Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/3215FEC823ED11ED847D5879C4F9AE02.roa
File: 3215FEC823ED11ED847D5879C4F9AE02.roa (raw, json)
Hash identifier: vlX42vQ5R+NAFNFr4au5uPW+OcbI2HlCDjTy9CbOdNk=
Subject key identifier: E1:B7:10:B1:29:65:71:C4:E8:E0:CB:57:1B:BE:81:E7:49:A6:EC:40
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 02E7
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/3215FEC823ED11ED847D5879C4F9AE02.roa
Signing time: Sat 03 Dec 2022 03:32:40 +0000
ROA not before: Sat 03 Dec 2022 03:32:40 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 993
IP address blocks: 103.175.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Dec 3 03:32:40 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638ac357-2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:f2:72:70:79:41:ae:51:53:ef:6a:a2:e9:
e7:c5:ac:ba:3f:09:4a:51:42:f2:ed:91:7e:7e:2d:
39:49:34:e9:2d:27:6a:8d:ff:85:72:e1:0c:33:29:
e7:16:57:b7:5f:e6:da:6e:91:c6:24:98:1e:73:47:
b7:f7:84:98:d6:80:6d:9c:51:2a:62:b4:d2:a7:33:
0e:37:7b:60:41:93:db:bf:98:11:cf:74:e3:22:56:
2c:42:b6:63:2e:0e:49:4e:89:f2:74:f1:2c:57:86:
87:3a:e1:b7:b9:ee:cf:aa:a8:b6:ad:fa:ac:75:5c:
e0:23:bd:dc:d3:2e:49:97:12:3e:b2:93:e0:ae:0e:
46:64:fd:01:33:c4:f2:bf:c9:31:c8:9f:c7:32:8e:
6d:01:3a:0c:b8:47:fc:ea:6e:d9:58:9a:b2:3f:57:
58:40:f5:47:98:e0:9c:76:05:7e:cc:3b:5b:ab:a0:
eb:78:b0:9d:2e:ab:d0:9c:15:c2:ec:b8:a6:d0:53:
74:4c:9a:54:fb:55:a3:a6:50:db:65:4c:a2:52:6e:
5c:00:35:02:19:6e:33:2c:17:47:5d:f5:83:11:cd:
90:ad:0a:8c:93:ea:38:a1:86:c1:ca:6c:89:5a:7f:
69:11:ed:a8:3f:f7:81:94:3f:5f:38:d7:d9:20:bf:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:10:B1:29:65:71:C4:E8:E0:CB:57:1B:BE:81:E7:49:A6:EC:40
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/3215FEC823ED11ED847D5879C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:00:d7:3c:7e:06:9b:57:ac:c2:0c:d7:7d:c5:cb:35:a6:6e:
cd:74:fc:ac:07:f5:e3:c3:cc:4f:98:f6:1f:b3:24:a0:6e:7f:
84:66:16:96:5e:ae:43:0d:78:ac:51:d5:f3:21:61:af:5a:ce:
a4:9c:79:3a:9b:ee:7f:66:0c:ed:e9:b1:c4:e8:80:6d:60:f6:
8e:61:dc:3f:59:4c:13:e2:6e:5e:5c:a7:a1:f2:35:8b:2c:31:
fd:a0:d1:f5:4b:b3:fb:e0:a3:3f:07:4f:13:a7:35:40:5a:5c:
6a:db:89:6a:c5:b5:83:58:fa:68:d8:ef:58:c0:81:1e:28:65:
95:81:59:78:71:97:80:8b:0d:e5:73:20:65:9f:26:38:fa:e0:
11:62:4b:a1:a8:4e:63:fc:4a:f7:bc:2d:d8:72:00:9e:74:d9:
ce:ed:1f:70:79:ec:5a:e7:c0:86:00:7e:db:2c:6d:3f:11:2d:
54:19:c5:fa:08:5e:43:2b:6b:06:f6:e4:f8:f0:00:72:a5:36:
c9:72:3e:15:11:93:69:b3:dd:7d:47:76:27:f2:e6:81:c6:5f:
ae:a6:75:f8:f1:05:99:9d:e7:6b:33:b8:e5:83:84:c0:9a:dd:
d7:ca:fc:9a:3f:81:13:78:4f:e5:3e:21:d4:0f:a2:c7:43:9c:
c4:95:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org