Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/8448477E679111EBBF5BDC5EC4F9AE02.roa
File: 8448477E679111EBBF5BDC5EC4F9AE02.roa (raw, json)
Hash identifier: M0i8vpIbT+R4ktpVsn+H31rBx1ox99lmuoi1yQgb+NI=
Subject key identifier: 8A:37:A3:91:B3:54:83:79:24:B4:6C:8C:9D:96:4F:D5:1F:74:AF:86
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 03CC
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/8448477E679111EBBF5BDC5EC4F9AE02.roa
Signing time: Fri 29 Apr 2022 01:11:32 +0000
ROA not before: Fri 29 Apr 2022 01:11:32 +0000
ROA not after: Sun 28 Aug 2022 00:00:00 +0000
asID: 9009
IP address blocks: 103.110.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Apr 29 01:11:32 2022 GMT
Not After : Aug 28 00:00:00 2022 GMT
Subject: CN=626b3b44-67de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:68:83:68:a6:13:42:06:8f:04:12:eb:d3:
79:5e:03:f2:9a:b8:3b:01:36:ec:89:f4:9c:1d:ce:
77:0f:12:a0:15:44:65:e4:2e:bc:d4:cf:5f:0c:d4:
71:6e:92:8a:16:c9:4c:1e:9b:ff:7b:10:d9:9b:e6:
f3:1e:5b:b6:56:f6:f7:f7:04:ee:ff:52:d4:51:f9:
b1:56:93:5c:23:52:ca:ba:3c:a7:47:54:5d:2b:ce:
90:45:5a:b9:48:f5:44:e3:bb:72:fc:5b:54:3f:77:
82:2d:20:2e:50:47:cc:3d:3d:f7:08:37:f3:e9:a6:
e3:e7:21:1a:f6:61:7d:06:ae:2e:31:bd:fd:ec:ef:
0a:22:fd:0e:2f:d4:2c:5f:34:9c:80:36:67:23:e8:
04:41:a8:03:f6:c4:62:9c:5d:2d:28:35:6f:d9:2f:
be:f2:fb:41:1d:18:7d:f6:24:7a:28:a6:0f:de:0d:
7d:a9:66:b0:e5:42:d0:35:5e:30:d7:27:36:6e:4f:
61:06:1e:6a:ae:44:e7:5b:b1:56:41:51:20:d7:3f:
45:c5:f6:a5:3a:1f:e7:7a:c8:e7:78:5a:fb:6a:f8:
93:02:1c:79:a8:c0:4e:05:d7:38:50:3a:16:96:ad:
04:be:b7:b0:01:3e:7f:73:5a:cd:62:eb:d8:3e:6b:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:A3:91:B3:54:83:79:24:B4:6C:8C:9D:96:4F:D5:1F:74:AF:86
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/8448477E679111EBBF5BDC5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a3:94:45:c0:3a:8f:a9:25:c7:33:79:1b:ba:2f:d2:3b:f1:
a9:6b:91:67:fc:5c:ec:0c:e8:37:2b:cf:d1:a2:d3:6a:46:e6:
62:e0:8f:25:54:48:33:57:a1:6e:f3:6e:43:b3:54:91:d4:45:
05:5b:fb:29:e2:eb:e8:53:20:d7:2f:0f:be:32:db:32:56:e8:
0e:11:7d:20:78:8e:45:d4:55:13:2e:82:c8:7d:35:69:d9:6a:
93:01:eb:3a:81:f2:30:46:73:e3:9c:bc:de:67:fd:86:b0:38:
bb:46:1f:91:6f:74:0c:9d:97:e8:17:ad:13:d7:ae:a3:3e:ab:
b5:a6:a6:a3:4a:b9:17:36:78:49:b1:b8:e7:50:ac:d6:ce:29:
d3:21:82:90:5e:32:d8:ab:6f:f4:91:48:b3:39:f7:fc:34:1a:
99:70:37:a1:3b:ae:67:e9:27:60:14:40:72:53:65:8e:17:e0:
8b:9f:9e:b6:70:83:b0:0a:1a:c7:61:ce:4d:79:1c:12:30:7d:
85:18:bd:d8:f2:6a:e4:ef:2f:04:ce:a3:03:ad:c5:af:d4:a4:
f1:27:9b:57:42:e4:c6:ab:b4:ad:6d:2b:ec:7d:55:48:a6:49:
ba:41:33:41:07:7f:89:29:fc:99:8b:c4:9f:85:49:ff:ee:8a:
3c:aa:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org