Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C15810CE197E11EBB6E9E539C4F9AE02.roa
File: C15810CE197E11EBB6E9E539C4F9AE02.roa (raw, json)
Hash identifier: m0AsoYXPoFsSsNoNeOz3IlXYuY9ITG83eNroAX94xaE=
Subject key identifier: DA:11:25:FA:4F:23:FF:89:0E:FB:07:92:EF:52:63:5B:E1:A8:62:D2
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 05D8
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C15810CE197E11EBB6E9E539C4F9AE02.roa
Signing time: Mon 26 Sep 2022 12:00:00 +0000
ROA not before: Mon 26 Sep 2022 12:00:00 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 6939
IP address blocks: 103.155.8.0/23 maxlen: 23
2406:60c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Sep 26 12:00:00 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6331943f-7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:66:96:07:c3:eb:33:69:54:86:2b:2e:93:
be:a3:95:76:ea:ec:68:af:46:3c:10:7f:d4:b4:63:
b3:d8:0b:a6:ff:c4:0c:f6:b1:bc:5d:29:08:60:96:
dd:45:fd:51:f6:71:4a:c5:21:6c:98:7c:d4:be:70:
24:1c:a6:b5:66:a0:9d:2f:d4:f4:aa:52:c4:f8:e2:
95:73:71:5b:1d:00:21:2b:08:61:3d:de:38:c5:e7:
4f:8f:05:d1:6d:60:72:bc:ad:68:ca:b7:a2:1f:84:
5a:fa:b6:aa:38:49:a7:e6:76:70:46:89:3e:81:22:
08:f1:80:25:f4:2f:07:55:ae:49:e8:a9:c2:58:0b:
b7:5a:f2:4d:a0:d1:38:aa:ca:f8:eb:d5:8b:fc:6a:
dc:d2:67:d2:e1:2d:b3:51:0c:38:18:51:ee:74:44:
70:52:ca:fb:8e:67:ad:a3:5f:0f:64:1a:57:db:79:
1d:e9:77:87:9b:64:36:00:b3:ba:f3:49:c8:ee:d9:
df:e7:15:0e:a7:aa:c0:af:d3:50:5b:84:95:f2:6d:
79:17:59:4a:53:b8:f8:6a:70:47:52:b4:bc:01:74:
73:cd:9f:48:23:35:d5:be:b0:b6:10:4a:90:97:0d:
b1:a9:96:f1:21:a8:36:c6:d3:5b:35:47:fc:d9:be:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:25:FA:4F:23:FF:89:0E:FB:07:92:EF:52:63:5B:E1:A8:62:D2
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C15810CE197E11EBB6E9E539C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.8.0/23
IPv6:
2406:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7d:b8:4c:f6:36:20:9e:81:f3:cb:e6:5a:88:11:f3:79:03:
1e:b8:7d:4b:27:eb:73:0b:47:03:28:f9:08:4b:e3:fd:68:09:
71:ed:fb:58:f1:29:e1:b4:58:3c:6f:f9:ed:8e:0d:43:c1:01:
16:62:2a:93:fc:9a:40:94:1b:b8:38:66:39:35:60:dc:42:2d:
45:a5:b5:e5:4b:4f:9a:93:7b:37:1d:1e:73:f3:54:27:c8:22:
27:55:c7:79:41:bd:05:18:1c:29:c5:1b:40:31:7d:94:e9:f4:
fd:26:f7:35:03:81:40:3b:83:f6:a1:a3:ce:42:04:67:b1:83:
60:a1:b2:0e:6d:22:77:e8:c5:e8:85:bd:2e:c4:ed:65:87:cd:
22:fa:66:27:49:8b:80:a6:42:6b:e1:13:4f:a3:f4:07:aa:cd:
b0:b6:41:6c:88:72:be:91:59:d7:94:41:73:41:71:04:d1:99:
e5:75:d4:94:34:4a:d8:81:d4:6f:1b:fe:d1:40:cf:d7:c4:df:
dd:4a:2f:7a:ce:9c:e2:66:a9:c6:21:9d:f7:27:95:8f:77:b6:
d7:48:4b:fe:24:a6:b0:9b:55:33:8d:13:80:fc:44:17:72:6d:
dd:97:2f:48:eb:b9:70:96:8a:07:34:0c:aa:9d:8f:01:47:d0:
9f:5b:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org