Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/086DACE0C4FE11ECBD72527AC4F9AE02.roa
File: 086DACE0C4FE11ECBD72527AC4F9AE02.roa (raw, json)
Hash identifier: 33p6+ekyZ4Ed2QYQg/6jq5ehq5hJJzKK5lsSTMhv6vk=
Subject key identifier: 81:B3:88:BB:2B:C2:A4:4F:F8:E5:22:F2:F4:F5:5B:0A:37:74:4F:B6
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 01EF
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/086DACE0C4FE11ECBD72527AC4F9AE02.roa
Signing time: Tue 26 Apr 2022 01:13:09 +0000
ROA not before: Tue 26 Apr 2022 01:13:09 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24499
IP address blocks: 103.123.112.0/24 maxlen: 24
103.123.113.0/24 maxlen: 24
103.123.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Apr 26 01:13:09 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62674724-adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:95:ff:ae:64:83:b2:6a:8e:6a:45:b1:e0:
c0:b7:78:6b:9a:38:91:bc:34:13:b6:43:c1:00:34:
ce:63:29:d5:41:4c:e3:ee:49:b3:a9:b1:4a:57:1c:
23:65:a9:30:65:6b:8f:f5:33:d3:5e:85:c8:fe:82:
c6:90:01:63:fe:18:15:f6:3e:e5:c6:10:c4:e1:cb:
16:68:0b:34:20:03:95:8b:59:0b:d9:b2:0b:2d:39:
6b:fa:5a:25:fd:28:a5:d9:0e:7d:6d:d8:bb:9f:9f:
8c:1c:e5:b3:4c:12:80:39:d2:ca:88:14:51:88:5f:
5d:e1:ac:ca:26:02:ad:bc:7f:7f:7d:b9:29:19:ea:
85:7b:9b:0b:a7:c9:73:fa:f7:0f:44:16:47:39:37:
5e:52:a9:a6:02:91:a2:32:9a:61:7e:40:63:08:1a:
15:71:42:4e:14:97:a5:4d:f2:75:91:85:f4:9b:98:
74:6e:3a:e0:12:45:14:20:a1:9c:0f:7f:64:44:9b:
c0:ef:58:3b:b4:b1:8c:d7:30:ac:69:c6:2a:a6:43:
a1:0d:77:06:d5:18:fb:96:54:98:0e:46:de:eb:c3:
b5:9d:e5:2c:9e:aa:93:48:58:e0:75:7c:69:e7:43:
19:f5:0a:9f:48:86:35:ec:f0:ae:f0:39:23:45:10:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:88:BB:2B:C2:A4:4F:F8:E5:22:F2:F4:F5:5B:0A:37:74:4F:B6
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/086DACE0C4FE11ECBD72527AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.112.0-103.123.114.255
Signature Algorithm: sha256WithRSAEncryption
ab:f4:02:fb:ed:e1:91:70:a3:03:1e:62:a3:a6:ed:d4:7d:86:
24:ff:59:34:d1:1f:62:b9:16:7f:28:f6:f3:29:e4:0d:d5:b4:
07:7a:99:4f:3c:08:72:8f:c3:d8:2b:1e:a8:cd:cc:4a:2b:3a:
5b:6e:eb:6b:a0:36:e2:8b:8f:42:a5:10:cc:f3:56:30:34:a7:
81:7c:67:a1:47:8b:28:e9:bd:6a:5e:86:f6:d0:40:9c:4d:f8:
64:0a:79:b5:5f:06:7a:c7:e8:98:93:0a:62:06:ed:d2:6a:52:
66:f7:0f:15:c0:33:08:39:ed:8b:12:53:fb:9e:f3:eb:16:91:
9b:6d:81:fd:db:92:74:f8:da:17:5a:78:7c:f0:09:14:8e:5b:
9b:e2:fe:20:c0:ed:62:6c:89:12:7c:b9:bc:a8:24:9a:a8:04:
89:06:6a:b0:ba:51:d3:e3:21:ef:7b:86:b2:71:d9:ab:f7:8f:
8e:8f:c3:7a:6e:ed:16:4a:b7:42:bb:0e:a7:0d:f6:6e:a7:98:
6a:b2:d4:1e:87:f3:64:e0:c7:d7:bf:d9:3f:54:8f:79:69:61:
bd:86:17:01:7a:7d:1d:9b:72:3f:ff:78:99:a8:a0:dc:6c:e6:
35:19:04:34:e4:60:85:7c:64:b3:fe:9e:eb:59:17:37:70:ad:
5c:c3:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org