Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/411AE4A212A511EB93D31069C4F9AE02.roa
File: 411AE4A212A511EB93D31069C4F9AE02.roa (raw, json)
Hash identifier: oatNKJSM2yW3/nyHrbqgksRMN+egpWBV8bNEbvr1enM=
Subject key identifier: CF:D0:C7:5A:22:5B:FA:70:BA:D2:F0:A4:42:85:81:24:DB:1B:24:C8
Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial: 08D0
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/411AE4A212A511EB93D31069C4F9AE02.roa
Signing time: Wed 30 Mar 2022 20:26:28 +0000
ROA not before: Wed 30 Mar 2022 20:26:28 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138614
IP address blocks: 103.134.169.0/24 maxlen: 24
103.134.170.0/24 maxlen: 24
103.134.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Validity
Not Before: Mar 30 20:26:28 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6244bcf3-ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:93:8c:b0:a4:d5:c2:b8:03:d9:4a:af:d8:
7e:da:b4:c5:5a:64:94:b1:b6:58:ce:5d:65:46:21:
e9:db:49:74:98:15:6a:a7:0e:5b:3d:58:9d:a2:72:
89:36:2d:ca:cf:5e:75:ab:8d:4c:0c:86:62:86:f3:
9c:8b:c0:95:1c:69:8e:2f:9d:12:0b:c5:1b:43:79:
2e:56:0a:40:dc:04:f5:1e:09:9e:8f:21:53:1d:8c:
e8:32:92:eb:85:ef:5a:b9:bd:df:77:1a:84:88:53:
a0:3d:8e:7d:a0:df:27:03:d7:ed:8d:2b:ca:c3:44:
67:3c:14:0a:9e:e2:70:2f:13:17:66:6c:2e:56:a9:
7b:fe:8a:04:f1:d8:3f:df:0f:dd:ee:ba:30:05:13:
ef:20:68:2d:a8:95:35:c5:b7:72:ea:a5:f3:40:6b:
e6:db:c3:a8:bd:38:9f:3a:d8:e5:a4:72:c2:9c:c5:
23:25:ca:0f:a8:71:d6:e1:1b:fd:e7:c0:e8:16:f8:
c7:35:ef:aa:82:72:34:8d:b4:e0:c0:23:e2:da:fd:
4b:d4:bf:34:81:bc:1e:1a:4e:71:f6:c1:74:d2:1d:
54:f8:b4:a7:7f:9b:a2:dc:bc:52:e0:89:3f:71:7d:
c0:d5:56:91:41:4a:03:98:d7:2c:49:63:dc:de:9a:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:C7:5A:22:5B:FA:70:BA:D2:F0:A4:42:85:81:24:DB:1B:24:C8
X509v3 Authority Key Identifier:
keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/411AE4A212A511EB93D31069C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.169.0-103.134.171.255
Signature Algorithm: sha256WithRSAEncryption
67:ea:fa:45:02:64:33:72:a2:29:cf:e0:4b:2f:80:35:eb:17:
54:4c:dc:30:0f:aa:88:f0:73:4e:4f:2a:30:58:35:1f:9c:b2:
56:e1:f5:50:37:e8:82:54:ff:2f:2b:27:31:9c:53:94:b6:fb:
c3:e6:65:fe:99:44:1c:12:bc:72:6c:97:bb:3e:72:0f:f9:ff:
5c:73:c9:3d:1e:c3:35:99:da:6f:54:ca:8b:23:6c:82:cc:3f:
98:4d:8e:f8:f8:a3:21:a4:4f:28:6e:cd:2c:eb:eb:69:61:cc:
87:2f:17:58:7c:4c:c5:73:e4:9c:1d:c1:9c:86:66:89:8f:82:
90:8a:26:39:05:d5:3a:51:d2:a4:2c:3b:47:2a:8e:a9:85:55:
02:0d:62:f0:45:91:ef:7a:98:28:94:79:6f:91:6c:ca:9a:a2:
5b:99:57:ba:73:e5:4e:89:1a:6b:ce:3a:8a:f8:a8:d8:5f:eb:
bf:23:c5:60:67:13:33:97:07:f4:5e:44:ed:62:e2:a4:14:c5:
17:e0:65:c7:8c:59:a5:ed:93:8d:9f:52:e4:ad:5d:f1:e0:80:
d9:c2:88:05:a8:29:ca:b9:8c:d3:1e:6c:65:3e:34:6f:8e:3a:
ea:2b:ad:b1:8a:ab:40:3f:62:dd:c8:2d:b9:13:81:d8:4b:d6:
d6:e3:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org