Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
File: AA13B1FE865511EBABB6CE18C4F9AE02.roa (raw, json)
Hash identifier: 0HMM0HTGz13kcNiBVFfoVdTTZpbI7tgdlZVVpGcFxAA=
Subject key identifier: FA:60:7F:B1:D3:8C:86:7F:0F:9D:14:69:D7:DC:D8:F5:5A:5F:02:33
Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial: 05D6
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
Signing time: Sun 30 Oct 2022 23:29:56 +0000
ROA not before: Sun 30 Oct 2022 23:29:56 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 141209
IP address blocks: 103.156.126.0/23 maxlen: 23
103.156.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Validity
Not Before: Oct 30 23:29:56 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635f08f3-aeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:7f:33:11:8a:f5:75:35:b7:68:78:84:c9:
a3:b5:ea:d7:5a:2b:da:2e:17:f5:a4:b1:65:46:2a:
b2:5a:fd:93:1a:49:84:1f:7a:ae:2c:36:29:87:1b:
b5:41:16:62:f4:9a:02:aa:1e:e2:90:b3:d4:13:57:
bb:aa:c5:e8:2a:bb:9d:31:51:d6:02:0c:4e:de:77:
c6:fd:6c:a2:86:e0:1c:ef:4d:34:99:3c:a5:17:66:
03:f8:24:e9:62:76:57:6d:f6:c1:5e:fd:31:48:a2:
08:84:87:dd:c1:32:2c:68:fe:fc:d1:ae:8f:97:fd:
87:25:1e:78:08:f8:ff:cd:9c:8d:eb:8c:60:16:c1:
6f:5f:5d:bd:d9:12:f3:c0:4a:cb:c5:eb:f8:fc:bf:
f9:a6:cd:39:c7:fd:81:ea:1c:b7:d5:3d:f9:7c:91:
4e:f1:f2:bb:bc:b0:ab:f0:00:44:9d:2d:55:c7:f3:
b4:86:34:76:2d:ce:bd:9e:c2:68:8a:62:26:d3:39:
80:d3:d1:d2:50:d9:ea:df:64:16:f8:27:b8:41:53:
63:dc:c8:1e:64:dd:b9:9a:fc:c7:8c:08:08:ee:b2:
97:53:a7:a7:df:91:0f:80:fc:a3:f3:66:ec:90:d6:
2f:b7:e6:27:88:ad:3e:1c:bd:fd:8f:29:f7:ae:75:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:7F:B1:D3:8C:86:7F:0F:9D:14:69:D7:DC:D8:F5:5A:5F:02:33
X509v3 Authority Key Identifier:
keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.126.0/23
Signature Algorithm: sha256WithRSAEncryption
47:c2:86:7a:e6:bb:e2:2a:ac:53:60:b4:9a:db:54:18:fd:cc:
70:6e:4d:af:bc:2d:71:89:b3:af:19:7f:37:f7:38:1c:c5:6e:
ba:a8:bb:86:3d:22:63:ff:91:a6:b9:1f:bb:73:2e:64:76:b2:
dc:08:d1:37:54:df:9e:6b:2d:e3:4d:18:4c:f1:ef:51:86:7e:
40:51:5f:ce:6e:89:19:bf:bd:07:11:e6:c3:c6:ca:da:b1:09:
72:f5:89:9a:ce:97:87:c5:3a:6b:8e:77:ea:83:42:a9:3a:69:
5a:ea:68:dc:64:ff:ed:c8:ee:8f:7c:7a:92:84:c9:84:e5:51:
a9:cb:1a:2c:40:72:34:da:e4:6f:b3:41:79:95:12:5d:fe:df:
76:ce:11:fa:ab:2d:cf:0c:31:2f:31:af:4a:ef:8c:a8:bb:12:
60:fd:39:d9:42:f9:c7:09:d9:b7:de:e1:19:c9:ec:2b:d3:cc:
51:a4:2d:de:b9:5d:c8:68:97:17:f9:36:fd:7e:c0:6d:e7:be:
af:05:59:1e:17:53:8a:04:00:39:d4:55:e5:88:9d:86:89:1e:
f3:51:83:f3:2d:43:18:92:09:ea:07:88:f6:fd:cf:20:96:0e:
2d:03:db:84:78:00:4e:a7:25:55:ae:86:4d:44:aa:21:fa:b8:
7d:0c:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org