Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
File: CD8CEE3A489F11EDAA17361BC4F9AE02.roa (raw, json)
Hash identifier: X5Icsl2uaB/zDdXhVlgZWgbwHSkRUXOvcXSWkJsjf2E=
Subject key identifier: 6E:06:64:8A:FF:DE:41:84:96:EF:BF:15:55:C2:C4:7B:8C:CB:82:BE
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 043C
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
Signing time: Mon 10 Oct 2022 13:31:11 +0000
ROA not before: Mon 10 Oct 2022 13:31:11 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 45250
IP address blocks: 103.146.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Oct 10 13:31:11 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=63441e9e-8fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:cd:7f:37:16:0d:19:50:dd:09:47:a1:d7:
aa:52:04:fe:dc:eb:4b:0e:fc:7e:b8:0e:f8:a5:ee:
c8:18:5a:a7:8d:67:53:46:94:8a:f9:12:d7:a2:18:
e1:0d:f6:7b:bc:66:aa:27:48:09:de:27:a4:b9:3e:
e1:01:1a:88:8a:59:8b:68:cd:03:62:43:78:34:3c:
1e:82:87:01:5a:02:14:99:0c:19:a3:db:87:82:f6:
cd:77:e0:31:1b:b0:5b:34:85:f1:b3:0f:38:0a:96:
47:32:ee:4a:d6:f8:fc:64:e3:20:23:3c:66:8d:65:
fc:49:66:05:5a:22:b8:c2:45:10:06:e1:0a:60:db:
5c:67:41:b6:fc:5e:f3:d3:9d:d5:26:94:53:19:dc:
6e:d4:87:62:a7:81:17:c8:a1:51:2f:84:44:85:60:
68:2e:d3:8e:c3:5c:e0:b9:4a:a7:ba:e5:10:01:ab:
b6:c6:5e:12:b6:81:cf:c6:4e:77:6e:17:47:37:0e:
7e:3a:5b:56:f1:92:4d:51:15:4e:65:b1:ab:29:12:
bb:19:6e:5b:56:d0:e9:34:a0:8c:05:61:69:88:d7:
bd:e9:28:1b:c3:84:b8:54:87:9f:84:fb:bb:e3:e7:
98:97:a0:7a:07:dc:cf:db:30:c1:7b:d9:8e:36:5d:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:64:8A:FF:DE:41:84:96:EF:BF:15:55:C2:C4:7B:8C:CB:82:BE
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.78.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7c:61:24:78:21:89:55:6a:f4:1e:f1:90:7e:41:ca:a9:a3:
aa:04:2f:d9:2b:fd:c3:75:91:85:55:a0:9e:1e:c6:e0:28:fe:
7e:fb:79:a9:86:a3:24:f0:4a:d9:d9:3c:c1:71:63:ef:7b:b6:
ce:62:04:69:75:03:60:b4:15:a5:89:c0:9c:39:f6:e6:92:18:
ef:ff:4a:d4:18:1e:ef:c4:f3:61:e3:60:99:46:ea:32:4f:e8:
c1:eb:dc:46:e2:3c:76:c7:94:4f:0d:83:d1:f9:e5:90:86:7a:
94:c0:d1:31:b5:9f:a9:ec:6f:1d:be:e4:30:64:88:e8:7e:f2:
d4:76:57:76:42:6a:3d:eb:72:33:40:fd:e4:ac:ae:ba:01:7d:
3c:ac:00:e1:c1:09:fc:45:45:29:92:2a:c8:06:f3:75:b0:de:
6a:fc:94:36:64:7c:5a:66:76:6d:ab:26:3b:f8:4f:f2:8f:9c:
7a:0e:bd:67:91:eb:f9:e2:0f:52:28:87:e5:6c:28:d2:d1:24:
41:66:3f:58:bc:f6:c9:82:25:4b:5b:19:95:92:f5:f1:19:6a:
34:53:84:30:45:88:96:2f:0b:2f:70:27:bb:cf:64:11:35:21:
64:ba:e1:83:c2:57:e6:78:e5:cd:14:48:20:98:8a:50:48:24:
18:b7:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org