8:2c:6d:e1:1f:fc:ba:b2:6e:75:21:42:e0:2c:2e:
71:74:45:82:cb:02:72:37:db:7f:40:d7:83:d2:eb:
36:e3:3b:c5:11:f0:5d:5b:75:c4:5b:6c:50:a0:d6:
0a:94:bc:81:b7:d5:7e:34:e4:30:b2:13:9c:c0:d9:
15:8a:57:49:4a:63:94:e9:3b:86:53:7c:6e:bb:05:
44:07:56:f6:65:1f:72:82:b7:98:55:e0:78:92:2f:
3d:bc:90:e9:81:27:fa:8a:9e:80:ff:40:81:58:25:
b6:0d:e9:b0:88:0d:13:29:90:2e:ab:cb:2d:95:28:
05:54:2c:b0:3c:2a:59:48:45:14:54:7e:99:71:6e:
83:90:6e:fd:e3:8b:7c:31:f0:e8:32:de:06:92:54:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:2D:B1:2C:F0:8B:61:34:93:AA:5A:C9:46:97:DD:C6:98:86:DB
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/53F9DF44F08311EB8268373EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:45:e0:e6:99:25:d3:2c:76:01:ab:dd:be:03:04:32:e6:e2:
26:e9:ee:9f:c2:2f:56:c8:3a:81:1f:e7:82:58:d8:4e:19:aa:
1a:6e:dc:52:1f:3b:19:be:3f:a1:7c:7e:2f:b9:8d:2f:05:df:
89:45:05:d5:38:c3:69:4b:a1:33:26:b2:62:ec:eb:34:7c:f9:
7d:12:de:bd:7c:98:7c:3f:b1:a5:7c:bf:9f:fa:34:39:53:ea:
6d:33:8d:28:9c:75:fd:40:9e:4e:8b:27:cb:f8:96:f7:46:67:
e2:ea:ec:25:78:db:ce:a4:0f:21:c1:da:29:a1:e0:29:af:d8:
bd:8c:b4:12:3b:7b:cd:1f:27:34:41:40:7f:35:a8:fc:7b:82:
e8:a3:8c:50:18:60:05:43:7c:12:9e:16:7c:69:75:e8:97:ec:
6d:e5:a1:c3:d0:ae:a9:97:71:a7:bc:9d:b1:58:60:4d:81:d6:
be:38:5f:86:60:08:f9:59:74:8a:1d:c1:f9:08:f3:ed:3d:2a:
2f:17:47:e7:08:12:fa:dc:d9:8f:09:cd:49:de:8e:78:4b:14:
ca:68:0e:77:7a:36:2f:0f:7a:40:36:65:0f:3b:ba:ff:fa:57:
6d:b2:12:04:f8:e6:48:c9:c0:9e:19:3f:d7:40:e4:62:10:c8:
6f:92:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org