Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/F8DF07D4986A11ECA42EA52EC4F9AE02.roa
File: F8DF07D4986A11ECA42EA52EC4F9AE02.roa (raw, json)
Hash identifier: AP3KSjxsi1rCc4u0mUaxudRQyINHl6WpOPo2FammY6Q=
Subject key identifier: 79:BA:66:A4:15:FC:0E:D6:C1:9E:26:18:F0:C1:2C:3F:8F:58:AF:29
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 05F3
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/F8DF07D4986A11ECA42EA52EC4F9AE02.roa
Signing time: Mon 28 Feb 2022 07:49:35 +0000
ROA not before: Mon 28 Feb 2022 07:49:35 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 134812
IP address blocks: 103.127.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523 (0x5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Feb 28 07:49:35 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=621c7e8f-7f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:86:63:7c:3e:e5:6e:eb:bb:db:9c:8d:7a:
ae:cf:74:65:32:e4:f5:8e:89:92:e1:13:ee:4f:0d:
09:1a:9e:a9:ab:cd:64:f2:67:a8:ea:90:b0:52:8a:
bd:34:63:12:3b:86:f8:41:b7:ec:24:4a:ca:07:36:
39:07:b8:c4:1d:fc:e4:c6:55:d3:3c:5f:1a:34:1f:
98:80:b6:47:ef:e0:4f:51:4c:aa:68:ce:44:22:f8:
fb:9b:7d:81:2f:da:cd:cc:76:41:60:c9:be:0f:21:
5b:58:65:ad:af:e7:8f:fb:23:1f:34:60:18:1e:76:
02:d7:9a:5d:35:17:cf:62:42:f5:49:4b:61:cc:7a:
dc:0d:89:65:3a:bb:21:ea:84:61:a7:7f:a3:d7:4f:
16:96:4c:6b:54:e9:80:6c:06:4c:06:cd:10:64:fe:
c6:a8:7b:f5:aa:65:44:eb:7b:f5:6c:93:0e:a5:32:
94:90:5b:e9:d9:65:d3:48:5d:96:7e:e8:b5:2f:c8:
67:49:5b:1e:2a:db:8a:03:c9:9f:a2:68:ed:0b:4f:
61:66:41:11:d0:30:74:5e:b7:02:4f:e7:95:82:1b:
5e:ad:29:75:65:b8:23:36:ef:8c:0d:0e:6e:31:22:
69:fd:d9:0e:99:9e:59:ef:fb:ae:e9:63:3a:36:c1:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:66:A4:15:FC:0E:D6:C1:9E:26:18:F0:C1:2C:3F:8F:58:AF:29
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/F8DF07D4986A11ECA42EA52EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ec:47:b9:aa:57:6f:1e:2a:67:11:ff:5f:49:f2:9e:3b:8f:
0d:cd:93:d0:3f:8b:d7:d3:9a:ba:ec:a3:2d:6d:f6:3d:50:3f:
1d:f3:4a:4f:77:47:b5:0d:b4:68:39:57:59:3c:9c:e9:5b:52:
7f:d3:0f:d2:1c:45:78:0b:1b:2b:6b:48:1f:6d:13:c9:f8:0c:
fa:d1:4d:58:a3:c0:c3:a8:55:8c:96:b1:c7:a3:54:a3:0d:a5:
8e:48:7d:a2:3d:93:78:10:8b:61:d1:fe:f3:39:96:0a:14:73:
f2:f0:c7:a9:fa:b2:6d:ef:9c:f5:89:96:e7:e8:e6:95:7e:d9:
8a:77:c5:a5:ed:2c:1d:0f:6e:b9:e7:c1:d4:51:1d:3a:f6:3e:
ec:53:41:f7:22:10:b3:af:12:6c:9d:d2:e9:a8:6c:a9:4f:fb:
a1:87:4e:61:04:6d:30:64:c4:77:7a:d2:60:76:cd:f2:f2:28:
0a:8d:8d:82:ed:bb:40:9b:2a:84:b9:40:bc:35:8c:ee:27:87:
7a:de:94:db:8e:ee:ab:42:c8:fe:4c:10:1e:81:75:75:01:8f:
55:a1:ac:04:a3:c2:a7:de:cb:5e:64:5f:df:99:93:3f:73:3d:
f9:b9:39:b6:ff:5b:68:bd:ea:c1:c4:2f:27:04:0a:4c:78:7b:
d8:51:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org