Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/2967F4F4671611ED88669B3FC4F9AE02.roa
File: 2967F4F4671611ED88669B3FC4F9AE02.roa (raw, json)
Hash identifier: W9pj9R4sArRKUlil4u2ZwejSy4B8dC2o0N0sQkwidVs=
Subject key identifier: 2E:6E:CD:6B:F8:80:97:92:65:1E:21:C4:A4:68:EA:8A:C7:F5:24:E3
Certificate issuer: /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial: 04
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/2967F4F4671611ED88669B3FC4F9AE02.roa
Signing time: Fri 18 Nov 2022 07:54:00 +0000
ROA not before: Fri 18 Nov 2022 07:54:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 141681
IP address blocks: 103.41.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Validity
Not Before: Nov 18 07:54:00 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63773a18-a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:e6:db:df:26:36:48:31:fc:40:32:b7:a3:
c4:7b:41:fa:f7:8f:9b:cd:3c:51:c4:66:4c:7e:22:
4d:7c:86:ba:c8:a6:57:c1:45:18:58:db:c5:9c:71:
be:79:39:cc:b3:40:d7:51:c2:c5:87:15:e8:39:a6:
b9:2e:28:b6:85:48:e9:63:a5:c5:1f:ac:32:b2:ec:
01:2e:f8:f4:33:00:3f:df:27:50:b5:13:79:c0:c2:
c9:b4:6c:90:77:63:96:9b:0d:57:2d:ea:d8:d1:1b:
d4:6e:80:c9:c9:55:89:7e:24:6e:0c:5d:4f:9b:bb:
12:26:e8:b7:50:a3:ac:32:cb:9a:3e:3a:43:30:ec:
9b:fd:f9:3c:79:9e:a1:b3:78:34:63:f0:87:67:46:
a7:7a:3f:37:c9:78:54:a9:77:7e:f6:f9:bf:a1:17:
12:ad:ce:ee:fc:88:e7:2f:93:a7:8c:26:85:e7:f3:
02:5b:00:e9:90:45:dd:b8:f8:0e:5a:d1:37:bd:02:
fe:31:1e:be:d7:d1:ed:02:bb:67:b4:a0:ed:36:a9:
88:57:31:93:46:27:de:f4:10:b1:9e:29:ae:61:ff:
4a:36:89:99:c6:59:d9:62:8a:7f:23:07:e6:b7:ad:
cc:86:f8:b3:06:8c:08:e0:08:c7:8f:05:eb:81:25:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:CD:6B:F8:80:97:92:65:1E:21:C4:A4:68:EA:8A:C7:F5:24:E3
X509v3 Authority Key Identifier:
keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/2967F4F4671611ED88669B3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.92.0/23
Signature Algorithm: sha256WithRSAEncryption
54:aa:62:fc:37:5c:a3:16:b2:38:2a:43:0b:c7:69:b0:65:ff:
15:d0:b0:09:3f:25:ad:51:8f:81:74:8a:96:ae:be:41:68:7f:
32:65:63:25:bf:0f:ce:00:28:ce:86:b9:08:76:05:6d:5b:c6:
9b:6b:72:6b:a0:ea:6d:9a:e7:c6:9e:4f:d4:15:81:b6:89:10:
66:4c:ce:79:d2:70:33:02:fe:29:bc:98:d2:5c:f9:7a:6c:c7:
dd:c6:77:0d:80:41:a4:36:2a:f0:e2:64:2c:4e:3f:1c:30:b2:
87:87:78:b6:b9:74:52:05:d3:9a:95:44:34:c3:6e:ee:a8:8d:
4d:c8:cf:9d:93:91:76:0c:79:a2:a6:d1:70:c5:ea:d9:91:4f:
ef:08:f8:75:dd:8e:af:da:de:cb:a4:6d:cc:2b:b2:6a:ae:76:
3d:5c:57:80:6b:4b:5e:37:9b:20:fe:b6:f4:dc:06:71:46:49:
69:56:2c:4f:ff:25:14:93:1e:16:ba:b6:c2:b6:fc:b4:4d:a2:
35:1a:25:f0:0b:61:95:de:a0:27:45:af:bd:5e:c7:a5:52:48:
c3:7b:94:24:de:d7:ac:b3:6b:8c:66:e9:bb:81:11:cc:62:bd:
4b:98:4e:12:29:72:ce:ca:b9:50:c6:a0:59:ad:99:ab:93:34:
8f:8a:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org