Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/37CF93166F9211ECA497E04AC4F9AE02.roa
File: 37CF93166F9211ECA497E04AC4F9AE02.roa (raw, json)
Hash identifier: fFteqy7ZP/6jkhejTmSz1zcmKKRwUAJcCJmWd0pmxfo=
Subject key identifier: 84:1A:B0:71:DD:5C:50:DA:B4:C0:A9:49:40:50:CA:9D:8A:D9:75:71
Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial: 0A5F
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/37CF93166F9211ECA497E04AC4F9AE02.roa
Signing time: Mon 10 Oct 2022 20:26:56 +0000
ROA not before: Mon 10 Oct 2022 20:26:56 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 134382
IP address blocks: 103.130.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Validity
Not Before: Oct 10 20:26:56 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6344800f-6e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:af:9a:69:65:c4:54:73:ac:ad:54:50:b2:
fc:3d:b1:32:77:39:15:f5:7f:ef:ac:a2:f0:09:01:
ea:cc:09:24:e0:f1:97:e3:8c:d6:6f:34:50:b7:73:
8e:03:23:1c:07:6a:1b:19:c8:0f:79:f5:cf:47:94:
25:df:00:df:fb:17:6b:c6:4c:96:49:8e:02:0a:9a:
09:d6:34:f0:69:e4:13:b0:72:95:78:e8:01:a8:4b:
d6:b4:42:a2:28:20:16:bd:35:21:f4:ef:ca:4a:7e:
db:9f:98:e4:91:ee:49:40:8f:96:d5:50:eb:96:e8:
3c:14:a4:3e:f8:e1:04:6c:77:ec:fd:09:e7:d2:82:
e2:f2:99:02:2a:28:57:43:2c:9b:7f:50:ff:75:9e:
e3:ad:29:8a:53:d2:3f:6a:60:2a:7c:cd:3b:da:93:
61:82:07:33:8c:fd:72:99:02:ae:f0:bd:df:cd:d9:
bd:f4:d3:7c:69:9f:22:b3:a0:92:4e:35:6e:b9:11:
5a:1b:29:a8:f9:6e:65:2e:98:33:dc:f6:c0:56:04:
61:93:a6:8f:43:f0:85:86:82:9f:6b:99:2f:44:05:
c3:7c:f1:5b:3d:bd:48:a1:72:c5:af:61:ab:08:fe:
9d:31:6f:a7:36:00:cb:21:19:8a:5b:20:16:27:c7:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:B0:71:DD:5C:50:DA:B4:C0:A9:49:40:50:CA:9D:8A:D9:75:71
X509v3 Authority Key Identifier:
keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/37CF93166F9211ECA497E04AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:14:6b:9e:d2:67:c9:30:06:d7:9f:eb:3a:ac:a8:e9:7e:e2:
7b:12:5d:0a:3f:e9:70:8d:e2:6f:7a:a2:a0:6d:46:6e:4b:72:
5a:6c:06:ed:72:46:29:1f:09:9d:22:7a:e4:1a:9a:f5:4d:e3:
e8:6c:2a:9e:08:66:1e:c2:ba:28:2f:26:60:13:07:e4:6b:40:
aa:34:64:0a:2e:93:19:30:90:d3:e1:d5:c9:de:1f:66:36:54:
0a:a0:09:e4:32:64:ce:d3:0b:c9:e9:a9:b1:8e:26:e7:df:f4:
c7:24:93:c0:6d:c8:d9:30:bd:0d:80:ac:6d:6b:0c:55:a6:3a:
23:43:03:97:71:fa:6a:29:b6:39:a5:8b:0c:19:96:3c:41:16:
8f:aa:fc:d0:29:af:1b:65:97:d1:2b:18:14:cf:0e:57:b8:b3:
35:36:c5:11:f1:5b:b6:75:16:77:b6:ea:d6:13:00:29:e9:3f:
e3:86:3f:37:15:50:68:6f:6a:cd:5b:9e:59:40:b0:2a:94:ba:
d1:82:09:05:ac:a9:27:da:a9:e7:dd:35:4e:e7:85:62:87:39:
61:1b:45:65:40:aa:9e:22:8d:e4:9e:62:50:c3:67:e7:c5:d4:
48:89:8f:54:04:bf:6c:f9:b4:6e:3f:aa:00:0a:ef:9c:7a:6c:
80:d3:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org