Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/967939703B8011EDA74F7639C4F9AE02.roa
File: 967939703B8011EDA74F7639C4F9AE02.roa (raw, json)
Hash identifier: wVh22YbGHIzYbLUBph2B+2rxG9s2/XNgZ8RjnPiRuRo=
Subject key identifier: D4:C0:24:B8:6A:43:94:69:7E:91:4B:12:C2:20:7D:1F:01:73:A9:D2
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 66
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/967939703B8011EDA74F7639C4F9AE02.roa
Signing time: Mon 26 Sep 2022 15:05:26 +0000
ROA not before: Mon 26 Sep 2022 15:05:26 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 138926
IP address blocks: 103.111.38.0/24 maxlen: 24
103.111.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Sep 26 15:05:26 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6331bfb5-1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:03:02:d8:8e:d0:5c:da:ac:31:4d:f3:5c:
6e:02:5b:8c:06:d2:d8:77:89:13:64:6e:09:08:79:
6d:1a:9d:9f:da:7d:c6:bc:77:8d:81:0e:4f:0f:69:
d2:3d:ae:c6:8d:13:42:61:89:02:0c:5b:fc:2d:27:
7d:9d:f4:02:ce:e7:72:98:f4:63:72:8a:b1:bb:33:
c7:e7:4e:61:0b:f9:98:5a:56:92:5d:ad:22:de:73:
f7:39:fd:76:b8:68:9f:f0:77:4a:f7:5e:17:4d:b7:
32:6d:3a:ef:a5:35:ae:ef:b8:8c:c6:73:52:a5:d0:
ff:04:ce:aa:d8:10:f2:1e:89:ef:c3:80:48:4a:d3:
49:69:18:30:ea:91:72:d9:36:b1:2c:0c:2a:9c:2d:
50:25:4f:d7:95:5d:e9:c7:d5:9a:d7:fc:9e:70:24:
89:d6:13:b1:2b:68:ec:8b:0f:e4:b3:c9:6f:ba:e1:
33:f7:9f:05:12:4b:60:87:97:1e:32:98:19:eb:1d:
00:f5:78:91:fb:34:56:36:98:4e:f3:29:fa:5c:00:
63:8a:a2:b2:62:97:4b:6b:d7:95:69:2f:44:93:5b:
8d:05:60:4a:62:53:53:9d:24:2d:aa:e9:f5:7a:dc:
4f:23:b2:48:fa:86:e7:89:25:2a:c5:f7:9f:ed:4e:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:24:B8:6A:43:94:69:7E:91:4B:12:C2:20:7D:1F:01:73:A9:D2
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/967939703B8011EDA74F7639C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.38.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c8:f6:41:57:60:2c:8b:1f:01:44:0d:fd:2e:b2:a4:6b:7a:
32:00:24:55:14:b8:f8:fb:a5:4d:b9:06:96:63:ba:8b:07:6c:
05:71:4c:23:30:43:a7:e7:c2:5f:fd:9d:6f:94:ca:5f:cf:65:
09:3b:ec:34:85:f1:4f:57:e5:17:03:6d:fc:f3:9b:ea:b5:a6:
54:0f:59:3b:8f:20:b7:9e:f7:a1:fc:02:c3:54:dc:a0:24:53:
a1:1e:f6:b5:c7:c1:ec:56:04:b5:e3:61:ef:6f:af:b7:cc:e9:
ef:0d:9a:2d:36:cc:41:cf:cc:b2:9f:f1:36:89:77:bb:83:e8:
a1:04:9b:dd:e8:c0:4b:b3:1c:0b:58:c9:74:fa:88:7e:8d:c6:
83:2b:d5:01:0f:99:12:1d:00:2e:02:4c:e6:ab:8e:97:be:ea:
80:fd:ba:3c:73:f9:9f:1c:18:3c:ce:0e:ab:84:b3:39:63:fc:
6b:ad:0a:38:13:0a:e1:84:99:a4:16:1e:5a:59:86:5a:28:f4:
b6:94:ad:7d:a4:a6:53:62:19:9e:87:9a:4b:40:e3:04:11:38:
ad:35:41:3a:e6:d9:05:6b:af:be:39:a0:9f:23:db:c7:5e:ba:
8e:0c:d6:7b:c9:0a:74:83:64:86:8c:ea:a7:8f:29:4c:58:68:
98:b6:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org