Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/1323933E468711EC8CC2B882C4F9AE02.roa
File: 1323933E468711EC8CC2B882C4F9AE02.roa (raw, json)
Hash identifier: huChNDV/EPvYzxUpk1K7bmKhavI7i+S/Cj7QZQywSRo=
Subject key identifier: BE:1F:AA:EA:87:C8:7B:48:1B:ED:8B:05:A8:39:56:BF:CB:A0:D6:B5
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 12B1
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/1323933E468711EC8CC2B882C4F9AE02.roa
Signing time: Thu 02 Dec 2021 17:53:51 +0000
ROA not before: Thu 02 Dec 2021 17:53:51 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 30058
IP address blocks: 103.104.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4785 (0x12b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Dec 2 17:53:51 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a9082f-e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:1c:8a:ab:28:ca:0f:67:31:f6:0e:cf:c6:
25:e1:22:f9:81:64:f5:95:c1:91:cb:68:40:0a:95:
0e:88:2e:83:00:24:c4:42:af:72:90:3f:be:19:1b:
14:0f:12:e2:b4:02:c8:22:15:19:f5:65:ad:48:90:
53:2c:f3:bb:79:23:f3:4f:5a:f0:35:96:5e:ad:a4:
15:51:a9:7d:77:68:b9:8c:32:d4:47:d4:ca:9a:53:
87:e5:62:4d:f7:f0:f8:23:8d:56:32:f8:f4:12:74:
dc:10:52:05:58:26:81:00:59:ee:89:64:1f:eb:c5:
b0:45:69:71:89:f9:08:12:ca:b3:46:07:ff:69:fd:
03:22:53:fe:9b:f4:c9:a6:42:ab:9b:c4:d9:8c:b4:
92:f0:74:12:32:14:d4:7b:b6:ad:f4:1e:0e:1d:46:
17:77:cd:df:a2:2c:71:d8:40:c1:65:9d:c2:ce:61:
0d:d8:9d:ca:f6:69:53:c0:5c:dc:ab:fa:25:41:56:
cf:01:3c:04:89:cf:f8:96:e5:4b:50:ed:74:17:13:
b8:43:db:60:a9:15:79:29:cc:cd:87:9a:3f:d0:d0:
2a:5c:74:31:bc:70:0a:a0:a7:9f:87:bc:d5:f6:fe:
e7:13:a6:bf:7b:91:ee:bb:11:de:60:e8:1a:17:65:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:AA:EA:87:C8:7B:48:1B:ED:8B:05:A8:39:56:BF:CB:A0:D6:B5
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/1323933E468711EC8CC2B882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:ed:9d:5c:34:74:c3:30:c7:ca:25:05:c2:a0:c1:a2:8b:fb:
22:46:16:10:e4:9e:97:96:ba:e7:e0:98:6f:65:43:8c:da:ae:
5a:0e:3e:89:d8:04:0c:af:86:24:a6:58:58:a0:34:5f:56:ac:
f0:d5:8d:2d:5f:c9:bc:4d:a9:d0:c9:e1:ea:d7:cb:55:fe:f5:
f7:2f:4e:7d:c2:cf:87:da:da:57:21:f2:8c:74:72:78:2c:e2:
56:53:46:3e:c1:48:7c:25:00:3a:a3:4f:4c:d6:bd:08:d5:e9:
a4:69:3d:5a:3e:9e:8f:ae:30:18:07:5d:3d:5f:c9:6a:9a:09:
29:de:1d:00:b2:ac:15:04:6a:b0:09:06:31:fb:3f:3c:21:44:
c0:18:47:a1:eb:ed:13:29:df:59:a4:1d:cf:3f:9d:7b:c4:d6:
50:86:66:74:50:5c:18:f3:7b:6b:5e:18:7a:12:bd:9e:9e:15:
5a:72:0f:2e:48:48:c3:ec:8d:5d:b4:e0:80:73:94:2e:f1:be:
67:2e:e5:dc:e5:28:99:22:75:2f:3b:90:92:c4:fb:05:48:cc:
fc:3e:d5:2a:ca:db:52:e0:63:f8:b4:dd:b9:33:f2:fd:e7:34:
95:67:43:96:af:0a:e5:c5:9d:8b:2f:e7:79:36:78:93:49:46:
8c:e4:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org