Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/0826E930F2A911ECBF0F1250C4F9AE02.roa
File: 0826E930F2A911ECBF0F1250C4F9AE02.roa (raw, json)
Hash identifier: 3EunZ4ZxjxkSi65ZANChoNZhRuYkEO4WjcJcPJ5Q4CM=
Subject key identifier: 4C:55:43:65:C9:75:B3:6F:8A:2E:81:3F:E7:AE:6E:26:17:20:19:54
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 09B8
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/0826E930F2A911ECBF0F1250C4F9AE02.roa
Signing time: Mon 18 Jul 2022 04:06:52 +0000
ROA not before: Mon 18 Jul 2022 04:06:52 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 49981
IP address blocks: 101.99.93.0/24 maxlen: 24
103.155.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Jul 18 04:06:52 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62d4dc5b-666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:91:b6:74:29:e4:8b:09:1b:22:6d:2a:17:
06:e2:36:58:e0:b8:ed:b9:c9:b0:b9:52:ab:db:ab:
ef:0b:a7:e4:12:aa:60:d8:a4:c5:9c:a0:2d:d2:44:
fe:bc:74:5f:eb:bb:2c:7b:90:c4:26:a1:49:0c:a1:
f7:7c:bb:8c:9f:dc:5b:7e:dd:79:46:f1:33:ff:af:
f7:be:92:7f:54:eb:e8:46:64:1a:9b:df:e3:d3:19:
af:68:ea:e0:bc:2b:9f:6b:c6:b1:ca:6d:7d:f3:af:
c7:4a:7a:c6:16:9e:08:dc:38:00:a9:b2:89:82:ca:
dc:63:1b:80:60:7c:26:c7:c2:d2:68:7b:bd:d7:18:
0b:0b:63:a0:64:39:d9:b7:14:df:e1:46:68:a0:30:
9c:75:f0:43:6e:eb:82:c3:cc:b9:a2:28:86:8e:bd:
f1:38:eb:e0:cb:c0:d9:5f:d3:0c:10:d7:01:da:36:
06:76:50:c4:03:6c:0a:01:f4:18:f2:07:16:53:c6:
ff:c0:17:35:ff:68:a7:ba:d3:98:d3:cb:b5:1b:f5:
cd:be:0a:3f:46:86:03:4e:7d:60:85:1a:0d:4b:c2:
28:5e:cf:aa:e0:88:a0:28:b7:bb:64:e9:7f:01:0c:
7e:bc:3f:d6:85:9c:fb:88:9e:4a:bb:af:a4:ac:e9:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:43:65:C9:75:B3:6F:8A:2E:81:3F:E7:AE:6E:26:17:20:19:54
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/0826E930F2A911ECBF0F1250C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.99.93.0/24
103.155.93.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b5:b3:6a:b3:1a:b3:f1:fe:83:81:9f:7f:46:ff:93:81:cd:
f0:0c:7f:cd:fb:75:e4:f4:d0:50:7c:d3:b2:e6:21:91:20:7b:
79:70:83:3b:9f:a4:59:3e:5b:34:29:9c:d9:73:75:0e:e4:01:
35:d3:70:a9:04:09:cf:b7:32:d5:f6:0e:7f:40:94:e6:be:80:
e0:07:90:56:96:41:93:e0:fd:4b:ab:51:b1:89:94:10:3c:35:
a3:13:09:1b:e1:77:31:6f:41:8d:a6:d0:78:9c:62:cd:bd:ce:
c3:06:ca:f7:03:f3:9f:cb:4d:2d:fb:9d:f7:8a:0c:a9:40:bd:
82:0c:e2:e2:81:88:26:3d:84:64:22:06:a7:c5:f5:4f:63:a6:
18:10:63:a1:85:49:d1:1c:b6:31:0b:69:2d:37:39:dc:08:a2:
a3:f7:84:51:3b:a0:89:df:b1:c1:17:de:36:53:d8:fb:0c:c4:
ed:eb:b7:c4:d1:0a:89:83:e3:0f:1a:5c:37:c3:2d:e6:72:4b:
36:80:c0:5e:32:86:2b:05:89:f4:ea:ea:69:25:da:e1:9e:2b:
65:4a:39:ea:23:57:69:d3:18:96:f5:69:d2:81:ec:df:18:0e:
e0:77:3a:58:6b:00:a9:b0:35:2c:f1:fd:35:68:5a:4c:12:bc:
43:e2:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-ams.rpki-client.org