Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/62DAC8223E1D11E9A2F7521FC4F9AE02.roa
File: 62DAC8223E1D11E9A2F7521FC4F9AE02.roa (raw, json)
Hash identifier: 8x4mS4n6liUhymwXI2p9ZRJ9JkdS9dVAD/Lv7oGFwUE=
Subject key identifier: 91:1E:2D:E9:C3:B1:92:4C:D5:2F:C3:F1:87:6B:82:72:35:87:F3:A2
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1084
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/62DAC8223E1D11E9A2F7521FC4F9AE02.roa
Signing time: Wed 02 Nov 2022 18:24:41 +0000
ROA not before: Wed 02 Nov 2022 18:24:41 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138332
IP address blocks: 103.130.8.0/23 maxlen: 24
103.132.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Nov 2 18:24:41 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362b5e9-0404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:ee:e9:60:5e:85:cd:97:58:f5:c6:1d:52:
05:07:81:82:8d:44:ca:58:67:ce:d9:7f:1b:70:5f:
44:a5:fa:1f:af:4c:2b:76:be:ea:d3:46:a7:a5:1c:
b1:92:0e:40:e4:13:ae:2a:c5:6a:40:cd:1f:da:37:
2b:c9:c8:4c:e6:3d:9f:a2:f9:c4:7c:43:d7:6a:fa:
47:a5:3f:89:39:d4:29:c7:2a:1a:35:c0:31:73:ce:
31:53:41:d8:db:2f:a8:f9:29:ba:13:9f:47:29:57:
2a:11:4c:7c:e7:9f:16:23:ad:45:fc:14:b6:59:29:
ea:2d:39:e0:ce:23:54:5f:0f:6b:08:d9:ec:83:0e:
ad:ce:b8:2a:af:8c:e0:b4:aa:49:af:a7:69:35:96:
f7:69:31:b7:7f:40:bd:15:1c:4f:2a:98:23:65:a6:
45:28:bf:ef:65:51:82:f6:a2:d0:a7:18:3b:6b:45:
f9:4b:b5:25:27:a4:2a:e9:0b:a1:a7:97:09:bd:fc:
b1:92:7c:4b:25:4b:ab:b7:05:4e:42:a1:2c:82:b8:
db:8b:72:33:07:68:85:d3:81:18:0e:ca:94:f8:6e:
bc:21:b4:12:0a:09:e3:d2:1e:46:2a:c0:5b:fa:fe:
af:8d:9b:8d:24:be:8f:df:de:a4:06:f7:30:02:99:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:2D:E9:C3:B1:92:4C:D5:2F:C3:F1:87:6B:82:72:35:87:F3:A2
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/62DAC8223E1D11E9A2F7521FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.8.0/23
103.132.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:6f:ab:51:88:fc:8f:39:86:92:79:76:7e:e9:49:1b:fb:74:
00:3b:19:51:88:a1:d3:18:18:3f:e5:1e:60:2b:aa:c0:5c:ba:
2f:54:db:cf:94:12:4c:a8:67:39:6d:0c:e3:c0:2a:2e:b4:79:
ef:df:30:43:52:93:a9:be:6e:6c:b6:44:c6:50:19:ac:8d:48:
b4:e4:6e:47:4b:79:d4:23:07:7c:1d:24:eb:36:2a:fb:5f:e4:
b7:d6:25:f8:d4:42:19:50:87:a2:b0:11:f7:60:af:14:2e:15:
22:a7:b1:46:c6:57:63:fb:35:0a:74:e9:af:f5:60:53:16:4c:
13:5b:91:cc:b4:6b:af:2f:ea:51:23:18:09:f7:11:6b:4b:e1:
11:ee:02:6c:67:31:55:35:88:7f:15:10:b1:9f:ca:9b:35:1c:
ff:73:35:1b:8d:d7:64:71:ac:94:fe:8e:c1:18:c1:07:8c:d9:
bb:87:6f:5d:e2:78:85:71:21:5d:22:72:05:26:a2:25:14:82:
cf:74:19:09:fa:1e:8f:be:86:61:01:78:b6:45:cd:c7:19:6c:
9d:be:2f:5b:d1:a9:03:f4:b1:f0:fa:8b:40:0e:69:7b:e1:a2:
ae:16:90:47:c9:6d:91:9c:2d:fc:e5:6b:62:b2:e3:c0:20:f4:
6b:22:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:26 2024 by rpki-client on console-ams.rpki-client.org