Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/4F7336CE1C3511EA9632D25CC4F9AE02.roa
File: 4F7336CE1C3511EA9632D25CC4F9AE02.roa (raw, json)
Hash identifier: 9fBKb6r/HhsjXNqLXHx0i0RSI5guke2VDV+mHp593lQ=
Subject key identifier: 36:6A:D1:7D:31:9F:51:4F:F5:C9:26:B7:70:BE:DD:1B:52:13:CC:5C
Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial: 08BA
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/4F7336CE1C3511EA9632D25CC4F9AE02.roa
Signing time: Sun 08 May 2022 20:46:41 +0000
ROA not before: Sun 08 May 2022 20:46:41 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 138482
IP address blocks: 103.138.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Validity
Not Before: May 8 20:46:41 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62782c31-49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:06:2c:bc:85:62:fd:9a:42:0f:00:50:21:cb:
d8:9d:a9:65:8b:48:b2:5e:c6:3e:27:0e:d0:e1:b3:
12:ad:06:e7:fc:e1:fc:dc:5f:e4:7f:fa:ab:ea:41:
17:75:62:5d:af:a7:92:3b:4f:35:67:48:92:07:fa:
fa:20:05:bd:3f:22:5c:2a:3f:be:12:e6:ef:b5:24:
a2:61:b9:f5:47:a3:8a:27:e2:ef:ad:94:f8:ef:44:
ee:6c:5e:45:35:8a:a0:a9:e6:3c:c0:96:85:1d:61:
e4:12:2f:24:f4:b4:12:91:2d:4b:a6:9b:78:91:41:
63:a3:38:9b:70:4e:0e:01:99:5d:45:62:70:15:a3:
61:5f:4e:35:eb:ce:43:d1:99:bc:42:9f:00:36:ee:
ab:c0:86:2b:d5:cc:18:51:8e:d8:0d:53:4b:a2:1a:
fd:76:b7:1e:bc:8e:83:a9:f7:48:0b:00:45:30:8a:
3d:74:bb:91:6b:15:8d:7d:10:10:be:89:7f:21:dc:
cb:1f:36:19:29:64:00:b4:14:57:30:ca:80:5b:09:
f5:20:8b:45:1c:9d:2c:ea:ca:95:19:3a:94:e1:8e:
b5:f5:0c:e3:de:61:98:33:6b:64:26:14:cb:e1:9e:
f7:42:3d:85:6b:06:45:56:a1:d8:4b:95:38:26:2a:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:D1:7D:31:9F:51:4F:F5:C9:26:B7:70:BE:DD:1B:52:13:CC:5C
X509v3 Authority Key Identifier:
keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/4F7336CE1C3511EA9632D25CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:58:92:4c:db:82:33:4d:11:7d:36:7b:9a:52:17:e9:d4:55:
89:4e:9d:0d:9a:1e:a1:55:f0:8a:f4:f3:dc:80:d0:e8:c6:12:
8c:7f:db:7c:44:14:12:a2:3c:ae:cd:6a:4a:37:1c:2b:6b:0c:
02:10:84:b5:c2:dc:ff:36:13:aa:13:97:3e:c3:12:c3:35:cc:
dc:17:c1:92:85:f9:80:49:07:49:cd:f7:6e:c9:70:e3:79:61:
b5:25:57:e4:92:e7:6a:8d:5f:c0:e3:73:8c:db:f0:04:ba:fb:
7a:f9:ff:2b:9b:74:5b:f5:22:64:eb:63:a2:9c:02:1b:4a:2a:
88:85:ea:48:d9:86:c0:ee:dc:57:e4:a6:63:11:bc:0c:77:e4:
ad:0b:37:a7:73:c3:d7:a2:1b:46:be:38:77:de:49:cd:32:5f:
69:35:51:4f:ff:bd:6b:b7:89:90:c6:91:db:f2:f5:e6:53:c4:
56:ab:94:8a:31:6d:76:97:69:61:e7:05:f0:e3:4c:74:0d:34:
1f:99:ef:4c:31:a6:d4:cc:78:96:8b:09:da:5f:ec:9d:7b:0f:
d7:44:8f:83:c1:11:94:7e:79:76:86:dd:4c:28:55:61:77:1e:
db:35:de:03:42:2d:e9:c9:7a:04:33:16:10:65:85:84:fc:8c:
1e:06:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org