Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8F9027641D5211EDB919FB3FC4F9AE02.roa
File: 8F9027641D5211EDB919FB3FC4F9AE02.roa (raw, json)
Hash identifier: fE2eSAAalOBQaMVdu9nuAcvZ/0HeO707IK7bbA1tIek=
Subject key identifier: 66:1F:89:FC:59:AA:8B:DE:C6:A9:F3:18:9C:86:7A:F2:2D:EC:E7:BF
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 046E
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8F9027641D5211EDB919FB3FC4F9AE02.roa
Signing time: Tue 16 Aug 2022 10:59:55 +0000
ROA not before: Tue 16 Aug 2022 10:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139282
IP address blocks: 103.136.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Aug 16 10:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fb78ab-73cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:fb:ee:11:66:cc:b6:e5:bb:b2:cb:7a:49:
03:c1:85:0a:0f:66:f0:be:a7:7c:1c:ab:2e:2c:ca:
37:99:ce:4d:8f:6b:0b:c3:fb:89:24:1b:37:46:2a:
17:12:c3:91:80:f2:06:98:be:86:0b:29:8b:2b:ea:
3d:c3:11:ef:31:45:16:7b:01:ed:56:09:06:39:fc:
e5:f4:94:f3:3e:63:14:60:13:22:63:eb:85:f4:a0:
e7:b8:f3:eb:db:d6:b5:4f:ba:55:14:1c:63:ff:5e:
7c:73:59:b8:ef:13:40:12:66:59:d6:b7:6c:24:7e:
ff:80:cf:07:76:59:27:04:4d:b0:be:22:73:e2:31:
b7:55:e5:87:b3:55:84:21:92:1c:62:52:6e:2f:6f:
23:20:a3:66:2d:8a:22:64:63:94:74:20:71:fd:d3:
e1:b3:93:0f:58:fa:6e:dc:6e:25:37:f2:07:57:79:
81:3f:da:33:7b:8d:ec:40:6f:34:82:6b:76:7e:d0:
75:fe:36:a9:b5:64:27:94:8d:2e:43:f3:70:f6:9e:
19:49:ef:f8:33:bc:38:2f:2e:a5:c5:df:e0:92:fb:
b9:5e:e0:85:dc:cf:8a:1e:14:b7:6d:01:92:bc:b5:
83:36:6e:5d:d3:7a:e7:b9:90:45:6d:9d:61:f4:4f:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:89:FC:59:AA:8B:DE:C6:A9:F3:18:9C:86:7A:F2:2D:EC:E7:BF
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8F9027641D5211EDB919FB3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fa:d8:7b:60:87:03:44:e8:c1:b7:dc:82:db:ef:e6:48:3c:
51:d9:d2:d2:a6:cf:67:56:2e:0e:82:cd:31:ec:44:5e:37:6e:
ec:17:92:b7:3f:d4:a5:76:0f:c5:9d:1e:27:ec:80:93:85:b9:
2e:e1:f4:d3:9f:49:ae:e6:81:40:97:3b:a3:38:6c:ac:f6:e0:
e2:d0:72:0f:7d:7d:ce:ac:37:cc:cf:ee:ff:f4:50:2c:73:1d:
e6:39:8c:26:8d:86:f7:ff:ef:a4:ce:d4:e0:47:f6:7c:47:83:
d3:f8:10:ae:12:6b:51:87:db:e8:73:69:84:c8:8a:7e:fc:cb:
0e:79:90:8e:97:1a:4b:8c:4b:c0:bc:9f:87:6d:40:43:ce:01:
6d:62:f3:cd:77:70:3b:79:47:8c:5a:26:25:e8:78:1e:05:36:
4b:fc:79:ad:93:cc:df:fe:c5:a0:f9:0d:e8:29:f1:ff:38:2a:
7c:95:f5:cc:25:ba:b3:fd:ab:74:94:09:7d:ce:ff:14:15:fe:
7e:94:3a:62:58:d5:d6:f7:10:8e:3c:b0:ab:77:c7:40:02:65:
ba:bd:d3:3f:11:3a:64:ae:48:9a:e9:6c:e0:79:e2:20:40:37:
c7:a3:a2:1d:4e:8e:cb:6b:a5:4e:7a:d3:25:55:d1:9a:c8:f6:
fe:3d:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org