Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/E9414E08DCCC11ECAFD2715CC4F9AE02.roa
File: E9414E08DCCC11ECAFD2715CC4F9AE02.roa (raw, json)
Hash identifier: ucJPCDvg4jPNogt10J5/6t0phoU8CmEvMCs9Ync7Ysc=
Subject key identifier: FD:2F:8F:54:D4:B4:AC:59:F9:B6:98:A9:E6:39:92:2B:AF:DD:FA:2E
Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial: 0721
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/E9414E08DCCC11ECAFD2715CC4F9AE02.roa
Signing time: Thu 26 May 2022 08:21:59 +0000
ROA not before: Thu 26 May 2022 08:21:59 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 141723
IP address blocks: 103.108.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Validity
Not Before: May 26 08:21:59 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=628f38a6-e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:a0:2f:91:4a:07:52:1f:3e:ed:9c:be:2e:
45:04:e3:c3:45:86:6c:03:be:e2:87:a5:b7:9a:20:
3a:ba:5a:65:ea:fc:b8:cd:8b:ca:92:a2:be:82:5e:
52:60:f2:d9:0b:16:9d:dd:02:36:50:bd:5d:34:bd:
20:2b:50:dc:3a:ac:67:71:46:b9:aa:99:20:c6:3c:
b4:24:ea:86:07:5d:99:6c:54:c7:47:74:d3:7b:97:
e2:c9:51:8d:81:66:a4:65:10:25:79:f2:f6:bd:03:
cd:40:c9:00:9f:89:c3:7c:f6:eb:61:14:b3:71:9e:
fe:3a:78:2d:57:25:81:3d:95:43:ca:9b:06:60:35:
e1:6c:9e:9d:c4:f0:70:16:eb:6f:d3:75:14:e8:3a:
e1:26:5d:28:e7:4c:09:52:60:33:46:69:26:0b:95:
3e:23:55:97:fa:09:07:e9:27:ff:c0:f0:0a:ab:75:
f8:f3:2a:70:e9:12:4b:28:17:59:ab:cc:dd:0b:9d:
b2:fe:e2:34:a6:5e:25:90:cd:41:af:9b:cb:3b:c5:
8b:0c:2a:90:2f:db:10:9f:71:28:21:bf:e5:cc:e2:
82:91:2b:49:4b:1b:9d:93:da:a7:bb:47:2f:51:9e:
ed:bb:49:4b:52:79:b3:45:d3:67:47:68:76:c0:ff:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:8F:54:D4:B4:AC:59:F9:B6:98:A9:E6:39:92:2B:AF:DD:FA:2E
X509v3 Authority Key Identifier:
keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/E9414E08DCCC11ECAFD2715CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.62.0/24
Signature Algorithm: sha256WithRSAEncryption
69:46:48:6d:14:7f:c0:4c:c0:70:21:d2:6b:b6:25:50:67:8d:
01:bb:0c:24:ec:36:4d:fc:40:69:d0:46:f6:c3:59:62:d2:ca:
8a:bd:70:68:bb:74:ac:88:07:a3:05:c6:94:2a:a5:b7:38:72:
7f:5b:dc:ba:6f:e5:b5:88:2a:45:cd:c5:87:15:51:56:33:84:
ed:d0:a4:2f:6a:e0:83:fd:00:2f:94:e4:1f:a6:f6:c0:8c:ee:
0c:b3:d2:96:e4:27:87:77:07:60:45:7b:de:89:17:79:6b:ab:
1c:c0:ea:16:dd:ef:f9:d6:16:a0:45:13:95:a7:2f:85:f2:47:
b8:1a:a1:79:94:5d:74:b2:d3:5b:b4:bd:a7:a2:51:46:bd:f0:
76:7c:a0:2a:97:a0:12:2a:a0:bb:2e:66:87:68:ce:e1:13:3f:
52:ea:0a:e8:38:fc:e7:51:59:f9:79:f5:5a:45:87:6a:ed:c6:
29:53:d1:32:0a:15:e7:3d:ed:fe:2a:4e:f9:0a:1a:9a:a0:87:
fb:60:19:9d:5d:d8:28:c2:ab:57:e7:83:5a:60:53:66:09:f8:
f7:b5:45:62:2a:a6:a7:30:4b:3b:c3:dd:08:c7:7d:e7:2a:6a:
e1:fc:c4:3e:58:62:41:bd:51:22:71:59:7b:a6:65:75:b4:ad:
6f:95:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org