Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/E1B84792707711ED8BBDE80AC4F9AE02.roa
File: E1B84792707711ED8BBDE80AC4F9AE02.roa (raw, json)
Hash identifier: refxkYBxSqIjkIZVkP6xJbrCsQTYS5YnMLeWSW31sLQ=
Subject key identifier: E3:CA:BC:17:35:A1:72:06:68:45:4A:C6:F3:46:99:BC:85:5F:50:45
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 1351
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/E1B84792707711ED8BBDE80AC4F9AE02.roa
Signing time: Mon 16 Jan 2023 13:44:16 +0000
ROA not before: Mon 16 Jan 2023 13:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137557
IP address blocks: 103.100.142.0/23 maxlen: 23
103.100.142.0/24 maxlen: 24
103.113.44.0/22 maxlen: 22
103.113.44.0/24 maxlen: 24
2402:b740::/33 maxlen: 33
2402:b740:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4945 (0x1351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Jan 16 13:44:16 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c554af-c0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:cf:b6:c3:6e:f2:e6:37:8a:7e:f4:c6:0b:
68:90:d0:df:91:ed:40:2c:96:9b:7b:3c:f4:b0:05:
b0:03:20:f7:ff:2e:f0:b4:75:fe:3f:e8:ee:17:60:
bf:21:96:59:ed:20:be:70:e2:df:e1:57:b8:d8:b9:
48:50:6a:4b:b4:1c:9d:80:12:15:43:6a:ae:60:6f:
13:55:bd:34:71:a9:01:0f:6b:47:92:33:55:ad:97:
44:b2:24:7e:ad:5e:60:87:ce:d0:63:f6:7b:c9:d7:
8e:55:b8:b5:d2:cd:a3:8e:cc:5d:91:b6:63:9d:86:
79:98:97:4b:04:32:47:04:11:9f:74:77:11:85:e4:
60:70:e5:05:f0:13:dc:08:a1:0b:0d:b3:7a:29:17:
dc:b9:f8:09:b2:61:f4:ca:f5:a0:d0:01:60:85:b1:
ef:9f:f5:83:24:80:ec:46:d1:fc:c6:d2:ce:22:ec:
4c:c6:d3:25:4b:22:5f:3f:1a:c9:85:4f:70:68:4d:
31:28:75:c4:ce:dd:ca:21:af:cc:fa:3d:70:a0:7d:
cf:2d:48:98:c2:31:60:d3:00:1a:9b:18:d7:c5:76:
9d:d0:f5:5d:58:8d:ef:44:83:34:f7:f1:ce:29:b5:
a2:04:ec:9f:3f:a1:f9:25:31:39:93:97:a2:0a:cb:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:BC:17:35:A1:72:06:68:45:4A:C6:F3:46:99:BC:85:5F:50:45
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/E1B84792707711ED8BBDE80AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.142.0/23
103.113.44.0/22
IPv6:
2402:b740::/32
Signature Algorithm: sha256WithRSAEncryption
89:f9:db:40:c6:79:85:d1:1b:39:01:26:df:2b:1b:a2:c3:a7:
1f:4e:9a:bc:26:74:0b:9e:8b:5b:73:45:03:e8:a4:03:e3:f8:
0a:cd:b2:96:ba:57:f5:c1:24:a1:b1:e8:80:27:b8:a7:1a:b3:
bf:fa:b5:8d:5b:61:8e:44:7c:bc:bb:77:e0:0c:3f:d6:69:4e:
d5:eb:dd:71:c8:fd:7a:48:ec:ca:f0:fa:6d:94:b9:40:91:4c:
a7:46:5f:d2:10:9f:44:cd:db:e4:aa:a1:17:5d:aa:4d:19:50:
57:d9:91:0c:4b:f4:76:9d:f9:cc:e2:cc:35:9a:35:2e:01:b9:
8e:2d:ce:43:03:f9:c3:5b:bb:db:21:5a:0c:0f:0f:34:3c:81:
50:77:d3:11:e8:6b:96:f7:32:de:b8:3c:94:f7:e8:f8:61:17:
73:97:e9:09:94:bd:f3:fe:83:e5:50:4c:a6:be:82:aa:14:43:
ea:5c:ef:79:de:a2:65:3f:4e:90:ac:ed:ab:12:8e:77:e1:06:
3c:80:9b:ad:3c:30:ed:fc:81:b2:b8:22:2f:24:91:19:85:bb:
e1:53:e6:4f:e6:37:16:d3:45:ed:af:e9:2c:3b:7b:ce:79:39:
89:ed:fb:ea:63:3c:46:4a:19:9f:d8:8b:6b:1a:cb:b2:bd:43:
cb:a0:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org