Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/CACBB8788F2E11ECAA3CB37AC4F9AE02.roa
File: CACBB8788F2E11ECAA3CB37AC4F9AE02.roa (raw, json)
Hash identifier: GwUlqrVUQNtH024Tiw8XaC8qcDpk2JUDY4bLrGDyB7A=
Subject key identifier: EC:1E:47:F4:A4:D3:8E:B8:2B:1D:20:08:CE:99:34:D8:F3:15:CA:3E
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 0897
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/CACBB8788F2E11ECAA3CB37AC4F9AE02.roa
Signing time: Wed 16 Feb 2022 13:46:08 +0000
ROA not before: Wed 16 Feb 2022 13:46:08 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137020
IP address blocks: 103.137.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Feb 16 13:46:08 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=620d001f-84c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:9b:87:f7:d4:4d:6b:39:1d:1f:28:93:bc:
ad:46:17:4f:53:e4:d4:c3:0e:4d:9c:67:de:23:0f:
2f:4a:a6:ed:bd:64:5b:7f:65:df:58:b5:56:27:b3:
07:42:fb:0a:a3:39:f5:9b:22:70:3a:96:25:7b:f6:
99:ab:b8:25:d6:64:2b:1e:7c:e8:f2:be:e2:3d:56:
3f:f4:60:8e:f8:67:4f:f5:fa:c1:7d:27:61:50:a0:
4d:29:a8:d7:fb:e3:6f:ec:a7:da:9d:40:88:3b:da:
05:6e:41:2c:01:07:81:e5:5c:b8:0d:3b:8d:bd:4c:
f9:a1:92:a8:13:40:32:ef:a8:17:56:33:4f:86:b9:
fb:56:95:f6:f3:d1:2e:35:10:cb:0e:81:29:5e:23:
b8:05:77:f0:bd:99:40:9b:8e:bf:87:d5:a4:a1:dc:
2a:e3:4d:10:8b:a5:16:3f:0c:54:aa:74:49:71:6c:
86:02:8a:83:c2:e4:a3:fa:e7:ee:9e:c0:e9:30:58:
5e:26:59:95:7e:5e:b7:4d:6b:6e:96:94:fd:75:d0:
29:a6:08:54:96:19:69:17:0a:1a:8d:3f:1a:e9:00:
22:d5:25:76:5c:bf:ab:bd:7b:93:b4:b0:f9:8e:d7:
cd:89:0b:49:98:7f:f8:c3:cb:98:96:c3:cf:e5:a2:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1E:47:F4:A4:D3:8E:B8:2B:1D:20:08:CE:99:34:D8:F3:15:CA:3E
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/CACBB8788F2E11ECAA3CB37AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9d:df:ff:53:30:ee:95:05:51:b8:9b:75:00:b6:aa:1d:27:
04:98:09:10:72:3d:2c:aa:a4:78:a6:d8:43:2e:4b:98:85:ba:
93:75:b0:d3:2e:72:ff:2f:74:32:25:06:3d:e7:b3:87:82:c1:
5d:b3:b4:c4:5d:06:a0:8e:cd:d3:74:86:d3:dc:e7:c6:ee:f7:
5b:e2:71:c9:fa:de:ce:68:43:a0:be:2f:a7:df:49:fd:0b:47:
9a:17:77:96:2f:e4:1f:72:60:45:d9:71:81:ea:6e:4a:67:9b:
a0:03:a0:3d:24:c1:f5:65:cb:0a:16:e9:0a:4f:75:f9:b1:c3:
dd:68:c5:33:92:7e:47:fe:1e:df:3d:4a:ef:97:66:4b:33:b7:
1b:29:ed:59:fc:72:8a:4b:32:a3:04:83:f6:30:0b:27:57:fe:
08:a8:7b:32:8e:6e:2a:4b:26:14:d6:69:3c:f6:ac:9c:74:75:
17:b6:86:24:7a:26:18:37:fa:0e:27:bb:fd:bd:28:96:b3:86:
0f:f3:c1:6b:1e:12:66:90:17:fa:7e:c8:fd:61:ad:71:13:02:
35:aa:c5:08:70:59:2f:0b:ec:1e:e9:42:5f:6e:49:59:29:35:
23:71:e8:08:83:c3:63:88:71:c0:7f:26:7b:25:63:dc:0c:9b:
8f:57:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org