Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
File: 8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa (raw, json)
Hash identifier: UzTutb6KJ8Zezok9j0LE0iDHJ555fDh2ru+ZtHMNoOw=
Subject key identifier: 2E:7C:8D:68:64:DE:DA:0B:84:20:38:E0:78:23:A5:98:43:B0:66:E5
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 05D9
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
Signing time: Thu 05 May 2022 22:48:50 +0000
ROA not before: Thu 05 May 2022 22:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 103.112.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: May 5 22:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62745452-8d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:11:16:d6:85:5b:1c:d9:b2:78:92:32:fc:
5e:d6:eb:3f:66:bf:e4:9f:7d:61:01:3e:87:56:4a:
46:ec:78:ac:36:14:7b:fa:d2:e5:92:d6:c8:80:c8:
94:1a:56:99:97:57:79:04:89:0a:40:c0:75:6e:4d:
62:91:47:53:4d:03:77:60:6b:a0:68:ff:a4:2a:6c:
12:4b:b3:c7:7a:cd:d9:2a:8c:b0:61:56:11:02:84:
bb:80:d7:39:3c:47:01:b7:81:bc:b8:6a:f6:01:8c:
29:b4:a1:0f:38:bc:0e:56:f8:e0:de:e9:99:15:dc:
25:93:9e:bd:25:67:f2:0f:d8:d5:1e:d5:64:76:c0:
2c:b5:b0:d9:87:01:21:9a:5a:93:a5:b0:cd:f1:fc:
37:a6:86:09:10:ec:11:1d:36:8c:9f:38:ac:e6:a3:
bf:8d:48:3c:54:75:67:b4:a5:d5:3b:17:6b:23:76:
90:bd:31:58:f7:a2:3f:ce:50:77:3f:62:ca:72:de:
60:25:ef:eb:66:a4:b7:1d:7f:de:c7:64:e7:13:2e:
54:fd:39:8a:fe:ab:72:0f:64:79:9c:50:98:7d:41:
70:51:b3:11:f0:00:fc:59:c6:d3:3a:34:91:61:f8:
bc:9d:a7:29:56:37:14:32:32:35:63:d7:8f:0a:8e:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:8D:68:64:DE:DA:0B:84:20:38:E0:78:23:A5:98:43:B0:66:E5
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.2.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b3:9d:7b:fa:8d:23:f2:22:72:5d:4b:c2:e3:55:72:ba:69:
7c:95:ee:b0:77:8e:c2:02:12:dc:85:b8:ec:b3:5e:11:4b:7d:
74:e9:20:6a:9a:53:3e:ed:a9:f1:12:1f:e9:ba:09:16:23:93:
3c:75:72:cc:5b:92:d7:f4:6c:88:2b:1c:93:71:3e:f3:11:7c:
78:44:7e:19:18:26:c5:06:4b:7e:06:05:91:58:fa:38:c7:0d:
3c:4e:98:95:81:79:9c:df:0a:e8:06:02:3b:fe:ed:a0:db:71:
a7:9a:72:22:4b:2b:52:11:15:10:40:8c:17:5f:0d:5e:bc:89:
ed:7c:ff:d1:b8:ad:bc:24:0b:36:73:ea:42:25:58:d2:90:d3:
2a:e7:c5:88:ae:98:34:66:a3:e7:1f:cc:33:92:53:c7:e6:e5:
d1:84:53:22:73:79:56:35:52:bd:f4:87:8a:bd:14:17:15:cc:
02:78:8f:a5:98:17:b5:f1:00:4e:8f:88:e1:0d:12:84:c3:53:
ab:69:70:e6:60:ec:fd:54:12:b1:2c:11:ba:c3:dc:11:34:ea:
4d:c9:df:fe:53:53:36:d4:26:7e:b8:3f:2e:a8:13:cd:9f:99:
ce:f3:71:4b:ba:d2:ec:59:fd:4c:2e:56:66:73:a0:5e:36:34:
be:4f:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org