Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/D1F52FFE633911EEA1DD8734C4F9AE02.roa
File: D1F52FFE633911EEA1DD8734C4F9AE02.roa (raw, json)
Hash identifier: rMX1w7QyWAZscc8k9JXGcG5CvIAgHfzJiDmwn+bnPUg=
Subject key identifier: B5:EF:47:F5:1C:72:AC:3F:80:E9:75:B0:2D:99:A3:03:5A:00:19:A4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: BB
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/D1F52FFE633911EEA1DD8734C4F9AE02.roa
Signing time: Thu 05 Oct 2023 04:44:08 +0000
ROA not before: Thu 05 Oct 2023 04:44:08 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 399471
IP address blocks: 103.86.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Oct 5 04:44:08 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=651e3f18-79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:03:a0:29:c6:4d:1c:44:ff:5f:26:24:30:
39:49:ba:6d:ab:43:86:0e:ef:b8:b8:30:d4:5e:58:
d0:c4:3a:4e:a1:5b:e4:e9:8a:72:7e:4b:4d:28:8a:
72:3b:d6:4e:ac:26:ab:8f:27:e2:7c:d6:4b:74:db:
0d:18:7a:cb:31:04:07:b3:1e:9e:c9:70:8a:48:be:
dd:14:92:d8:b7:38:56:fb:a4:5b:b8:14:a5:f0:be:
94:54:b0:7e:80:f2:ad:eb:c1:1d:46:d2:06:68:b8:
7f:28:16:cc:5f:28:1f:e4:cf:2c:53:55:8e:90:c4:
71:4c:42:21:e4:27:0e:65:f7:e9:5b:10:38:88:76:
fc:7c:b6:20:f2:71:42:f7:4b:5a:38:0c:2d:80:e5:
4c:cb:74:b7:8c:6d:9c:a0:d8:6b:60:1b:39:5d:c7:
f8:d5:c3:b1:fe:41:06:7d:b5:73:d9:df:9d:84:08:
54:9a:d8:66:f2:3e:11:c8:7b:5c:a3:76:28:20:03:
e3:bd:58:4a:11:40:56:7e:b6:59:70:dc:40:69:24:
74:62:43:aa:f9:72:40:63:ee:4d:91:d8:ca:35:78:
b5:7a:f6:24:01:78:a0:a5:de:5e:90:91:76:3d:dc:
59:b7:eb:ce:fd:8d:ae:60:b6:e6:5f:f7:b3:13:c7:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:47:F5:1C:72:AC:3F:80:E9:75:B0:2D:99:A3:03:5A:00:19:A4
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/D1F52FFE633911EEA1DD8734C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:01:44:62:8e:70:09:53:46:db:b3:9f:bc:58:f0:9a:da:20:
7d:9a:95:87:ef:99:5a:dc:22:8a:79:c0:cb:cb:d2:ff:0d:de:
e6:be:00:9c:a3:c6:38:6d:06:f7:b8:d7:88:38:34:52:0f:54:
64:a2:ef:4f:71:39:f0:3f:96:46:ea:cb:9c:2d:23:4b:d7:db:
c4:35:65:eb:8b:22:13:aa:0f:b2:ff:f8:9d:81:a8:ec:ae:31:
ab:3b:c8:2b:ad:9f:74:52:12:b4:bb:92:9e:f0:5e:bd:f4:5a:
ee:67:56:f9:3b:22:85:11:e2:44:c6:51:ad:25:67:39:a3:8b:
5a:c0:f9:a0:ac:86:00:f6:ea:ab:57:5f:49:0a:d4:43:e1:98:
13:eb:dc:36:26:f7:00:d4:bc:93:3b:be:e5:82:15:31:56:28:
41:28:01:b0:c4:db:05:36:6a:e4:2d:3c:d4:4e:d6:b8:1a:86:
53:b8:c2:6f:5d:0b:9d:c6:a2:cb:da:b7:57:b7:c3:aa:4b:af:
d1:ea:a6:59:53:ff:72:45:a9:90:a9:6b:f1:26:e6:ef:ee:0e:
fe:66:dc:f3:bf:5c:16:41:bf:8e:c9:a7:cd:59:7a:7e:11:3e:
75:25:6f:0d:1a:cb:73:64:74:be:15:f7:4a:b1:77:ff:a2:a5:
fc:d2:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org