Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/028C576A281211EC84E0CE57C4F9AE02.roa
File: 028C576A281211EC84E0CE57C4F9AE02.roa (raw, json)
Hash identifier: jPEcrf/9ikr4qMYmjs66XQkIz3B9UaOqB6E8iHe+U8E=
Subject key identifier: 90:2F:3F:C1:60:C2:99:9E:1D:C9:D5:73:34:F3:D5:84:0F:AB:82:C0
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 0245
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/028C576A281211EC84E0CE57C4F9AE02.roa
Signing time: Sat 29 Jan 2022 14:13:12 +0000
ROA not before: Sat 29 Jan 2022 14:13:12 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 45250
IP address blocks: 103.146.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Jan 29 14:13:12 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f54b78-ba86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:07:0c:ea:0a:75:03:6b:98:a7:86:e9:b5:
db:e2:b4:1a:48:f1:55:3b:41:11:8f:e3:2d:c9:72:
8f:21:87:8a:a0:6e:4e:f3:23:5e:8e:a2:13:9a:8f:
60:a0:70:df:b5:77:14:57:ec:ea:0e:45:16:52:40:
11:e2:51:8c:66:94:d4:04:a4:8e:17:5a:b5:fc:bc:
45:7a:f6:05:ba:eb:3f:e5:ac:5b:d7:e2:71:9c:e8:
9a:e0:ee:71:18:2d:d4:d4:ea:c6:22:12:6c:80:c0:
ff:25:88:4c:c6:64:2f:09:c5:b7:46:44:e3:c3:2b:
a6:b2:7e:94:32:40:4f:b6:61:9e:5c:08:d7:71:f4:
f0:67:92:f6:9b:56:af:0a:4f:2a:fb:28:63:f6:ed:
a4:96:93:1e:1d:df:a9:11:be:03:1e:f6:fd:4e:8d:
8e:f2:3b:06:c9:4f:e9:97:fe:78:64:b8:1f:87:c0:
af:61:1c:48:23:17:ff:b5:8e:6b:f1:40:57:6b:6c:
27:d8:f3:5f:71:3e:07:b7:b5:1d:cd:66:45:06:29:
3c:ef:47:0a:09:83:2b:95:bf:03:53:37:c5:e3:71:
34:60:85:fc:28:34:06:8f:79:ab:78:ee:e2:b2:10:
a7:c4:69:bc:39:d2:7a:b5:d6:7b:85:77:6b:24:75:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:3F:C1:60:C2:99:9E:1D:C9:D5:73:34:F3:D5:84:0F:AB:82:C0
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/028C576A281211EC84E0CE57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:92:ef:f1:c4:e5:23:5d:9b:5a:75:10:61:a7:7d:e6:be:61:
76:2b:40:37:d4:c5:01:ac:20:05:a5:db:e6:c1:68:8e:69:f7:
47:8e:eb:4c:9f:d1:f7:09:77:14:d5:da:7f:bb:79:bf:24:18:
18:f8:b0:47:07:25:fe:c9:bf:2d:23:7a:74:5b:d2:3c:ff:61:
d8:53:82:28:a2:e6:27:f5:c0:e6:b5:a1:59:53:5d:55:f7:bf:
aa:6d:3e:f0:35:26:b5:79:ad:ba:e4:1f:e9:a7:05:ee:c0:6e:
4e:29:4f:ce:84:14:65:8d:35:13:a9:09:39:30:d4:cd:6a:bb:
a6:d3:ac:8a:27:8d:8b:94:7d:6b:74:f5:e4:d4:6d:b3:81:e8:
7b:e5:b8:cc:2a:4b:58:40:14:78:fd:8c:77:65:24:26:5d:7f:
bb:78:e8:54:7e:84:ea:7e:69:08:90:50:4c:ff:9d:ed:87:ca:
3a:71:92:d8:81:b4:9f:ee:30:73:73:25:ae:5b:49:70:0e:d8:
43:26:6b:30:e3:ea:7f:44:fe:c7:3d:d1:53:ea:e2:08:b4:ec:
3c:2d:f8:62:fe:80:99:37:17:e0:ec:23:3f:30:03:d2:30:16:
3e:53:f8:23:e1:23:a1:ce:ab:63:db:e0:80:c0:81:7f:2b:c3:
21:9c:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org