Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/3792D844E27911ED88B5A641C4F9AE02.roa
File: 3792D844E27911ED88B5A641C4F9AE02.roa (raw, json)
Hash identifier: BOJgpjtTmuCMqz+NP2kttapKQpu2mN8tyUCiturrPXQ=
Subject key identifier: F3:CD:9D:CE:CF:05:7C:B6:A2:48:9B:39:2F:FD:9F:75:A4:03:9C:D3
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 0361
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/3792D844E27911ED88B5A641C4F9AE02.roa
Signing time: Mon 12 Jun 2023 16:51:27 +0000
ROA not before: Mon 12 Jun 2023 16:51:27 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 30938
IP address blocks: 103.101.84.0/24 maxlen: 24
103.101.85.0/24 maxlen: 24
103.101.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Validity
Not Before: Jun 12 16:51:27 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64874d0f-895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:c4:8f:72:6b:81:8f:5b:9c:30:fc:a9:bd:
fe:c5:0d:f2:c0:a0:c8:bf:5e:4e:b6:bc:4c:53:a4:
da:07:db:11:06:7e:db:2f:a1:28:0d:6c:ad:93:44:
66:5d:4a:de:80:39:1a:08:60:16:87:a3:e3:ae:8d:
b7:c5:24:e3:8f:6f:d5:85:e1:f2:a1:d3:26:ec:a0:
d2:03:27:36:95:e9:99:dd:18:56:81:fb:06:3c:4a:
34:26:e3:2a:a4:99:00:9a:fc:0c:63:46:63:92:e0:
07:61:e0:13:5f:a8:f9:a1:1d:23:68:db:61:f2:b6:
3d:c4:be:49:04:19:03:85:c7:8e:85:d5:73:13:3a:
c4:14:52:a2:3c:6d:1d:d1:a2:5d:61:6d:7d:13:d6:
28:18:d6:4a:38:76:5c:e2:55:df:6d:0e:b6:c5:74:
18:0f:39:be:fd:a9:a0:3d:9a:f6:ed:de:7b:2c:68:
4b:2b:a3:72:72:f8:e1:16:86:0e:72:2b:c5:cc:b1:
4a:6f:85:5f:ba:b3:31:65:73:ff:2c:e8:de:ef:1b:
1a:5e:85:18:8c:a7:40:9b:21:86:fa:31:02:af:db:
01:db:b0:cb:43:65:6c:4d:cc:6c:88:f2:8b:87:b6:
86:c4:74:49:5e:c2:0a:ef:20:21:99:52:75:78:63:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:9D:CE:CF:05:7C:B6:A2:48:9B:39:2F:FD:9F:75:A4:03:9C:D3
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/3792D844E27911ED88B5A641C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.84.0-103.101.86.255
Signature Algorithm: sha256WithRSAEncryption
ba:e6:03:b0:cb:1e:42:e1:9b:53:a4:c6:d6:c1:b3:b5:20:cc:
84:95:27:04:0c:86:fe:40:0a:4c:4f:92:44:11:b0:82:81:ed:
86:b4:55:63:0d:9e:a0:fa:76:b3:ed:06:61:1e:5e:cd:d8:b4:
d9:c5:84:3f:68:26:0f:8f:ac:c8:92:40:25:6b:a8:d7:ca:cd:
12:a5:b3:4c:1b:58:4f:a3:5c:dc:1b:95:c6:46:17:aa:e7:b8:
86:77:2a:61:ca:88:a7:c5:3c:e7:5c:5d:9f:78:72:c1:80:82:
1f:a3:ee:00:83:36:31:83:ff:2f:66:63:8d:35:f1:0a:9d:d0:
9e:ba:10:5d:23:cf:72:07:c6:43:02:59:66:24:b9:f7:93:97:
84:6f:3a:de:2c:a5:f4:da:d3:ca:a8:7e:c9:19:44:8a:9f:a3:
65:4a:51:86:bb:69:bb:61:ca:e3:3d:de:16:68:0e:f3:30:35:
c8:a9:11:d6:8b:c7:f1:27:19:ff:16:ab:17:e1:52:45:a3:ea:
a9:48:5c:2b:a5:a5:4c:60:99:c5:d4:0a:b2:35:ec:9b:ce:c4:
b8:bf:d5:02:22:d4:6a:af:89:7d:01:1b:8e:54:db:09:54:32:
f9:82:bd:36:88:e3:70:44:1b:6e:dd:09:88:d9:2a:e7:0a:47:
68:2b:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org