Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/5C1053ECB71C11EC97036648C4F9AE02.roa
File: 5C1053ECB71C11EC97036648C4F9AE02.roa (raw, json)
Hash identifier: M2962C8ibjuf2ER1oV8S07IgyFPmtdxStTQnhW0Fk6Q=
Subject key identifier: 11:80:EF:06:79:AD:CE:03:E3:4C:7A:63:B0:8D:D2:3C:1D:2B:C5:FA
Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial: 0E
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/5C1053ECB71C11EC97036648C4F9AE02.roa
Signing time: Fri 08 Apr 2022 09:53:26 +0000
ROA not before: Fri 08 Apr 2022 09:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141452
IP address blocks: 103.185.224.0/24 maxlen: 24
103.185.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Validity
Not Before: Apr 8 09:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62500616-e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:29:45:06:4e:7e:d0:5b:b8:f0:08:52:a1:da:
2a:6e:67:0c:a8:77:32:6a:f1:c0:c8:61:be:30:36:
d1:5b:50:fb:04:97:0f:8e:8a:29:c2:3c:99:b0:fd:
87:4b:44:5a:60:a9:ed:db:e2:31:c4:5f:03:4e:35:
12:79:cc:f0:3c:b9:e4:be:94:5b:0e:e6:b6:35:e6:
9b:09:88:8f:19:ab:d0:43:dd:00:40:e1:be:9c:e5:
38:b2:c6:ed:cb:1d:56:95:d7:86:ce:d8:a1:76:6b:
ce:d2:14:1f:0e:3d:d8:ea:d9:41:8a:f9:a2:ff:73:
12:72:e9:df:99:ee:40:3a:0b:32:49:f9:d3:d4:94:
01:fa:e4:4c:5b:41:6c:1c:cd:c9:e3:d7:be:80:6b:
f4:19:93:8a:3b:80:80:17:6c:a6:1f:f4:c5:77:e4:
bb:48:f2:e4:98:e1:9e:d0:08:f7:2b:6b:49:ed:81:
6b:3e:58:7f:fd:be:a5:80:52:85:92:9f:55:1b:f1:
5a:a3:12:9d:81:d2:4a:50:98:c2:56:90:2f:ef:62:
50:38:58:91:aa:51:b0:cd:14:ac:02:31:9c:39:e1:
91:cf:d0:8b:16:3c:44:89:e4:6c:d5:f8:45:2b:dd:
8d:f7:79:c2:59:25:b1:3e:e9:40:59:64:07:e0:44:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:EF:06:79:AD:CE:03:E3:4C:7A:63:B0:8D:D2:3C:1D:2B:C5:FA
X509v3 Authority Key Identifier:
keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/5C1053ECB71C11EC97036648C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.224.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:53:2b:5d:a4:68:17:83:8e:9c:06:83:a8:ce:3c:e6:0c:a4:
25:52:9a:d9:f5:50:b2:20:b5:00:8a:65:33:6f:43:97:9e:7f:
0f:6b:2d:64:ba:a2:83:5e:cc:23:b2:77:67:e0:5c:f0:b9:45:
17:38:6d:a9:63:2e:7e:b5:46:2a:d0:78:85:41:ad:22:66:0c:
82:d6:ad:36:7f:fa:33:15:6f:f9:c3:25:6f:4f:37:5a:17:5e:
5f:55:48:e8:9a:85:b7:ce:94:80:35:e9:e9:e7:f2:53:4b:87:
4b:a0:e4:9f:57:e6:d4:ac:68:1f:01:42:b1:9d:d4:e5:b9:dc:
13:58:b5:9b:77:1d:e0:78:9d:fb:23:9b:cc:a9:59:27:0d:5a:
b5:21:8e:c4:93:e9:c4:96:dc:6d:c8:39:bf:37:d2:93:a8:06:
c7:85:9d:c5:6e:f9:50:29:fc:69:e8:51:f6:86:1f:0c:84:22:
f5:15:17:26:a8:78:a2:76:4b:78:a6:56:29:69:49:ca:f2:6c:
7f:e7:3f:ac:fc:6e:8f:38:d4:57:5e:26:95:cc:62:8f:a8:66:
97:e3:d6:5b:c7:4f:52:d0:1c:fb:8b:13:40:c3:d0:b4:84:b0:
5b:bc:57:ec:e7:1e:b4:83:7f:92:a1:ea:d7:65:f7:2f:ec:81:
44:18:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org