Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/5B2037A20C2911EC80E94583C4F9AE02.roa
File: 5B2037A20C2911EC80E94583C4F9AE02.roa (raw, json)
Hash identifier: N/FVKLm+27NvlbAMY4c7yMR9nwsLLaEckz1j4gF63Wg=
Subject key identifier: CA:36:3E:6B:D3:B8:31:78:03:B4:4F:37:DD:81:AB:EB:DB:D7:4F:66
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0863
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/5B2037A20C2911EC80E94583C4F9AE02.roa
Signing time: Sun 20 Feb 2022 16:26:55 +0000
ROA not before: Sun 20 Feb 2022 16:26:55 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 138024
IP address blocks: 103.92.152.0/22 maxlen: 22
103.92.152.0/24 maxlen: 24
103.92.153.0/24 maxlen: 24
103.92.154.0/24 maxlen: 24
103.92.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: Feb 20 16:26:55 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62126bcf-ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:5e:26:5e:58:9d:49:e4:b4:88:9c:0b:0a:
c5:00:36:33:c5:a7:e4:51:cd:2a:88:b2:d3:1f:11:
84:42:f4:a5:c9:01:8f:f0:bf:e4:1f:b4:9c:6f:e7:
fd:26:a8:3c:d7:50:e1:54:62:65:f2:f6:59:0c:a3:
51:a8:48:b3:de:ee:a1:a4:53:d9:9c:d4:8d:c7:ff:
db:f8:26:d2:e0:98:d5:d6:ab:f7:6f:89:2a:0c:86:
1f:24:74:10:53:b9:e8:1c:fe:b5:d8:96:08:ff:bc:
0b:4b:8b:40:cd:e3:35:48:f8:42:64:64:cf:1c:cf:
9f:4f:83:58:a0:15:b4:e7:4e:d7:d9:07:a0:2e:3e:
0b:67:d2:69:4b:7f:85:8c:28:1c:16:08:bd:45:03:
95:87:52:d2:71:44:15:a7:cf:e5:d1:5f:44:b8:d6:
b9:dc:87:09:d6:02:c0:86:d2:ac:e4:15:ae:0f:51:
73:b1:6d:4c:2c:15:a6:63:be:e6:11:28:84:fc:02:
b5:d5:60:f0:b2:72:98:3d:69:a4:0f:ea:91:c6:6b:
1f:44:a9:3d:ca:df:60:95:53:3a:5f:9e:62:08:22:
be:a8:d4:bc:18:36:7f:db:5a:dd:7e:fe:c0:1f:38:
55:7c:3f:3d:65:6c:a1:ff:b2:a2:ea:2e:f9:a8:6c:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:3E:6B:D3:B8:31:78:03:B4:4F:37:DD:81:AB:EB:DB:D7:4F:66
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/5B2037A20C2911EC80E94583C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.152.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a8:6f:bd:1b:da:16:a9:33:80:0a:3b:82:de:fb:a9:b7:c5:
e7:00:1b:54:81:a3:1e:ce:c0:6d:40:a3:a3:90:97:94:73:27:
27:13:87:8e:3e:07:9a:28:35:27:b2:60:fb:d0:cf:4f:ca:a6:
1f:23:92:2e:03:8c:34:1a:75:fe:86:bb:26:49:92:01:c9:a9:
eb:89:f8:36:57:ba:16:5e:77:e4:bf:be:4c:86:fd:14:c3:53:
5b:4b:50:cc:63:b6:55:39:ee:7e:89:75:7b:ba:c6:c8:2b:6a:
c6:1d:a5:3b:ff:6e:80:5c:8b:9d:b5:65:eb:f6:21:6a:cc:84:
68:67:8a:2a:e0:ab:af:3b:50:cb:5c:17:6a:95:57:5d:89:48:
26:77:86:48:60:52:5a:f8:16:9b:97:b5:c9:6e:71:eb:11:8a:
fb:86:f6:b4:c0:0a:b9:1e:83:38:93:3b:1a:c1:7f:2b:3c:0f:
26:e3:94:de:f3:40:93:e3:6f:23:59:2b:cb:4c:90:80:c6:f1:
aa:40:5b:81:ec:4d:c7:c5:90:95:0e:d5:2f:2a:5b:fb:f8:33:
0c:df:11:96:42:f9:16:0e:13:15:b7:6d:ff:9e:a4:cd:7c:5c:
59:1a:33:70:3a:72:db:eb:95:65:da:f0:13:a2:4b:13:3f:94:
68:50:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org