Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/FBE8D33893DC11ED8CA1B551C4F9AE02.roa
File: FBE8D33893DC11ED8CA1B551C4F9AE02.roa (raw, json)
Hash identifier: EYT3CYGGYg+ufbBS0dUOfeh2f0cR7EBJ4c6ZhP/ayGw=
Subject key identifier: 60:6C:DE:B1:B2:DA:21:4C:70:EA:E6:BF:3A:73:27:C1:56:AA:00:27
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 0810
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/FBE8D33893DC11ED8CA1B551C4F9AE02.roa
Signing time: Sun 12 Mar 2023 22:09:02 +0000
ROA not before: Sun 12 Mar 2023 22:09:02 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 45814
IP address blocks: 103.82.252.0/24 maxlen: 24
103.82.253.0/24 maxlen: 24
103.82.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Mar 12 22:09:02 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640e4d7d-b965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:24:27:fe:aa:15:7f:fe:84:16:8b:cf:cf:
af:39:62:b2:96:83:0b:34:9a:a8:c4:f7:1c:61:ba:
dd:db:07:62:2c:25:2a:eb:8b:bc:05:f2:01:56:74:
89:f4:ed:68:db:71:c9:f5:25:17:0e:5b:d9:68:85:
14:25:ea:ba:92:4c:c0:f8:d6:d5:ba:ab:5c:4c:4a:
19:96:9a:ae:51:8f:5f:78:0e:d4:03:40:4a:aa:ed:
87:48:96:e8:53:24:9e:55:c2:40:2b:f6:df:a1:cc:
3b:59:0b:fe:d6:44:c7:a9:07:d8:2d:08:c2:3c:88:
5e:8a:77:3b:1a:73:ce:68:c4:23:de:40:24:a3:b4:
80:ee:82:66:b3:25:1c:ad:44:20:f9:57:fe:56:df:
ea:4d:dd:2e:9f:72:c2:b5:05:be:3d:de:59:11:39:
78:25:21:34:7e:28:26:ff:27:ad:77:98:b3:86:80:
10:96:5f:96:90:90:e1:9b:03:0f:f3:10:8b:a4:ad:
8a:c2:40:ca:bc:f5:8c:31:93:4f:6b:3d:ce:9a:a0:
f0:a1:dd:e8:0a:fd:d6:1a:20:b3:c8:c4:4f:4c:18:
55:a8:3d:ab:c4:b3:0b:d0:94:c8:bf:12:d5:71:4d:
1a:eb:56:a1:3b:a5:0d:90:aa:41:fe:6d:71:6a:58:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:DE:B1:B2:DA:21:4C:70:EA:E6:BF:3A:73:27:C1:56:AA:00:27
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/FBE8D33893DC11ED8CA1B551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.252.0/23
103.82.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:fc:65:91:cb:32:78:a3:4d:17:28:bb:f1:45:4e:3b:65:
35:3f:3f:94:3b:44:4f:35:71:43:21:69:c1:f5:10:db:3b:5e:
23:5d:27:5a:13:ab:27:08:d5:76:70:b3:90:42:99:4d:e4:d3:
53:48:69:e8:ca:8a:b3:61:29:3f:e8:6b:34:f7:a0:ea:59:ed:
3c:ec:8b:fd:00:d7:9c:db:3e:49:c5:5d:d3:07:71:1f:53:c6:
31:41:b2:7d:02:63:bf:23:cb:55:69:8e:6d:7f:18:62:31:06:
eb:ec:2f:d3:33:3e:06:30:82:a5:92:5d:de:c6:c1:64:95:6c:
30:2f:6a:c5:72:78:6c:be:18:89:e7:aa:80:bc:9c:eb:e8:b0:
d3:c8:45:63:56:41:03:f1:48:d6:ba:27:55:39:51:2a:c6:81:
96:35:48:6d:ad:7f:93:fc:44:00:4b:c7:e7:57:ee:34:ed:b5:
d6:dd:31:2c:8d:bc:5c:55:e3:f1:a1:c3:66:63:45:71:c2:f8:
f6:41:74:c0:15:70:8c:34:24:fe:6b:55:6c:11:60:10:ce:5c:
9d:ff:1b:b6:ff:10:df:52:ba:b1:8d:54:ca:03:6d:39:aa:d2:
20:a0:dd:86:0c:f9:47:b4:26:12:f9:54:38:1b:9f:53:13:ab:
74:4d:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org