Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/43577086B32211EC93866C57C4F9AE02.roa
File: 43577086B32211EC93866C57C4F9AE02.roa (raw, json)
Hash identifier: QP6m6s299eFMgWrD2vKJf2LjxuM83Gv1n4MmrstBtVk=
Subject key identifier: 07:B3:D7:A0:DB:27:54:C5:E2:8F:37:65:B3:98:CF:ED:68:40:6A:A5
Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial: 08DC
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/43577086B32211EC93866C57C4F9AE02.roa
Signing time: Thu 28 Jul 2022 05:26:57 +0000
ROA not before: Thu 28 Jul 2022 05:26:57 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 137703
IP address blocks: 103.133.210.0/24 maxlen: 24
103.133.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Validity
Not Before: Jul 28 05:26:57 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62e21e21-d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:67:ca:93:84:68:fa:65:28:8f:75:1c:9e:
4c:ea:f1:92:3d:4f:58:2d:9a:62:dc:d4:04:49:5e:
ec:9a:5e:d3:80:66:24:91:eb:92:21:e4:80:39:d4:
d1:3b:6c:91:e7:73:87:3f:6a:dd:d8:ce:18:65:e9:
7b:70:e9:89:9f:3e:4e:65:24:8c:11:1e:8c:ff:2c:
1b:6b:4c:c2:5f:51:5f:c6:1f:9a:bd:db:e7:b1:f7:
3a:ee:0a:77:7f:7e:9c:9f:76:32:85:e0:a2:3a:e6:
6f:87:1f:c4:c1:3f:71:e9:c2:6a:fa:16:a2:80:4f:
bb:5e:8a:64:f1:f6:98:04:a9:89:85:8a:43:11:64:
a8:86:ee:70:90:f6:85:76:20:15:7a:8d:95:35:ba:
ac:ec:b8:6b:f4:ed:e6:9b:ac:e7:ef:fa:0d:4d:f4:
c2:08:7a:8a:54:a0:b7:91:c3:88:29:af:a8:fb:bc:
04:8d:eb:90:4b:e4:8f:9d:37:93:88:a9:6e:9d:24:
1c:d8:d4:86:1d:b4:43:31:65:f4:1e:b9:1a:d4:cd:
5c:a2:dd:8d:2a:ad:5a:5b:cc:a4:42:c3:2f:e8:1a:
95:bc:90:7e:1a:01:66:f9:9e:aa:e9:f2:b1:eb:07:
86:24:12:78:7a:6e:9c:7c:62:66:db:bc:83:7c:ec:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:D7:A0:DB:27:54:C5:E2:8F:37:65:B3:98:CF:ED:68:40:6A:A5
X509v3 Authority Key Identifier:
keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/43577086B32211EC93866C57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.210.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:d2:4c:fc:97:7c:f7:73:d2:dd:60:82:84:55:06:04:a3:06:
a1:d4:7d:4e:f0:69:49:84:17:af:9f:b2:38:6f:87:7b:25:7f:
af:87:fc:bd:a5:f8:8b:4c:b7:fc:03:03:7a:74:ad:e2:86:4c:
8d:76:38:23:bb:33:4a:93:63:94:1d:27:db:f7:e1:9a:d0:79:
6c:08:7f:ab:93:12:bc:40:4c:65:70:13:c1:d3:69:9e:ad:96:
72:4f:81:73:ef:66:cd:0e:11:13:9b:aa:a8:0b:42:88:bb:ef:
90:f1:e6:0c:54:9a:09:57:84:9f:ff:94:9b:42:04:e9:53:f0:
f9:3c:e4:9c:f1:02:ea:06:df:bd:23:cc:65:6e:1d:c6:28:6d:
c3:01:8e:03:f7:76:ee:68:0e:60:76:e9:0c:68:1c:f8:98:4a:
61:2e:b7:47:51:12:65:43:c2:ee:f9:05:21:f4:fe:97:57:ec:
d8:89:a0:c1:02:e5:7b:48:a7:c2:62:5c:2b:d3:70:b1:f0:fb:
86:63:53:df:f9:91:52:f1:03:fa:ed:13:1d:79:53:e1:74:29:
c3:d3:6c:b0:32:9f:db:72:d0:f8:70:12:0a:8e:16:a2:8e:44:
02:32:78:d0:02:1b:8d:4b:56:6f:89:48:92:b3:81:a3:6e:ce:
39:77:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org