Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/033C71847BBB11ECACE4B512C4F9AE02.roa
File: 033C71847BBB11ECACE4B512C4F9AE02.roa (raw, json)
Hash identifier: 62/6/5oOV3EkKz8QjZraUfzJwWDW9m3gYlcBo02DaUQ=
Subject key identifier: 97:01:F8:B3:D1:68:60:48:03:18:14:D9:70:DF:29:9C:7D:E3:76:CF
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 052B
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/033C71847BBB11ECACE4B512C4F9AE02.roa
Signing time: Sat 29 Oct 2022 00:30:30 +0000
ROA not before: Sat 29 Oct 2022 00:30:30 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 23734
IP address blocks: 103.101.0.0/22 maxlen: 24
2401:c740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Oct 29 00:30:30 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635c7426-b044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:b2:9c:d3:e1:b9:9b:1e:d8:12:47:7e:59:
64:1c:e6:85:67:72:13:02:de:69:56:25:06:f6:e3:
3c:d8:16:5f:38:42:1a:0a:45:37:75:e4:c5:31:ff:
78:92:98:4c:68:49:e5:f5:4e:9d:4a:b6:f5:99:ea:
4e:ce:36:d7:53:ac:60:30:f0:04:e5:89:6e:bd:cd:
94:d6:f6:22:f6:56:15:53:3a:5e:a6:a7:e5:c6:68:
fb:a1:25:58:99:0e:22:5d:04:f9:4d:3e:8d:a4:99:
39:b4:68:4a:90:fc:22:78:14:90:26:58:fd:b2:06:
32:52:5a:06:3b:1a:f5:df:31:e4:f2:74:4b:42:61:
29:90:30:17:55:c8:5e:db:59:1f:3b:18:93:01:e4:
ed:24:d1:b2:01:b3:33:4c:57:c3:d0:c2:11:17:25:
a4:84:00:38:87:3d:8a:22:42:56:f8:5d:0b:a9:14:
75:af:86:71:3c:39:c7:90:a3:c2:15:8c:70:2d:59:
49:5d:e7:a2:db:01:e2:b9:6c:19:ed:ec:24:dc:75:
26:be:e5:ec:f7:5e:40:73:03:d8:d2:7e:0a:9b:c0:
17:18:58:8a:f2:0b:cb:e2:fd:55:4b:c5:53:f1:cb:
db:7c:b6:77:62:ee:0d:b6:e9:cc:b2:55:b2:16:04:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:F8:B3:D1:68:60:48:03:18:14:D9:70:DF:29:9C:7D:E3:76:CF
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/033C71847BBB11ECACE4B512C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.0.0/22
IPv6:
2401:c740::/32
Signature Algorithm: sha256WithRSAEncryption
2e:25:a6:bc:79:7f:ff:ba:f1:94:28:b6:da:0d:a0:cd:39:43:
7e:e8:96:2d:4f:a0:12:09:24:14:cd:ad:df:73:3d:ec:bc:1b:
9c:5b:46:02:81:ad:f0:6d:13:cc:c7:52:ee:50:87:05:6a:3b:
a9:49:56:64:b8:33:35:d3:76:d3:e8:b4:59:80:ae:1d:f7:b3:
63:2c:11:75:e6:46:3e:0e:c8:f6:0e:e0:99:33:61:83:2a:42:
e4:04:47:c9:e2:e0:01:85:46:f8:1a:6e:27:c9:06:77:d0:d5:
3a:1e:0c:59:80:80:fb:4e:49:7e:f1:cd:0a:8e:2a:2c:60:8e:
e1:31:b6:11:fc:80:28:a8:81:91:32:07:a7:ec:b0:08:9b:40:
bd:5a:6d:7f:56:58:02:d3:ab:a0:83:5d:ce:9a:3f:08:a0:f9:
d3:da:52:61:d7:88:7c:84:2c:e5:4b:fd:5e:45:b8:28:74:a5:
cf:bc:1c:30:c4:4b:13:cf:10:d3:77:13:f1:d8:47:69:8d:35:
ec:00:58:b3:fa:76:7c:92:9f:a5:bf:dc:59:a5:36:75:13:1e:
b1:49:db:0b:c7:04:41:5a:da:c1:43:64:79:c8:5f:03:8f:ba:
73:e5:33:9c:f2:9a:84:03:66:13:fb:30:2b:8f:34:42:40:18:
5d:25:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org