Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/CFDBD04CAF2111ECA6B92519C4F9AE02.roa
File: CFDBD04CAF2111ECA6B92519C4F9AE02.roa (raw, json)
Hash identifier: lYKNJXM3b8Oi8XKliq/zMuTN7XsEKGg2RgeNkWk9Z2Y=
Subject key identifier: 86:80:16:7D:B7:DC:8B:16:26:AB:13:16:8F:B4:F6:15:BA:64:2A:4F
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 29
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/CFDBD04CAF2111ECA6B92519C4F9AE02.roa
Signing time: Tue 29 Mar 2022 05:33:50 +0000
ROA not before: Tue 29 Mar 2022 05:33:50 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 9930
IP address blocks: 103.162.26.0/24 maxlen: 24
103.162.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Mar 29 05:33:50 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62429a3e-722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:01:16:a8:52:7e:02:1c:1c:da:16:5d:ec:
1f:fd:04:5f:95:49:fb:f5:24:39:d7:e8:d7:f6:b3:
41:6e:a6:21:5d:3d:6f:5b:5e:bd:e2:45:6a:da:5f:
f4:70:ac:a6:59:c2:ed:b1:de:ee:02:75:a5:c2:74:
4d:e0:00:71:b7:d4:ca:33:5d:5a:58:46:e6:60:9f:
28:36:97:02:3a:93:1b:b1:55:25:9f:f1:c7:e8:86:
bc:ff:ea:89:66:3e:eb:b9:d5:87:68:0c:84:d9:0e:
f1:66:48:97:39:cc:04:b8:d6:cb:ad:4e:37:6f:f8:
fb:7d:71:94:7c:db:b2:37:29:89:42:1a:06:63:09:
9d:2e:ad:a6:41:81:db:d6:eb:aa:32:de:19:56:5e:
0b:4c:ed:86:55:cb:66:71:91:2c:69:a3:b1:3b:32:
45:bc:84:d9:a3:5a:5e:52:7e:de:e4:8b:17:cd:cd:
1c:36:56:52:8b:04:96:56:23:29:2a:e6:af:ae:c5:
cf:38:51:ba:40:6c:79:fb:17:8e:52:77:25:4a:84:
17:e6:94:46:6d:92:89:f1:2b:53:04:e7:10:ed:a2:
85:24:21:64:f2:09:9b:4c:3c:ae:87:a4:37:d9:da:
9a:b1:4a:fa:dd:5d:86:02:a5:7e:79:b1:17:48:48:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:16:7D:B7:DC:8B:16:26:AB:13:16:8F:B4:F6:15:BA:64:2A:4F
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/CFDBD04CAF2111ECA6B92519C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.26.0/23
Signature Algorithm: sha256WithRSAEncryption
54:bc:e3:c2:25:7f:86:bc:e6:4c:4a:ec:18:85:d2:42:f1:b9:
a3:15:55:08:a2:e7:81:7d:10:b4:95:8e:fb:bb:ed:22:2b:db:
80:9a:bb:31:5c:d3:c0:45:53:a0:47:57:51:1a:ae:ad:5e:b9:
a4:39:25:a6:26:98:b5:31:85:f2:ed:c5:85:71:be:69:eb:ad:
b4:14:99:37:66:51:de:f9:0b:9b:1d:06:0e:95:32:0d:8a:0b:
5d:3f:e6:fc:1c:77:ac:a6:a2:9f:5c:12:b5:e3:7a:25:a5:5c:
6b:47:cb:2d:30:ff:19:1e:56:dd:cd:1a:9a:55:56:c2:c2:31:
39:2d:f1:59:2b:ae:33:fa:25:7a:0b:c2:da:a4:13:10:2b:b5:
a2:bf:c1:a0:76:49:e4:6b:12:a2:66:3b:19:b6:cf:cc:9b:fa:
5c:9d:51:f3:e7:35:39:8f:0c:92:a7:e6:32:75:85:5f:06:00:
35:9f:c3:f5:78:c4:82:d7:d9:89:21:a9:db:f4:30:30:5f:fe:
6c:9b:99:a9:f8:56:fb:c1:8a:b3:e0:94:65:25:33:26:55:de:
c9:04:97:47:ec:a9:71:21:fa:82:e3:13:14:c8:98:81:e4:a8:
7b:e6:e1:76:de:cb:bb:42:6a:b3:c9:00:ed:c2:26:59:22:4e:
f8:47:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org