Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/CF6E13A20B8311EABDDD354EC4F9AE02.roa
File: CF6E13A20B8311EABDDD354EC4F9AE02.roa (raw, json)
Hash identifier: pNE/cjy32qFcpkBDfDh6VykHpxrdGefVk9xxD52JBHA=
Subject key identifier: 1E:57:40:5D:77:2A:35:F3:80:27:3C:CC:92:2C:CA:74:BD:DB:AA:61
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 0D44
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/CF6E13A20B8311EABDDD354EC4F9AE02.roa
Signing time: Mon 21 Feb 2022 19:05:43 +0000
ROA not before: Mon 21 Feb 2022 19:05:43 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 135413
IP address blocks: 103.132.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Feb 21 19:05:43 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6213e287-04dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:c3:1c:56:6a:e6:0e:f7:07:b9:0e:e4:f3:
e8:be:a7:35:c6:7f:9e:64:9a:af:a3:71:46:14:c2:
8f:65:4a:a9:68:47:e8:b4:fe:9e:77:fb:f9:40:74:
f5:7a:ef:63:65:b0:50:ee:2c:41:b7:23:fe:38:4e:
ed:81:c2:98:60:fb:b0:20:24:db:9d:09:8e:c4:f3:
85:28:80:1f:ba:c0:5a:43:ee:63:0d:a6:8d:89:e2:
61:62:c4:23:8c:1a:c2:7a:43:36:dd:2c:2e:86:6d:
ef:7b:1d:ee:3f:a4:93:bb:69:24:b1:6c:07:5c:e6:
38:03:df:0d:e0:d1:56:fc:01:dd:49:70:e6:65:25:
ad:d7:e1:b8:14:5e:ce:16:2f:ad:a2:28:d8:e1:df:
9f:d8:38:87:3d:d6:d6:77:6b:cc:3a:7b:40:d4:74:
2c:88:16:65:39:eb:bc:54:38:01:71:79:8c:d3:e8:
16:0d:fa:d5:1b:a3:fe:db:cf:2b:66:98:fb:f5:b3:
6f:59:8f:db:15:3c:ec:9f:4a:92:04:12:23:a6:69:
62:27:92:2f:2b:0b:3e:07:3f:e1:28:93:87:1e:f1:
0d:c0:68:58:b5:96:c1:fd:1f:1e:4c:d9:49:2e:d8:
23:c5:93:1b:d8:a0:c5:77:48:bd:5d:b2:80:9d:0d:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:40:5D:77:2A:35:F3:80:27:3C:CC:92:2C:CA:74:BD:DB:AA:61
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/CF6E13A20B8311EABDDD354EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:30:13:9a:72:7f:56:2a:33:23:fa:87:d7:e4:a7:46:38:5b:
67:92:3a:d3:b4:34:98:6a:19:45:3f:0a:5a:19:ea:ae:21:5b:
16:86:f0:5d:c9:b8:fe:da:1c:d4:42:05:80:e1:02:2e:40:b3:
db:66:73:10:1a:f0:34:70:c0:96:d6:ba:22:33:07:75:58:ec:
03:c7:07:55:41:be:fe:86:ad:25:e8:8d:29:6f:90:82:15:51:
97:0c:a0:93:8b:22:7f:f7:93:f9:80:ae:94:29:5c:ec:7f:9c:
11:1e:54:6e:52:cb:04:6e:fb:1b:c9:98:8a:69:fd:87:28:ad:
18:7a:08:3c:48:8e:8e:1f:f4:8c:53:e4:3d:e9:8c:b0:fe:4e:
86:3c:b5:eb:71:7c:27:e4:c7:30:5d:2b:70:c1:9b:9e:7e:dd:
4e:94:86:81:51:b1:a2:a3:89:89:f7:94:d4:65:c2:3c:c7:45:
f1:0c:38:c6:5a:39:72:65:17:9e:12:7e:a8:ef:84:45:3a:a0:
f8:cf:c4:13:54:65:55:d7:99:b0:37:2d:c3:b5:fe:1f:f5:40:
3e:73:a4:c6:05:3f:62:54:cf:77:24:7c:5e:d0:e3:85:2e:a2:
df:ef:16:46:4e:ff:28:18:12:13:f3:b9:c0:8a:e3:d4:d9:36:
39:96:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org