Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/5C68ACD028A711ECBFEF2222C4F9AE02.roa
File: 5C68ACD028A711ECBFEF2222C4F9AE02.roa (raw, json)
Hash identifier: OSfpv4O1G3KSLNnego8UnEMIYVjo8cY2aWqcFljJYYQ=
Subject key identifier: AA:60:69:1E:EB:78:A8:9E:85:26:6F:E4:C7:DB:D1:F5:47:DD:29:12
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 0244
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/5C68ACD028A711ECBFEF2222C4F9AE02.roa
Signing time: Sat 29 Jan 2022 14:13:11 +0000
ROA not before: Sat 29 Jan 2022 14:13:11 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 137443
IP address blocks: 103.146.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Jan 29 14:13:11 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f54b77-17b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:bd:29:0e:10:fb:c4:a3:ac:87:a0:13:ea:
db:f1:1d:9c:41:c9:5c:d6:60:a7:e8:42:5c:e4:6a:
9f:dd:54:99:8e:c1:2c:e7:c3:9d:0b:4e:d8:29:51:
9c:84:0b:56:dc:31:32:b7:5d:91:67:00:f0:85:ed:
13:1a:bc:38:a9:b5:9f:ba:1e:8a:87:55:3a:63:bc:
04:2a:1d:a2:95:42:36:be:da:74:f4:fb:9d:61:df:
07:3c:dd:c9:33:0d:ea:d3:4d:22:ad:ae:33:5b:cf:
46:81:49:ba:ea:4d:d9:4d:13:2c:11:73:0a:fe:80:
bc:a7:da:07:bf:0d:ab:ed:f3:41:88:6f:02:a3:88:
d9:6e:44:ff:bc:ab:5e:27:a7:45:5c:a6:4c:2d:29:
2c:e0:df:87:bd:1d:41:b1:e4:ac:ae:c4:d7:93:03:
23:a4:94:e0:50:49:dd:58:5a:9f:09:5b:f0:7c:63:
eb:39:e0:54:d9:2c:77:98:f8:9a:b0:51:6e:48:62:
59:10:09:e1:bb:69:e4:dc:aa:52:f3:a3:f1:2d:a7:
95:11:ea:85:b9:67:53:73:e3:46:52:0a:e8:ad:6f:
03:57:5b:de:f1:f2:d1:74:3e:29:c7:d9:4b:2d:05:
06:bd:2c:c2:59:0d:2f:11:fc:07:cd:64:87:29:4d:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:69:1E:EB:78:A8:9E:85:26:6F:E4:C7:DB:D1:F5:47:DD:29:12
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/5C68ACD028A711ECBFEF2222C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:12:0d:e1:00:a7:20:57:5c:08:c3:27:64:78:fa:65:2c:5d:
9b:bf:ec:42:1f:d8:51:03:ae:82:72:e4:9a:4a:89:66:4c:48:
d9:3f:ab:4f:e7:d8:80:34:7a:3f:25:c7:c5:60:5c:22:4a:df:
28:59:e5:b4:1f:9c:f7:11:2c:31:41:af:29:67:e3:be:a4:17:
e0:e5:22:dc:50:fc:b1:8f:b7:0f:6d:1e:72:c8:14:d4:4e:90:
52:fa:1b:b2:4c:00:fb:75:f2:be:75:8a:15:25:64:c8:71:03:
27:00:51:b8:71:ba:cb:22:bc:57:f0:22:51:23:23:49:c6:72:
18:af:00:10:63:6a:27:84:7b:ea:3d:f4:4e:56:0a:5b:ee:eb:
b7:9e:11:43:df:52:2b:fb:d0:99:e2:3b:77:9f:d1:24:a1:6f:
bb:1a:3e:c5:e0:c1:4f:eb:8a:25:de:dd:ff:6c:a9:5e:fb:d2:
dd:97:e0:b9:ee:8a:86:4a:b7:c7:b0:22:00:c7:03:71:82:9a:
7e:72:2e:24:29:3b:ee:95:4a:a0:30:66:49:a3:17:84:e8:f2:
56:70:37:5b:3f:ad:1d:d2:a3:6d:0c:fe:f0:7b:5d:d2:9a:91:
40:44:05:fe:0c:2c:6f:3d:15:d2:88:b8:ab:51:7e:2f:72:c9:
86:40:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org