Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/D10CB006A44211ECB8C1B924C4F9AE02.roa
File: D10CB006A44211ECB8C1B924C4F9AE02.roa (raw, json)
Hash identifier: kDT2aVaAo7T04e+rrpi2h1oCkAQQYf70+A9qu3Wl9BU=
Subject key identifier: 9B:F9:2A:7C:E1:B9:F2:3C:DD:8E:61:56:64:B7:53:06:A9:5C:31:46
Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial: 01A1
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/D10CB006A44211ECB8C1B924C4F9AE02.roa
Signing time: Tue 15 Mar 2022 09:32:23 +0000
ROA not before: Tue 15 Mar 2022 09:32:23 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 24322
IP address blocks: 103.171.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Validity
Not Before: Mar 15 09:32:23 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62305d26-3253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:a1:ee:ce:92:fe:a7:9b:ff:1c:75:66:f1:
c4:db:99:92:13:94:e5:00:cd:58:6e:b7:04:25:cc:
a4:40:d9:0a:cc:64:a8:38:2c:5b:77:2c:71:5a:d7:
54:c4:30:9f:35:6f:a1:37:7c:1a:d5:02:27:d1:30:
24:02:1b:eb:e4:86:da:7c:0e:e2:11:29:83:d3:1e:
a6:51:5a:f3:7d:bb:29:f2:0d:8f:e9:47:40:c6:22:
52:72:ce:42:6a:21:e9:18:4c:31:bc:8c:61:ea:e6:
45:ab:a6:e7:a6:93:6e:ea:99:00:6c:ca:a6:74:88:
48:72:08:54:08:8e:2c:7c:1e:9b:56:ab:34:75:cc:
3b:f5:46:33:20:dc:95:9a:54:eb:05:cc:77:43:85:
c7:2c:cb:bb:ae:c3:28:78:4b:e1:f6:02:49:0f:dc:
90:27:18:8f:ff:d5:a1:39:0e:3b:65:4c:0d:d6:c6:
24:44:da:c2:49:17:69:cd:96:3f:8d:38:48:e9:7d:
55:2c:13:05:00:f2:60:b3:ec:aa:08:7f:54:9f:3a:
e9:b3:6f:4f:22:cc:62:6e:29:16:2c:d9:32:0f:e9:
af:03:c5:44:cb:aa:6f:5c:18:58:98:0f:04:2b:e6:
2a:36:2c:cc:5f:0e:b2:90:02:d6:a4:bd:23:63:6e:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:2A:7C:E1:B9:F2:3C:DD:8E:61:56:64:B7:53:06:A9:5C:31:46
X509v3 Authority Key Identifier:
keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/D10CB006A44211ECB8C1B924C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.136.0/23
Signature Algorithm: sha256WithRSAEncryption
44:bb:a5:c8:17:32:f5:d5:d2:41:0a:43:9b:80:a6:a0:bd:9a:
6f:b4:1b:48:7b:76:f4:13:72:58:f5:6f:d8:27:31:a4:35:59:
b1:66:23:49:e5:6d:c4:e9:dc:c9:73:64:85:ce:94:60:04:4e:
96:29:44:66:8f:bd:4c:d8:29:55:fe:e7:58:5a:96:de:cb:57:
82:ed:af:d0:82:4a:61:18:2b:14:d7:c5:df:86:59:a7:51:09:
87:4a:be:7c:d9:09:15:46:a5:e9:88:c0:ab:35:4f:66:15:c4:
34:c2:7e:84:05:96:93:58:a3:26:80:45:d8:1c:3d:50:f1:26:
90:98:0d:6b:2e:31:fa:5b:80:a0:cf:31:81:9d:b1:58:7d:10:
bd:9d:8c:8f:ad:76:ab:06:a5:30:f3:95:65:57:97:d5:39:b3:
65:ae:a4:cb:22:7a:a8:44:f6:5e:c4:c5:ec:f2:46:ed:c8:f8:
d8:ab:c0:9b:74:43:d0:2a:02:57:26:04:4a:37:d3:54:31:3f:
5d:c4:fa:9f:1a:d9:16:8b:5c:0c:6f:fe:e2:52:47:5b:ad:78:
a8:89:6f:ff:db:15:3f:5b:93:43:ad:b1:ec:96:6e:44:84:77:
ed:bd:22:09:12:c7:43:0c:25:9e:bb:52:a6:94:4e:db:55:1d:
7c:71:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org