Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
File: 835982F681CB11ECA9597151C4F9AE02.roa (raw, json)
Hash identifier: DO0DslgF3dD7aFB/SHNsUyteS0FO66Qv+NAR+r1hPEk=
Subject key identifier: 9A:31:BE:EF:7B:AB:0E:10:6D:08:C2:33:E9:CD:91:D8:04:DD:DB:FC
Certificate issuer: /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial: 02
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
Signing time: Sun 30 Jan 2022 12:52:42 +0000
ROA not before: Sun 30 Jan 2022 12:52:42 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 141181
IP address blocks: 103.155.184.0/23 maxlen: 23
103.155.184.0/24 maxlen: 24
103.155.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Validity
Not Before: Jan 30 12:52:42 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61f68a1a-b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:51:f7:3e:8a:94:7d:cc:86:5e:29:ba:09:
fb:f8:ef:d9:1c:5b:8c:81:35:3e:3e:7a:f9:48:95:
bc:aa:74:c9:89:a4:46:c3:c5:06:aa:96:be:1e:c0:
2d:0e:d2:87:0c:03:0b:2b:45:b6:fd:69:9a:cf:f7:
73:c8:a7:d6:7d:90:6c:5d:c5:f3:ed:1e:0a:72:27:
b5:81:bb:29:74:8a:e5:bd:25:be:70:dd:05:1c:11:
13:a6:4e:58:bb:60:d2:fd:9c:24:5b:01:0b:64:60:
fe:0f:5e:f2:db:32:e9:1c:a3:b9:cb:6e:bb:8d:e4:
41:26:09:75:e4:14:c9:3e:de:59:25:fb:3b:8a:82:
c4:62:7e:91:b3:13:9d:43:16:0d:ab:1e:54:2a:b0:
a2:01:c1:b4:1f:b5:88:e1:c3:06:a3:1b:1d:6a:4d:
6d:b3:4c:dd:20:a2:7e:11:95:34:d1:55:11:53:4a:
04:f0:29:e5:3e:c1:65:ed:1e:ea:c2:4b:61:a3:c0:
2b:10:db:06:d9:aa:58:29:5a:96:2e:79:f9:c2:69:
88:c5:2b:c7:f3:d4:13:39:29:5c:90:a9:3d:93:85:
e8:5c:e1:8d:2e:a6:61:97:de:f6:0a:e4:54:f5:ce:
94:04:0f:5f:a4:7e:4f:ad:b2:ca:8c:68:52:a3:d4:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:BE:EF:7B:AB:0E:10:6D:08:C2:33:E9:CD:91:D8:04:DD:DB:FC
X509v3 Authority Key Identifier:
keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.184.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:a9:c5:77:91:bc:6b:56:f6:3a:a0:13:49:55:ab:db:c2:66:
df:1a:3c:67:4e:e4:74:50:0e:b9:67:03:33:cb:dd:01:61:95:
d1:6c:3d:5d:5b:41:c1:76:22:0d:0d:14:f9:49:d8:bd:30:9d:
67:d7:e4:23:2e:c8:8a:fd:7a:dd:fc:f9:73:fb:08:09:b3:f8:
30:ff:d7:98:c7:de:68:99:ab:2e:9d:04:12:9e:b4:d3:3a:dd:
8e:e3:fa:95:3e:61:61:06:4e:90:64:a1:40:24:cb:f3:8c:8b:
3b:a2:bc:d3:98:8b:2b:e8:6b:7c:34:94:f3:fa:72:c8:06:6d:
45:ea:f1:56:52:8b:79:12:ff:71:24:8b:bc:11:1b:d4:11:17:
84:c7:fd:e2:99:d2:8d:1a:f1:65:9c:4b:8b:27:9a:8a:de:81:
12:dd:c6:40:98:a9:5d:7a:19:94:c6:ea:a4:81:ff:f8:47:f1:
fa:d2:36:31:7d:8d:fe:cb:c8:58:43:f6:99:c9:de:33:3c:c2:
61:55:9e:b1:68:b2:a9:29:89:c5:c6:34:3e:70:d8:6f:af:d4:
b0:d1:87:24:f7:2f:30:d1:b7:7d:70:25:15:9a:2d:f5:85:71:
5d:a1:47:e9:d3:fe:37:00:05:e1:73:c7:35:09:02:97:dd:65:
72:f4:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org