Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/00B35402AB4D11ECB0C94F67C4F9AE02.roa
File: 00B35402AB4D11ECB0C94F67C4F9AE02.roa (raw, json)
Hash identifier: pI2M7kM7Q0+uirOG21aoCMhfjhMNHWDghDA6tVUAPqs=
Subject key identifier: 37:74:1D:6E:53:90:2D:CE:B3:26:67:33:A0:DD:92:77:50:7C:E6:D4
Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D
Certificate serial: E1
Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/00B35402AB4D11ECB0C94F67C4F9AE02.roa
Signing time: Thu 24 Mar 2022 08:32:56 +0000
ROA not before: Thu 24 Mar 2022 08:32:56 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 138467
IP address blocks: 103.177.136.0/24 maxlen: 24
103.177.137.0/24 maxlen: 24
2400:3f60:1::/48 maxlen: 48
2400:3f60:2::/48 maxlen: 48
2400:3f60:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D
Validity
Not Before: Mar 24 08:32:56 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=623c2cb7-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:7f:27:83:a3:8b:4c:33:71:55:52:0d:2d:
28:0e:59:b1:d0:79:a1:6b:e0:49:48:eb:29:32:4d:
cd:34:e6:73:4a:6e:99:fd:f4:75:84:80:1f:a8:89:
66:fe:36:6c:db:d7:e0:97:87:f0:08:80:c6:2b:89:
e1:77:2f:59:e8:e7:ae:b1:13:c5:6e:96:39:ab:46:
86:92:8f:41:fa:d8:7e:c6:78:33:84:26:98:ee:d8:
07:50:41:f3:f2:b1:eb:95:70:6a:39:96:cb:25:f3:
d7:8b:b6:19:38:53:b4:2e:17:72:4f:62:5b:24:6a:
ad:23:a9:ac:d3:4e:ce:6a:fe:0a:aa:f6:2e:3f:76:
9a:67:ea:a5:34:f8:54:e9:d8:3e:0d:91:e4:68:ba:
b3:c2:e8:6b:ab:ab:eb:20:3b:11:a0:eb:13:ce:96:
c5:6e:12:7e:0a:8a:f0:af:1f:80:a0:24:e5:ee:82:
62:44:02:46:ca:3c:7f:00:4d:cb:f8:39:0f:fb:45:
f0:b2:e7:0a:ea:10:5e:9f:c9:bc:9d:0b:2c:d3:38:
62:ce:19:bc:5d:05:e6:3f:55:1c:fb:e4:75:1d:a8:
17:8f:5b:a2:fb:bb:22:3a:a6:7e:88:69:5a:26:0f:
9d:7e:df:f7:a7:12:b1:d5:1f:67:64:ef:d6:b3:4e:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:1D:6E:53:90:2D:CE:B3:26:67:33:A0:DD:92:77:50:7C:E6:D4
X509v3 Authority Key Identifier:
keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/00B35402AB4D11ECB0C94F67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.136.0/23
IPv6:
2400:3f60:1::-2400:3f60:2:ffff:ffff:ffff:ffff:ffff
2400:3f60:4::/48
Signature Algorithm: sha256WithRSAEncryption
0c:71:ab:6d:76:e8:43:3b:b7:0f:eb:0e:0f:09:e4:71:55:27:
77:29:4f:77:28:66:b0:a0:af:56:0f:04:d2:c2:a5:46:37:90:
30:f4:e2:0c:af:21:c7:0d:23:26:53:d7:b9:1d:94:dd:c8:5b:
d6:fb:14:87:40:7a:ad:c9:0c:0d:a0:97:72:d8:e1:5d:a3:10:
c7:54:9f:6a:72:ad:e6:30:30:f8:6a:2a:51:ad:a8:ca:31:a8:
74:60:d7:0c:75:2c:e6:56:36:f1:b1:36:60:7b:dc:26:46:9f:
61:f7:f6:e2:e8:45:2d:a2:ff:fb:fe:1b:3e:de:08:25:97:60:
80:ea:67:10:b7:0d:f7:4e:29:04:e1:c3:5b:aa:68:cd:78:6a:
16:e3:8d:3d:5f:c6:6f:dc:5f:25:0c:95:e5:4e:8f:15:fa:06:
fc:7c:ea:14:f6:2e:d2:5c:8b:fd:aa:48:1b:76:c4:34:59:0f:
68:5f:20:85:44:bb:e6:56:78:d9:6c:bb:20:32:46:e4:62:0c:
13:34:30:f7:c9:e1:7c:f8:fa:32:8e:9e:85:ea:b7:4a:58:ef:
6f:69:a4:a8:c2:3a:8e:42:e6:2e:d7:7a:03:33:66:22:c4:47:
4a:a1:6f:8c:04:67:b0:9d:d1:74:bf:2c:31:fc:d0:ce:06:1e:
e7:37:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org