Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/14E91042442411EB911D086BC4F9AE02.roa
File: 14E91042442411EB911D086BC4F9AE02.roa (raw, json)
Hash identifier: P3danBUtcbqlmjdpyQLaxkeqU56o9z10YaJ5BWaABlI=
Subject key identifier: 8D:EA:45:47:E0:4F:D1:ED:8E:76:7B:E0:D0:F3:7C:66:A5:5A:06:6F
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 0607
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/14E91042442411EB911D086BC4F9AE02.roa
Signing time: Wed 20 Jul 2022 10:48:25 +0000
ROA not before: Wed 20 Jul 2022 10:48:25 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 137967
IP address blocks: 103.152.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Validity
Not Before: Jul 20 10:48:25 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62d7dd78-6a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:81:5e:f7:a3:1a:c9:f3:c3:0e:10:d1:94:
fc:62:4a:7b:8b:9b:b5:6a:15:df:bc:a5:c7:84:4d:
f1:c6:0d:0d:a5:e2:11:00:e6:1f:54:c8:ff:ce:6e:
fc:72:01:3a:47:82:30:29:d3:5a:32:2e:51:7e:76:
1d:b4:a2:ca:05:b3:29:2b:8b:dd:e5:13:13:60:ed:
74:54:c9:43:51:8b:f1:38:05:2a:7e:6f:a3:48:2f:
fc:a2:2c:05:52:ac:0f:ed:49:03:29:4e:5a:e6:0e:
ac:3b:cb:f7:ba:b1:e2:07:55:f0:3c:a1:a8:50:e8:
39:f6:39:96:23:25:3a:b2:d7:35:08:7d:ea:bc:da:
ca:08:7e:0d:ca:9d:8a:ea:43:19:fa:40:e1:6e:b2:
c8:02:b3:17:07:cc:0e:9f:5a:77:bb:65:c3:8b:9e:
e1:ba:50:2f:23:5e:3b:55:fc:49:ca:f5:c2:2a:2a:
34:b9:41:5f:ce:10:7f:21:60:b7:f4:84:74:52:93:
22:08:c4:c5:da:b3:cc:5c:36:fb:04:32:f9:5d:7c:
56:bd:fe:cc:77:aa:e1:30:86:b5:b3:d1:c7:56:1d:
d0:cb:27:ff:4b:2e:ea:f9:9c:3a:e4:07:69:8a:10:
37:d8:8c:0c:1b:7a:39:0d:72:ad:44:60:a7:85:f2:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:45:47:E0:4F:D1:ED:8E:76:7B:E0:D0:F3:7C:66:A5:5A:06:6F
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/14E91042442411EB911D086BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.143.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3e:ba:6b:c0:5d:a1:ca:e0:a2:f1:cb:26:29:8f:64:ee:87:
31:01:e4:df:3d:98:5e:4b:2b:47:2d:ad:bb:cb:26:97:8e:8f:
10:91:81:63:53:97:74:49:44:32:b1:c0:b0:ae:53:af:04:bb:
2c:39:94:bd:d0:a0:d7:36:d2:df:61:1e:88:ae:7b:98:5e:cd:
22:80:ce:bf:ea:ba:17:da:61:c9:65:de:68:82:ee:34:20:47:
5e:43:61:37:59:b9:33:31:17:52:c5:fe:73:6c:6d:d3:e5:27:
03:1c:0f:76:42:30:26:6e:fa:7e:a5:ec:43:79:4f:96:67:ad:
3b:0f:55:6d:f8:b5:31:28:92:f0:c2:d9:9a:3a:d5:c7:02:06:
0f:51:1b:de:48:28:62:f7:8a:a7:c0:c9:01:89:3f:95:e2:3e:
90:93:09:ee:62:56:d2:21:a5:28:4a:ff:a2:bc:8f:0d:cc:fe:
b2:1a:39:bb:01:e4:10:55:2b:16:d4:94:dd:e5:14:00:75:d6:
93:b8:be:9e:22:2f:bc:e7:ba:03:f6:51:f6:93:83:be:ef:d3:
56:95:cd:7d:36:ec:53:b7:56:81:c3:28:27:4e:eb:d0:f4:63:
fc:80:e9:23:9e:be:2a:24:50:46:56:6c:fc:ca:8f:72:a9:bc:
e4:b6:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org