Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/F42A316C230611EB94B5D684C4F9AE02.roa
File: F42A316C230611EB94B5D684C4F9AE02.roa (raw, json)
Hash identifier: 8KJMCtH8vxZy//GsMnvHv2ol6JZbvu1/rX8ake+AcO4=
Subject key identifier: 39:F6:EB:D1:FC:33:CE:44:7B:4F:9B:DD:02:28:AC:8A:10:B3:B2:D9
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 08D4
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/F42A316C230611EB94B5D684C4F9AE02.roa
Signing time: Wed 30 Mar 2022 21:07:17 +0000
ROA not before: Wed 30 Mar 2022 21:07:17 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 57043
IP address blocks: 101.99.93.0/24 maxlen: 24
103.155.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Mar 30 21:07:17 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6244c685-0aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:b8:73:4d:be:6a:5b:fc:7e:f6:e5:13:36:
0c:09:04:7f:79:a9:b5:11:46:ef:12:bf:bc:2c:81:
2d:b2:7a:5e:45:e7:23:8b:f8:d8:6f:63:ce:cf:03:
74:e8:58:f6:5f:c7:d5:1f:af:07:5b:c4:fd:5b:0d:
55:81:37:a0:d2:21:cb:08:c0:ba:fc:b8:f0:26:23:
64:3a:47:c6:97:cd:47:6e:b8:6f:63:40:7d:f7:f2:
cf:58:7a:f5:3e:f0:ff:3a:c0:c4:ca:0d:36:56:1a:
8e:30:bd:f6:78:da:fe:14:2f:de:b7:ad:33:2b:3f:
77:22:df:d1:a1:52:19:4f:98:69:e0:e6:11:6c:3f:
da:27:de:ff:3a:d1:50:3a:d1:10:1d:a8:6b:44:0b:
1e:d4:95:26:d1:83:16:0e:c5:80:fc:16:95:7d:e1:
05:f4:45:94:db:69:0f:4c:e7:a3:c5:99:f1:a3:74:
19:84:fd:29:9e:ff:b2:89:6f:5d:a9:e4:52:18:cc:
0a:5e:2d:3d:7b:49:34:7b:03:34:11:83:37:c8:d2:
78:a0:ad:93:c6:21:b8:56:16:8a:a9:76:56:a0:0b:
b6:0f:4b:c8:0d:e8:fd:08:cd:22:7a:de:45:5c:32:
af:d4:e0:91:5f:49:bc:3f:0d:c2:8a:ec:41:e9:68:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:EB:D1:FC:33:CE:44:7B:4F:9B:DD:02:28:AC:8A:10:B3:B2:D9
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/F42A316C230611EB94B5D684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.99.93.0/24
103.155.93.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6d:86:e3:b0:88:9e:0e:f3:64:9f:d7:6d:78:43:9a:db:82:
26:f9:78:ad:e8:3f:24:bc:74:6e:39:fd:00:9a:7b:61:6d:44:
e5:78:34:d8:1e:4c:04:e8:f1:a5:3f:17:10:e5:5a:01:5d:ca:
70:df:4c:76:7a:ec:2b:f4:a8:81:fb:d9:35:b3:ce:3c:ae:53:
a6:59:3b:13:11:cf:f1:fa:7a:f3:0a:35:69:49:b8:39:8e:d2:
f3:c1:c2:44:50:27:82:85:8b:3a:0f:39:20:0d:9d:80:fa:85:
23:b9:37:2a:36:04:38:0a:3d:d2:b6:31:ca:df:4e:f0:24:1a:
04:4a:48:5e:d6:d5:91:c4:d3:1d:f2:e0:89:3e:f4:cf:44:54:
b0:89:4d:b3:f8:eb:94:78:f2:83:26:b8:e7:4f:92:04:0c:93:
10:db:87:10:30:2b:01:e0:bd:ad:c2:72:03:31:c4:be:3f:0a:
4a:e9:69:c8:85:e5:af:fc:00:4c:c9:c5:84:f2:af:52:00:31:
a0:5a:9f:ba:23:ae:1a:fc:ec:3f:28:8a:86:43:37:8a:61:8d:
d1:a8:da:9e:64:62:ca:e6:f4:c0:6d:33:b6:5a:b1:73:5c:ae:
b6:bf:ff:58:da:69:79:fb:50:78:cb:f1:4c:56:c6:21:d5:15:
15:f7:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org