Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/B7EF95E2BD4411EB9C1AA10EC4F9AE02.roa
File: B7EF95E2BD4411EB9C1AA10EC4F9AE02.roa (raw, json)
Hash identifier: JfXU6AXb5wHVY+vzkZu/J8dg3mf2melQ7L+3flKZ5oc=
Subject key identifier: 30:17:9F:9A:0C:E8:3C:D9:1E:12:A2:6B:CF:3B:39:96:B7:A5:2B:63
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0B7A
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/B7EF95E2BD4411EB9C1AA10EC4F9AE02.roa
Signing time: Mon 28 Feb 2022 19:25:36 +0000
ROA not before: Mon 28 Feb 2022 19:25:36 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 133866
IP address blocks: 103.133.140.0/24 maxlen: 24
103.133.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Feb 28 19:25:36 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621d21b0-f826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:5f:07:85:34:a9:0d:71:36:70:2e:fa:96:
cb:25:f3:9c:ac:3d:46:28:20:8b:a8:7a:d1:b7:b2:
1b:7b:24:f6:8e:f6:60:6e:71:7d:cd:19:f0:7b:4e:
b3:1a:e7:2d:18:5c:7b:ef:42:d7:3a:e6:0f:48:14:
d1:2f:7e:ba:04:60:4f:c7:d1:83:54:21:62:6b:93:
94:93:1d:cf:fe:d1:de:30:77:c5:03:7a:45:b1:08:
a0:70:a4:e5:83:b0:b9:f5:a0:e9:d8:c5:e2:25:99:
5b:11:bf:de:46:58:e3:75:62:b3:09:20:92:d9:7b:
ac:a0:f1:74:21:05:dc:26:c6:8e:22:c0:37:6a:cf:
ac:0a:f5:5e:0a:da:be:8f:36:f7:f5:6a:6e:c4:0d:
cd:07:f3:68:25:41:29:bc:44:f6:8e:a6:8e:68:8d:
77:db:4c:cd:43:b4:cd:06:72:f9:63:13:f7:4c:06:
fd:24:6f:12:5a:e8:8d:ce:d3:5a:77:3d:18:da:1e:
8f:b6:6e:cf:5d:4b:5c:09:48:dc:b9:18:bd:93:77:
be:ec:42:38:f7:8d:d3:dc:c8:9a:24:ef:54:b5:ca:
ad:2d:8a:49:8c:6b:ff:26:ad:ae:84:32:ce:ff:0f:
2a:1e:ed:46:42:ac:e2:b7:c4:4d:26:60:af:41:c0:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:9F:9A:0C:E8:3C:D9:1E:12:A2:6B:CF:3B:39:96:B7:A5:2B:63
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/B7EF95E2BD4411EB9C1AA10EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/23
Signature Algorithm: sha256WithRSAEncryption
46:d0:39:0f:12:49:66:1c:78:23:52:ca:c7:83:b0:e2:e9:57:
2c:46:0d:fe:3f:10:1d:77:50:0b:c6:cd:49:5c:71:3f:41:e6:
c3:2d:c1:70:46:e7:bf:5f:8f:d6:a9:09:12:b0:6f:d5:35:97:
c8:64:72:9b:d5:55:05:23:35:22:8c:9d:4b:b9:f5:68:8b:48:
cb:9e:99:0c:9b:8f:00:5e:59:28:45:8e:ab:1d:36:82:f3:83:
64:c2:7b:8d:ac:c0:52:82:45:0d:83:7b:bc:ba:4f:82:cf:45:
57:d4:1b:5b:d0:40:86:16:9b:b9:54:bb:27:44:bf:47:a8:44:
0d:2a:fc:eb:6d:da:a5:a6:04:08:6a:22:09:22:8a:85:fa:92:
ba:46:52:b5:d1:46:b0:f5:88:22:50:c0:26:85:f4:70:a3:4e:
86:ee:50:3d:fd:ce:8f:30:60:b6:9d:55:7f:11:16:e6:ed:03:
4a:41:e5:53:c8:e7:94:46:26:84:eb:d4:aa:0f:5b:a8:15:44:
c0:f8:98:3f:64:6f:cc:28:e5:f3:f5:57:36:83:79:ce:d0:c4:
c9:7c:4d:c8:f8:ae:08:62:7d:49:76:3d:eb:6f:99:ca:96:d1:
48:ff:ed:b2:fb:0f:37:37:4e:59:3d:11:f1:1e:58:b3:74:49:
d4:58:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org