Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F3F6B1583A8711EDB2E28021C4F9AE02.roa
File: F3F6B1583A8711EDB2E28021C4F9AE02.roa (raw, json)
Hash identifier: /VrPOA50QgEyqZByQC1gX0kzuDfjufPR3I/dsZ0V46g=
Subject key identifier: 1B:9C:ED:BD:F8:DE:61:5F:73:97:38:9A:46:77:4B:F2:36:53:42:2C
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 53
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F3F6B1583A8711EDB2E28021C4F9AE02.roa
Signing time: Thu 22 Sep 2022 15:05:11 +0000
ROA not before: Thu 22 Sep 2022 15:05:11 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 138926
IP address blocks: 103.111.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Sep 22 15:05:11 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=632c79a6-93e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:d5:7b:2a:b4:7f:ed:3c:ce:fc:44:4f:16:
d2:48:b7:a8:86:fb:b0:31:9e:11:29:3c:b5:e2:fa:
b3:b2:20:e3:cf:b0:38:f5:3b:d1:a7:f9:3a:02:53:
05:40:a4:82:92:1f:4b:75:8a:b7:e1:06:c0:c7:48:
8b:1f:3a:30:61:1c:8a:73:16:41:11:03:f3:f5:8b:
8b:c0:44:af:2a:80:a6:14:cb:c6:3a:8d:a7:8e:63:
a7:3a:be:da:16:8b:29:af:65:61:f6:40:9b:88:50:
0d:90:a9:94:33:8a:9c:36:ca:0e:4c:65:28:4a:65:
08:b8:46:b4:0e:2e:8e:8c:e6:10:c4:1f:f9:25:13:
87:e0:c9:88:f1:22:68:a2:b4:58:5a:04:73:49:50:
df:1a:87:af:59:8a:74:08:70:87:2e:55:9d:46:94:
52:51:84:2f:00:3b:c8:82:7c:28:a8:47:6c:d2:30:
d7:6d:ec:3d:ba:77:14:dd:5b:f0:32:fd:ae:65:5a:
ef:27:5e:d7:33:1a:7f:c7:fb:b3:ca:8f:16:79:3b:
c9:9c:d3:a6:a1:26:90:ac:7b:a3:4a:b6:5f:e2:09:
36:31:87:df:c1:93:07:80:e7:0d:9f:ed:f5:56:f4:
f2:ff:b9:da:11:f4:fe:fd:2b:61:e9:31:ac:38:bc:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:ED:BD:F8:DE:61:5F:73:97:38:9A:46:77:4B:F2:36:53:42:2C
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F3F6B1583A8711EDB2E28021C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.38.0/24
Signature Algorithm: sha256WithRSAEncryption
46:71:bd:fe:12:23:0b:92:a8:6e:57:6a:0b:53:a5:03:9e:79:
b8:05:5b:7a:ec:7c:37:2a:99:8a:e0:2b:2b:30:f4:64:2d:56:
97:ac:9e:a4:b7:c9:b0:48:3d:c2:07:b9:e5:77:ae:45:d9:61:
22:84:80:63:5b:24:c7:66:5d:00:f4:17:7f:45:84:7f:80:51:
43:32:77:ae:cb:e2:9a:cc:8b:13:ea:54:a7:cc:6d:bd:c3:0d:
e3:23:71:33:9b:88:34:ad:28:2e:28:c5:ef:8f:8e:83:cc:3c:
80:ec:2c:f6:64:ba:11:16:be:e1:77:55:cc:07:de:4a:78:6d:
dd:a5:13:a6:eb:ae:46:6e:ca:8e:f5:a9:d2:c3:4d:3c:ae:d8:
4a:66:29:d5:54:11:50:b6:de:a6:e7:f7:64:9b:15:dd:6e:4a:
7c:aa:4f:73:c7:c9:72:b1:b1:9d:bc:e9:ec:82:6f:22:be:ea:
a8:44:ff:e0:84:d7:66:6b:9f:4b:34:88:2a:d7:b3:5c:37:47:
26:e7:dd:9a:5e:43:ae:d6:51:60:18:59:c1:11:d9:43:d1:a6:
bd:89:e0:03:45:3d:47:c7:37:b4:79:8d:76:4a:48:4c:5a:ae:
b3:6a:ad:fb:34:ae:8c:99:af:ce:5a:8c:3d:86:90:0c:d0:87:
ff:74:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org