Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
File: 1BD5815C4E4C11EA9DF9795FC4F9AE02.roa (raw, json)
Hash identifier: yt0jIGtOB6pEDUqji2mtpWlxAdG7a4PJnB3MmDrMVBA=
Subject key identifier: 19:F9:9F:6D:13:29:8A:BC:E8:87:ED:D3:9E:8A:86:40:9C:6E:4A:6A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 0ED2
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
Signing time: Tue 14 Sep 2021 06:26:46 +0000
ROA not before: Tue 14 Sep 2021 06:26:46 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 56032
IP address blocks: 103.110.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Sep 14 06:26:46 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=614040a6-3bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:1b:5a:dc:1b:cd:2c:60:98:b6:49:04:5f:
b9:02:01:93:82:5a:98:e5:ca:4f:ed:db:99:b7:e8:
19:28:a6:68:fe:0d:2c:c4:ba:58:f9:dc:4b:db:29:
9b:75:42:e4:ba:dd:49:07:df:9e:f4:3e:ea:91:dd:
1d:9a:7c:bd:f6:39:2f:cc:b5:34:89:b1:3a:f0:2b:
15:cb:1d:b6:17:a5:8b:fb:8a:07:36:15:a4:8e:78:
b9:a0:1f:f8:54:ec:d3:92:0a:a7:19:99:36:c7:b5:
9e:4b:6d:41:bc:65:26:eb:7d:62:38:aa:34:24:7c:
67:36:0a:87:3a:41:6c:c3:60:d4:6a:22:1f:bf:22:
1b:47:b8:03:d8:ea:5a:f5:32:ba:19:27:8a:3f:53:
73:34:ba:da:e6:df:15:aa:51:8a:41:7c:5c:54:35:
45:e4:1c:3c:0f:5a:98:f8:66:ce:3d:e4:c1:3d:66:
8c:d8:93:ac:51:07:7f:e1:b2:29:78:7f:9a:74:22:
4f:e8:4c:0f:a1:f3:1a:46:3c:8f:b5:9b:91:6e:38:
4c:2b:fb:1e:2d:3e:d1:55:54:a9:77:26:f9:78:3e:
da:0b:8f:2a:74:f0:42:f7:e1:b0:8a:46:60:12:26:
5b:df:a3:6e:48:35:51:c8:17:28:75:8e:2d:c5:19:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:9F:6D:13:29:8A:BC:E8:87:ED:D3:9E:8A:86:40:9C:6E:4A:6A
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.212.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:97:94:e9:f9:dc:15:17:84:f8:48:2e:aa:af:86:07:35:7e:
77:17:47:b4:96:63:44:8b:ff:78:e9:aa:26:e5:22:31:9c:eb:
a2:ed:d4:d2:35:6a:69:ec:77:75:2b:82:f3:4e:89:be:42:4d:
a6:fa:31:58:5f:66:05:27:68:3d:23:92:d4:ec:d0:23:18:65:
9f:fd:e1:4a:30:63:42:a5:88:5c:0b:35:f9:10:69:63:97:3f:
a3:6b:9f:cd:b7:8b:05:26:bf:22:29:b8:b9:c4:bf:5a:d3:2e:
e9:2e:5e:76:8e:d2:70:f5:78:cc:38:51:58:b4:ca:1b:4b:e4:
fe:87:01:a5:2e:70:ae:58:6f:aa:dd:a0:4e:4f:e1:13:95:30:
25:6f:4c:84:5c:82:d1:0e:7d:8f:29:f6:d4:2c:bb:26:b6:9c:
b2:43:3a:45:ee:41:ae:f1:68:69:07:7a:a4:96:00:90:6b:c4:
13:b3:36:62:6e:d4:8a:f2:78:b0:d5:80:46:34:b6:06:63:4d:
2f:d6:94:45:95:2b:64:f0:8c:ef:62:1e:b4:38:8c:e5:00:0a:
bd:96:f0:60:b1:22:8b:72:61:1a:17:a7:26:68:55:aa:45:65:
39:ab:32:a0:e2:f0:90:d7:76:6c:d7:3b:ef:16:c4:e1:23:ef:
00:78:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org