Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/915886C222CA11EDB0236E85C4F9AE02.roa
File: 915886C222CA11EDB0236E85C4F9AE02.roa (raw, json)
Hash identifier: GSlixS3KbAWGSkCAEsDEz2y1pFFMvr7flShHokrd9Rs=
Subject key identifier: 5B:50:79:15:65:AA:C2:A3:20:6B:F9:B8:38:EE:42:29:50:DD:C2:5E
Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial: 0432
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/915886C222CA11EDB0236E85C4F9AE02.roa
Signing time: Tue 23 Aug 2022 10:01:34 +0000
ROA not before: Tue 23 Aug 2022 10:01:34 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 132382
IP address blocks: 103.14.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Validity
Not Before: Aug 23 10:01:34 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6304a57d-6d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:b8:76:d2:0d:0c:74:66:38:9d:c9:ee:f4:
8e:d9:0f:97:08:36:cf:74:12:86:17:d8:8a:03:10:
58:d0:1a:df:46:85:b2:b6:cf:0b:9a:5b:d5:cb:b5:
e3:87:73:8f:41:e6:0c:53:00:cb:aa:5f:bc:5e:fb:
31:11:3b:b4:bd:01:da:2b:75:73:bd:a5:e2:b9:c9:
8e:77:a8:57:30:ba:a7:b7:3a:00:5f:88:c9:94:4f:
41:7b:26:9f:43:be:d5:7e:21:27:57:a7:ce:d4:5d:
c0:94:ca:f2:48:e7:38:36:b4:78:a1:2b:18:7f:21:
06:26:b2:5b:64:30:43:5f:f8:a5:52:0c:55:f9:b4:
07:ec:d8:79:3b:9f:9e:f2:f1:81:4b:85:6b:5f:3e:
53:ea:9b:a2:ad:6c:e6:a0:07:3b:db:95:c2:43:bb:
5d:80:83:bf:03:61:09:87:1e:5a:e8:69:ed:fc:f9:
c8:5e:83:08:f2:0d:5b:8b:f8:29:7c:60:9b:b7:d0:
04:2f:92:52:e3:7c:e5:bd:e6:d1:68:48:29:a8:f6:
ae:ac:70:a2:eb:e0:dc:12:02:e9:79:b0:6c:64:3e:
d0:4b:38:d7:0e:9a:42:b2:3b:ab:d3:61:27:d6:4b:
71:b2:ad:9b:c8:70:08:33:2a:fa:4d:e9:b6:1e:32:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:79:15:65:AA:C2:A3:20:6B:F9:B8:38:EE:42:29:50:DD:C2:5E
X509v3 Authority Key Identifier:
keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/915886C222CA11EDB0236E85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.172.0/22
Signature Algorithm: sha256WithRSAEncryption
86:2d:68:20:a2:da:b8:be:1e:e9:b5:54:2d:4f:44:3b:22:90:
33:3d:11:5e:22:a7:9c:04:53:fc:65:90:aa:35:c9:e3:dc:0b:
8e:8f:bb:52:bd:b5:f7:f4:e6:55:29:c4:67:44:b7:5f:42:bb:
10:aa:ec:54:69:8f:9a:13:94:a1:f3:ee:3a:ba:9c:dc:5a:8b:
18:11:13:ad:f7:61:16:87:1b:0a:af:a7:35:b3:41:b0:36:ad:
db:52:85:33:b2:99:09:df:c9:85:d1:f9:1b:85:72:e8:99:9e:
9c:3a:9a:2b:29:da:a9:2c:83:fb:7e:76:fa:47:35:d4:49:0b:
8f:06:82:2d:96:11:2a:97:c8:94:38:71:af:0e:7b:e1:a3:df:
34:5e:b2:8f:fc:b9:30:ef:0b:3f:96:a7:35:31:df:9e:2f:64:
51:12:84:e0:5f:d1:f7:04:54:b6:80:2b:43:fc:7d:fc:0f:24:
00:5e:b5:6d:11:27:f0:27:84:1b:e6:77:b3:4e:87:9a:ef:07:
70:47:0f:9d:03:64:ca:5d:f8:b6:f2:33:64:c6:37:eb:2d:07:
97:37:f5:2b:f0:07:11:ed:89:cc:7c:06:fc:5a:0d:8a:aa:23:
cd:e6:51:fc:1a:aa:41:b2:df:cb:83:e6:b3:30:30:a1:79:12:
41:da:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org