Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1FAFB064E0D911ECA24D3757C4F9AE02.roa
File: 1FAFB064E0D911ECA24D3757C4F9AE02.roa (raw, json)
Hash identifier: zALYtnOtl61mKEakeHiku7iqBqjD88uVNKIe0AwYoTM=
Subject key identifier: CF:F7:04:00:8B:A9:46:B9:5C:21:EA:0D:97:16:83:9B:09:B9:16:DE
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 017F
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1FAFB064E0D911ECA24D3757C4F9AE02.roa
Signing time: Tue 31 May 2022 11:59:29 +0000
ROA not before: Tue 31 May 2022 11:59:29 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 38264
IP address blocks: 103.175.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: May 31 11:59:29 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62960320-19e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:8a:95:0f:db:ad:98:23:d4:ad:a0:b1:d7:
79:b9:95:f7:51:32:58:51:5f:dd:aa:f2:c5:fe:26:
b3:10:92:62:0d:d7:c0:98:11:84:cc:51:54:1e:52:
26:4a:c3:a6:b8:c2:b4:4a:3a:fc:e2:ee:24:fa:68:
6c:55:98:7d:ff:1e:18:e7:22:ae:b8:d3:60:12:12:
99:37:10:a1:f9:a2:5a:53:90:9e:d0:be:67:14:13:
63:f0:98:ba:30:bf:79:d2:9c:96:1d:e1:04:80:60:
22:2b:3f:2e:78:8d:4a:b8:2b:5a:67:73:a8:bf:bd:
38:1e:07:53:1f:d2:7c:22:c6:41:32:28:dc:6a:4e:
98:1c:bb:9f:72:92:00:63:72:d1:b8:18:d6:a8:b2:
ef:9c:3a:21:e0:ea:75:5a:3c:20:0c:b1:46:30:77:
d2:d7:65:3f:91:ae:a9:66:57:27:6e:bc:d0:2b:ac:
a8:26:88:aa:79:61:49:3e:bd:ee:29:e2:15:96:0b:
ed:63:88:39:00:40:6d:81:2c:69:93:1b:82:81:28:
7b:4c:6b:aa:dd:0d:71:d3:df:e8:aa:71:7d:4f:e2:
cc:7b:dd:35:03:91:38:cb:fd:a5:cd:73:b1:c3:c1:
32:60:1e:24:2a:c3:6a:a2:8b:d6:9a:81:af:02:0a:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:04:00:8B:A9:46:B9:5C:21:EA:0D:97:16:83:9B:09:B9:16:DE
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/1FAFB064E0D911ECA24D3757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.122.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c0:c8:20:f6:c3:59:ab:aa:8c:89:9a:93:7c:4c:ef:ae:3d:
6f:b1:9f:79:01:06:fc:48:29:da:e8:3c:17:4e:72:17:28:b7:
ba:e4:e4:4a:45:bb:59:3f:21:23:39:28:5a:00:63:70:f0:9b:
99:76:2c:f8:d9:9f:f9:87:63:d6:51:8a:4d:c9:eb:9d:c1:52:
09:88:be:48:92:2a:0f:48:67:c3:0a:3f:57:2a:12:3a:b2:ea:
99:48:4e:ab:d9:51:93:57:9a:69:23:46:94:7b:c0:c3:1b:a3:
ce:21:e9:97:a4:58:a5:d5:e5:3e:18:b0:83:a1:d9:b5:eb:f2:
d4:0b:64:af:21:a5:f7:45:9b:d9:80:a2:a3:7e:80:01:43:94:
f3:af:06:79:e0:6b:7b:79:ee:e0:f8:32:32:ca:c3:34:c4:b0:
03:0e:ea:7f:9f:3a:80:e6:11:51:3f:e7:93:06:e9:64:52:09:
d7:0d:3e:e5:3b:53:cf:76:fc:3b:98:0e:85:6f:66:a6:da:22:
1d:af:9c:2b:4d:82:19:59:80:10:26:80:0e:21:19:18:38:d7:
a2:47:fb:43:c2:78:0d:d1:6f:d1:51:96:d1:fd:41:08:af:5e:
23:b9:16:da:61:b1:56:d0:34:96:b1:0f:67:04:22:e2:c3:f7:
75:75:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org