Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/44E134D8CBA911EC903FA165C4F9AE02.roa
File: 44E134D8CBA911EC903FA165C4F9AE02.roa (raw, json)
Hash identifier: fNkt/fumyUwOEE9xnn/TGwks7h7dLPlvZkess072CNU=
Subject key identifier: E0:6C:4E:FB:88:B4:86:CF:03:54:A3:F9:18:8F:F2:2E:E0:81:AA:67
Certificate issuer: /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial: 17
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/44E134D8CBA911EC903FA165C4F9AE02.roa
Signing time: Fri 13 May 2022 14:16:27 +0000
ROA not before: Fri 13 May 2022 14:16:27 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 149810
IP address blocks: 103.186.240.0/24 maxlen: 24
103.186.241.0/24 maxlen: 24
2400:7620::/33 maxlen: 33
2400:7620:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Validity
Not Before: May 13 14:16:27 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=627e683a-e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:ed:4f:f1:65:80:bf:d0:2c:e6:af:a8:80:
1c:08:df:be:fe:76:2a:9b:cd:72:64:87:50:87:0f:
ce:17:b6:30:63:71:f1:35:40:8a:3e:f5:d7:a9:f5:
e5:59:6e:b0:f4:72:67:6b:d5:ee:ae:7c:0d:9d:48:
c8:fc:fc:d7:36:70:12:51:74:3c:40:82:84:50:09:
e1:7e:a2:ba:9d:24:94:16:d5:05:43:2d:e5:f4:2e:
a7:e6:27:e0:74:ef:b2:ec:6f:62:96:83:31:bb:ba:
0e:62:73:20:87:2c:23:7c:2a:4e:e0:4f:a5:df:27:
e4:90:8a:b9:4c:bb:f1:2e:05:7e:a2:60:6b:40:b1:
79:00:fc:54:5a:c3:fd:3a:01:b2:69:6f:7e:ee:8f:
cf:65:98:20:4b:b2:2f:e2:6c:5a:78:b1:20:32:79:
32:21:c3:ef:1f:c1:65:90:da:ea:c5:7d:e7:a0:eb:
9e:54:87:df:a6:4f:a6:ae:5b:29:cc:a6:16:63:04:
f1:4c:e6:ae:44:30:f7:53:95:d9:6a:06:9d:6c:d2:
a4:60:fa:67:63:83:33:51:af:ee:e9:46:a1:9e:10:
af:ae:15:28:57:14:ab:a5:11:1b:db:3a:5a:56:c7:
26:29:c0:1c:79:62:5b:ba:c0:95:a5:bb:b8:86:82:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:4E:FB:88:B4:86:CF:03:54:A3:F9:18:8F:F2:2E:E0:81:AA:67
X509v3 Authority Key Identifier:
keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/44E134D8CBA911EC903FA165C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.240.0/23
IPv6:
2400:7620::/32
Signature Algorithm: sha256WithRSAEncryption
92:5c:07:c9:29:d2:4e:ea:6c:1d:a0:fb:2d:4d:8e:c3:45:2a:
82:14:3f:3c:25:68:18:51:a9:1e:2c:95:2d:d3:d8:46:6b:19:
83:95:39:16:f0:8d:79:2b:01:5f:02:43:0f:a7:6e:e0:34:56:
56:c7:0e:7e:58:5b:7b:6d:e8:9a:bc:25:c6:1c:62:8b:44:3b:
1b:a4:59:03:bf:4b:2d:88:c7:68:28:3f:66:dc:90:a3:8c:b7:
25:0d:50:4c:81:d2:dd:5e:d7:cc:ef:b4:a7:7b:20:d1:36:a4:
bb:08:25:4b:ad:b3:ed:ca:e7:d8:8e:90:3a:25:26:38:a7:d6:
49:17:97:86:4e:89:80:24:b8:2d:49:61:0a:c1:5e:88:88:f3:
54:41:28:e7:ea:76:7a:d6:93:9d:e6:82:c7:ea:65:0a:be:04:
57:2c:b6:76:95:c0:46:c0:7e:01:fc:6e:7e:43:71:13:92:32:
60:29:66:e0:8e:fc:dc:e4:ff:c9:23:ab:de:86:07:d1:59:10:
70:05:01:fc:42:93:f7:9d:0f:79:cc:bb:13:08:40:f0:9e:d8:
06:b3:42:8a:64:01:16:9c:5a:5e:f0:21:8b:1d:67:c8:70:82:
77:49:ac:aa:7d:77:db:8d:7b:8c:ed:65:d1:5e:ca:44:3f:d8:
ff:2d:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org