Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/7F9B6BCAEE2D11EB9459E485C4F9AE02.roa
File: 7F9B6BCAEE2D11EB9459E485C4F9AE02.roa (raw, json)
Hash identifier: 1t3XqMs9TQnu1MdT633dEu0xHt0fA0HYj5lqVVieTlc=
Subject key identifier: 9F:87:BE:BA:F0:13:9B:75:65:A9:0E:4A:FF:2C:90:76:8D:75:9C:1F
Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial: 02BD
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/7F9B6BCAEE2D11EB9459E485C4F9AE02.roa
Signing time: Thu 14 Jul 2022 02:52:03 +0000
ROA not before: Thu 14 Jul 2022 02:52:03 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 142577
IP address blocks: 103.169.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Validity
Not Before: Jul 14 02:52:03 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62cf84d3-ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:f2:e6:25:b3:63:df:e7:1d:56:76:30:d3:
b8:b9:ce:58:b8:50:c7:f2:57:ae:41:2d:4b:ec:4e:
ab:3f:58:a7:da:1a:09:ef:ec:86:c8:b1:56:71:91:
1f:a7:8a:b2:d4:06:a0:54:da:6c:2c:7f:8c:5e:d9:
7a:98:fb:c1:22:14:ca:4c:a9:2f:d0:cf:f0:de:ed:
a3:fd:c3:5f:dd:0c:91:c8:22:0d:a5:88:dc:f2:65:
00:13:24:84:0b:77:e8:f3:3b:54:71:4c:8c:59:aa:
3b:80:85:b9:cd:d6:57:67:e3:c2:21:00:70:5f:02:
f4:1d:bd:5c:e7:15:94:87:54:2f:f3:19:53:97:4b:
9c:7d:62:78:bb:ef:a7:4b:13:af:07:47:c9:8b:71:
55:de:b7:e7:b2:20:df:e0:49:1d:97:8b:c4:ab:ad:
d1:21:c4:41:ea:0b:cc:99:ff:85:08:18:77:2f:54:
80:13:12:c7:1c:4b:13:71:11:78:bf:e6:e4:59:a3:
f5:5f:16:40:77:f6:97:f9:95:f9:8f:61:c7:d1:97:
b1:b4:0b:67:cb:35:4a:36:c0:d0:dc:eb:de:25:f6:
46:05:0e:a3:38:f9:54:bb:40:5a:43:d1:8b:81:a8:
00:8e:fe:6c:56:2c:4c:8e:61:de:1c:5b:98:20:a3:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:BE:BA:F0:13:9B:75:65:A9:0E:4A:FF:2C:90:76:8D:75:9C:1F
X509v3 Authority Key Identifier:
keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/7F9B6BCAEE2D11EB9459E485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:12:0b:60:41:69:9b:ed:a4:80:97:0b:ae:15:f3:00:85:24:
12:d9:39:21:63:26:24:3c:2c:7a:91:8f:77:fe:6b:7a:db:4c:
f6:c2:5d:14:8d:6a:e7:95:3d:ce:95:85:9c:ba:36:e0:e0:05:
f8:33:d4:94:12:77:5d:0d:0c:86:69:67:2e:47:0c:e4:ab:e9:
b4:32:e6:bc:69:02:af:90:98:0b:34:3f:02:4a:d7:bd:a5:7a:
6e:9a:97:65:f6:5a:83:fb:f1:17:0b:22:d8:de:36:1f:d0:f8:
0b:e8:87:b1:3f:bb:4c:8c:e7:6f:8a:54:1d:1d:2e:f4:45:8e:
48:50:e6:cf:bc:69:ea:0d:4e:be:02:29:1d:8e:7c:c5:7b:33:
d2:28:f5:7e:66:81:6f:e0:c5:ee:27:e0:3c:1d:0e:f9:f5:14:
f5:1a:1e:16:ce:0b:cf:f9:b2:3e:b0:e6:a0:08:e0:cd:be:82:
68:2c:d6:06:b1:1c:ce:ec:d6:7e:ab:17:b0:1f:d8:5f:ff:64:
fe:71:a9:6c:9d:1b:0e:26:b6:01:f6:49:31:2b:ad:16:74:67:
14:91:87:9c:df:88:d6:d2:80:ce:11:29:6c:ed:4e:47:8b:09:
04:cc:cd:72:a9:56:5f:c7:dd:44:c9:8b:53:06:23:e9:c2:cb:
f0:a8:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org