Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/00D1ABA4692211EC974EC52CC4F9AE02.roa
File: 00D1ABA4692211EC974EC52CC4F9AE02.roa (raw, json)
Hash identifier: fP7gpHeZu6OO1iiVTKR5i7oRud2imRVIIxsdGXYVW0E=
Subject key identifier: D5:B2:7A:ED:10:06:52:75:A8:A2:E3:11:56:28:22:A2:55:93:53:6B
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 04E5
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/00D1ABA4692211EC974EC52CC4F9AE02.roa
Signing time: Mon 23 May 2022 11:44:32 +0000
ROA not before: Mon 23 May 2022 11:44:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9498
IP address blocks: 103.149.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: May 23 11:44:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628b739f-f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:f1:e0:66:75:00:4a:98:52:ac:8a:ff:9c:
d6:64:c8:a1:a4:f6:9f:03:93:ae:9a:e4:d8:cd:f6:
9f:14:a3:d6:29:74:f7:41:83:b6:b9:bc:4b:80:23:
05:5b:4b:ff:c6:08:4f:8a:cb:3f:35:16:81:f3:c1:
19:e3:25:f4:1a:eb:43:24:a7:75:aa:e8:db:50:a9:
e7:98:db:c6:cb:bd:38:ca:fd:4e:f8:38:8d:f2:c8:
65:b3:66:b8:1c:09:49:8d:e2:3e:a5:30:d6:dd:16:
d6:21:59:7c:81:d4:87:77:78:6e:84:d5:51:34:e1:
dc:31:4a:cf:93:c7:d0:92:39:2d:c4:09:d4:11:34:
97:92:47:42:8b:41:11:81:61:dc:e5:f1:0a:f8:65:
db:12:4a:e7:5f:fc:35:83:1d:22:39:47:60:15:a7:
fa:51:d3:8e:a5:58:99:7c:1f:a9:03:c2:ca:86:b0:
a2:65:ba:36:9c:fc:b3:7e:72:45:a0:d8:13:a0:7b:
28:94:7b:b9:ac:57:a7:74:cc:08:25:cf:2d:b2:ef:
04:8c:fa:4a:a2:3e:63:fb:bd:d6:8a:b1:51:d7:af:
f8:1f:a0:75:dc:69:d3:90:58:3e:d8:b1:6e:e8:f3:
73:a1:eb:3b:dd:9f:32:e0:0b:01:6e:ca:2a:b1:2d:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:7A:ED:10:06:52:75:A8:A2:E3:11:56:28:22:A2:55:93:53:6B
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/00D1ABA4692211EC974EC52CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.58.0/23
Signature Algorithm: sha256WithRSAEncryption
06:1f:d1:b4:e2:9f:dc:00:55:ca:31:c8:c3:24:0d:aa:24:33:
a6:f7:ee:dc:3e:54:ff:e9:fc:bf:27:08:dd:df:9f:c8:db:17:
bb:fd:d8:b2:6f:23:28:99:01:d3:8d:1b:52:37:7c:14:e9:59:
3d:71:3b:84:af:93:81:ca:bd:27:39:b7:f3:73:37:a4:c9:57:
e4:bb:8d:72:33:0d:21:b7:e0:94:91:3a:4c:89:2d:c8:45:27:
27:96:fe:40:9b:4f:e1:de:5a:b4:14:47:67:73:ab:6c:4f:18:
8e:fc:4c:b8:2b:40:a0:c2:e2:e9:b2:39:54:e2:e0:c3:e3:d2:
1a:32:9e:d4:29:48:78:29:e9:ea:99:26:b1:ed:4d:82:69:25:
7b:6d:2c:e7:5d:ff:2c:f0:7e:4a:a1:ab:0b:d8:66:2c:b1:3c:
20:c3:b3:73:4b:4b:07:09:b5:02:a1:44:a6:8e:cb:bd:30:28:
e7:ba:4a:f2:2f:97:65:fe:e4:56:eb:81:85:82:50:3a:d7:46:
54:36:0d:3a:ae:bf:c0:14:8b:84:ce:2a:d5:38:7e:bb:df:fa:
c3:5a:ce:0a:e4:cd:fa:ab:44:ba:db:70:dc:4c:4a:0e:da:4c:
38:81:b6:22:0c:1f:65:11:56:6a:45:1c:68:a2:85:80:a7:f1:
de:d2:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org