Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/F9ABCFEC0F5011ECAE658D39C4F9AE02.roa
File: F9ABCFEC0F5011ECAE658D39C4F9AE02.roa (raw, json)
Hash identifier: tn/dTX0er5SUuKwbsHgukmZvtLYKgfH/bGKE4Wquj+k=
Subject key identifier: 04:2E:0E:10:6D:74:68:FE:3E:6F:38:7A:2F:23:A3:BC:FE:C6:9C:76
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 05DC
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/F9ABCFEC0F5011ECAE658D39C4F9AE02.roa
Signing time: Thu 05 May 2022 22:48:52 +0000
ROA not before: Thu 05 May 2022 22:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 103.112.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: May 5 22:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62745454-f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:fc:3a:fc:5c:b8:ee:9e:d5:ef:ee:b2:c6:
93:e0:fb:4a:dd:9d:2e:f9:b4:be:04:64:83:26:33:
5f:88:9e:f0:63:80:ae:99:9b:47:4a:44:a4:d2:6a:
f0:a6:56:bd:3a:75:dc:1a:e2:93:1c:9a:28:f2:57:
d1:6a:0e:4a:58:4e:3d:b3:ec:3f:9b:94:96:18:11:
44:4d:c0:e0:1b:47:0d:c2:06:10:4f:d1:08:74:04:
84:18:54:73:95:fc:29:17:6c:b7:2c:59:82:d7:a8:
be:f9:8d:1d:f8:9f:e3:a0:64:69:96:6d:fe:53:41:
1c:d0:14:a1:0e:b4:f6:f3:6d:d7:f3:2a:84:c9:45:
74:93:8b:19:9c:3f:48:48:d3:0b:1e:4f:d7:d4:14:
b2:fe:32:c9:19:98:21:68:94:64:e7:85:85:80:87:
99:58:c4:b2:e5:c3:e3:08:e2:e0:1e:a8:00:00:a8:
47:07:2f:34:3a:56:b0:f7:26:24:0f:30:89:41:bc:
ca:f6:9e:62:75:e0:6a:7c:aa:47:81:b0:a7:e1:c4:
fd:f0:bf:75:f0:05:0e:5d:87:e9:df:05:ac:1e:e1:
89:17:2b:33:17:f1:4f:8c:d6:06:86:d4:6d:5f:82:
ea:7d:23:dc:40:a3:8b:21:ab:f3:73:21:65:7e:1b:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:0E:10:6D:74:68:FE:3E:6F:38:7A:2F:23:A3:BC:FE:C6:9C:76
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/F9ABCFEC0F5011ECAE658D39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.3.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7c:e4:96:8a:5d:fd:4f:5d:0f:a5:00:ac:3e:94:7b:54:11:
85:92:86:a8:1e:ce:b9:8f:49:24:42:ac:ed:85:09:5f:2d:84:
ea:74:34:8b:8f:e4:04:49:fb:c8:6d:d9:a4:aa:f6:f1:c0:e6:
92:00:f9:39:a8:a4:95:01:b1:4a:4f:56:3b:43:e9:b1:5e:b0:
a4:da:68:68:96:15:77:17:28:d3:70:f3:81:97:a8:41:d5:f0:
6b:ac:b9:e0:8a:5b:9a:24:1b:5e:64:64:79:52:9a:c7:72:04:
31:17:e7:17:9b:85:c1:95:72:94:57:0b:41:0c:d0:98:f0:2f:
5a:bc:c2:d4:0f:1e:bc:72:31:bb:cf:2e:5a:2f:1b:e4:d2:a4:
3b:1f:7f:4a:e6:91:ac:2e:54:7c:c0:e9:9e:0c:b0:c4:d2:a4:
df:6e:96:57:1a:22:d0:c2:d0:77:f8:7d:80:4f:14:d4:9a:5f:
56:e1:26:da:c3:23:2a:81:f0:8e:03:de:12:46:fc:32:ad:83:
c9:93:b4:88:25:3a:a2:2f:7f:a0:02:bb:30:f9:76:92:f7:81:
bf:0d:b1:68:21:a9:59:71:f0:53:41:a3:ec:40:8d:a0:b9:f2:
8f:eb:a9:e2:24:86:e2:69:b2:94:8e:2a:6c:e7:6b:5f:01:2a:
ce:06:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-fra.rpki-client.org