Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54E9EF20BB1C11ECBF12EE13C4F9AE02.roa
File: 54E9EF20BB1C11ECBF12EE13C4F9AE02.roa (raw, json)
Hash identifier: n99njbl7GcRMdOH5B2jYv4nnFWsQ0X7ugz4QtmQV2xg=
Subject key identifier: D3:D1:87:78:96:F6:10:13:8C:90:45:EC:2B:76:0C:93:23:AF:AF:15
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 0EEC
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54E9EF20BB1C11ECBF12EE13C4F9AE02.roa
Signing time: Tue 10 May 2022 07:24:48 +0000
ROA not before: Tue 10 May 2022 07:24:48 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 140096
IP address blocks: 103.102.4.0/22 maxlen: 22
103.102.4.0/24 maxlen: 24
103.102.5.0/24 maxlen: 24
103.102.6.0/24 maxlen: 24
103.102.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: May 10 07:24:48 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=627a133f-740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:be:fb:f3:7d:5c:b4:20:e0:c4:89:7b:da:
c7:b9:59:02:4a:22:ce:d2:fd:2a:07:aa:4f:0e:60:
55:e8:94:df:36:7f:76:e2:52:79:16:2d:a5:a7:26:
6b:98:90:8e:b0:e9:f6:90:27:31:d8:ab:e2:02:d6:
89:2c:8d:09:10:ba:ff:ca:e0:48:5b:ea:a3:ba:b1:
c7:de:ba:3d:10:c2:21:ad:8b:51:cd:4d:7f:68:a0:
4f:56:fd:ee:8c:99:3f:29:3d:42:42:fb:97:59:44:
93:5d:bd:7a:5a:63:30:3d:69:f3:78:d4:3d:d7:55:
b7:0b:17:11:de:3f:72:08:b6:37:1d:de:73:22:7f:
e5:5a:39:0d:d2:31:d7:97:72:01:a7:44:0e:32:38:
6d:05:2d:8f:7d:ae:68:8f:c3:e0:9f:3a:1b:4e:7e:
24:0c:b6:d6:24:4a:e4:26:b1:cd:8a:69:16:df:d3:
fc:d1:dc:f7:5e:d0:05:12:d9:68:f3:c9:52:a8:9a:
27:45:e4:74:c2:bf:e3:18:72:29:42:88:a5:bf:b7:
bd:e0:35:9d:71:1f:ec:50:a9:99:5f:f8:11:5d:d3:
65:ae:52:ce:19:45:0a:f0:ca:8b:b3:55:67:f0:c7:
3b:94:a3:65:dd:36:1d:c9:fb:9f:c6:83:53:df:45:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:87:78:96:F6:10:13:8C:90:45:EC:2B:76:0C:93:23:AF:AF:15
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54E9EF20BB1C11ECBF12EE13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.4.0/22
Signature Algorithm: sha256WithRSAEncryption
74:11:b9:4b:14:0b:3b:95:21:58:9f:ab:58:c8:a8:8e:07:e8:
4b:7e:40:10:6d:a3:63:da:f7:61:ab:a9:a7:b2:93:a9:5c:5d:
5f:4b:67:9f:59:79:42:c7:60:c6:aa:2f:b1:b3:c3:66:f9:18:
fe:2c:a8:7b:17:6c:31:89:0e:6b:9f:5e:04:9f:4b:7e:b3:2a:
68:a8:d1:94:f5:c6:bf:f2:8c:ee:18:8f:d9:c9:98:dc:92:8e:
cc:d0:b1:8b:67:0c:04:44:ac:06:f3:ed:e1:b1:c8:be:50:2d:
a0:40:98:99:23:8b:01:a2:06:b6:c3:0a:ca:7c:c3:54:f1:9f:
29:ba:d9:23:67:1d:2b:09:32:fa:1b:49:cf:e3:ad:25:a6:70:
ed:2c:a5:ae:e8:73:79:76:a7:8e:20:24:7d:66:4a:5f:24:3b:
66:ca:9b:c7:e2:c1:40:de:62:08:a6:d9:47:03:e1:ed:3e:df:
70:15:12:2c:3e:7e:da:5f:bc:40:d8:3f:77:31:e1:7c:80:44:
95:d4:d1:41:45:65:75:5e:b7:7c:e7:43:f6:9f:53:1d:0e:e4:
9f:de:70:49:40:98:a3:3b:6b:3a:a8:86:1e:3b:c2:0e:60:a9:
14:52:74:a2:b8:22:2d:10:b7:e6:df:75:16:47:ef:76:41:e2:
db:76:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org