Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/61A58B683E1D11E9A2F7521FC4F9AE02.roa
File: 61A58B683E1D11E9A2F7521FC4F9AE02.roa (raw, json)
Hash identifier: YwCC/dcw+J9BVQjjf4W5UCYihr0M2AwcGt5VLbBOCNg=
Subject key identifier: F8:E6:3E:0E:2D:E2:57:6B:75:FF:16:36:08:EE:9C:9B:DB:E6:9E:B1
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1083
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/61A58B683E1D11E9A2F7521FC4F9AE02.roa
Signing time: Wed 02 Nov 2022 18:24:40 +0000
ROA not before: Wed 02 Nov 2022 18:24:40 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 135516
IP address blocks: 103.130.8.0/23 maxlen: 24
103.132.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Nov 2 18:24:40 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362b5e8-d7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:db:c7:20:ff:d5:68:5c:2a:dd:2e:b5:77:
77:29:e6:8d:90:bc:91:a6:a7:7b:cb:e8:95:da:66:
27:d3:77:d1:bb:d0:2d:b2:37:ad:63:05:11:fe:66:
8e:75:cf:bb:17:cf:0f:6c:91:98:11:d7:b8:cc:90:
bf:79:82:5c:6f:bf:3b:ac:be:08:b6:d1:14:65:7b:
ba:ca:25:9e:f0:2b:af:48:24:dd:d6:50:a4:5a:8f:
f8:67:ed:b5:b3:5a:c0:f8:b1:fc:b5:67:03:92:ca:
0d:31:8a:e9:03:77:44:76:d2:93:3b:95:cb:f7:f7:
11:a7:df:82:75:2d:d7:68:b2:cd:b0:e3:aa:9b:28:
ad:aa:d2:15:fd:a0:2b:2c:e8:05:a6:72:c0:32:87:
49:7f:aa:cf:c3:0a:73:c6:8c:64:21:c7:d9:6d:ab:
7a:68:a3:23:a3:7b:7d:23:dd:c6:5b:b7:2e:63:0a:
f5:50:ce:3f:ef:e5:40:2d:09:70:5e:38:e2:e7:43:
49:ed:d3:7b:70:f4:39:f6:fc:c3:6c:a5:f0:8b:40:
55:28:66:e7:19:5c:a8:f9:c8:76:4a:ac:09:f9:25:
1e:92:21:6e:21:7f:ae:17:03:3c:3e:b7:18:0d:b6:
8b:64:93:63:cb:9e:e9:36:48:44:fe:6c:41:5f:d1:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:3E:0E:2D:E2:57:6B:75:FF:16:36:08:EE:9C:9B:DB:E6:9E:B1
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/61A58B683E1D11E9A2F7521FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.8.0/23
103.132.126.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a9:f7:4c:03:98:b4:e2:f4:ea:67:5c:24:0c:c1:87:70:fa:
70:99:83:ec:2b:47:4f:e5:34:a1:b5:13:06:fa:3b:fe:fe:f4:
cd:51:3a:33:7f:4e:02:ae:0e:07:cf:13:66:e3:f2:53:b8:b1:
0e:5d:4a:f3:78:4e:f2:30:f6:1f:87:20:21:7a:dc:1e:2b:38:
39:3b:f0:d4:67:f5:2b:ca:f6:02:1d:34:62:6d:aa:7d:63:54:
10:2d:63:9e:9e:6b:35:76:ef:25:08:0a:31:22:aa:87:ae:f5:
15:e0:68:0a:3c:a9:ef:28:9a:2e:61:43:1c:2e:ad:a6:11:b2:
65:4e:19:03:47:a3:d5:85:98:05:30:7f:e4:c0:5d:7d:e6:a9:
92:ca:45:1a:0d:d5:80:73:09:dd:67:98:a6:c5:6c:20:2c:05:
aa:e7:67:dc:86:20:26:e8:59:a5:c5:b9:e1:2e:15:1f:3d:b6:
63:88:4b:f3:fd:cf:eb:2b:98:b7:77:a4:71:99:cb:f6:a3:38:
51:ae:56:33:c0:86:9d:20:a9:72:89:08:6d:2a:d4:9f:b7:d3:
c9:2f:ec:f5:9a:f3:3c:bb:60:2e:86:25:80:f7:71:d6:83:3a:
c7:62:1b:16:c2:8e:db:74:ff:e2:52:aa:26:dc:ec:ff:f3:4d:
a7:8a:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:26 2024 by rpki-client on console-ams.rpki-client.org