Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/1A61C972E2CD11EB940F2E2DC4F9AE02.roa
File: 1A61C972E2CD11EB940F2E2DC4F9AE02.roa (raw, json)
Hash identifier: xgw3sHa8a8Em+SDeE9BZZcuUHe05dhbr72Soz4uxA7E=
Subject key identifier: FF:5C:79:D2:48:04:06:0F:00:7F:F1:F1:39:66:D6:67:F6:D8:BE:5F
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 12FF
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/1A61C972E2CD11EB940F2E2DC4F9AE02.roa
Signing time: Fri 20 Aug 2021 05:33:39 +0000
ROA not before: Fri 20 Aug 2021 05:33:39 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 31732
IP address blocks: 103.100.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4863 (0x12ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Aug 20 05:33:39 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=611f3eb2-462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:03:d6:f5:2a:7a:c6:d9:a0:d5:cb:b9:be:
d2:89:63:f8:02:9a:2e:75:87:7c:96:22:ae:03:23:
9a:f9:c6:eb:ac:40:85:a1:ab:da:79:4c:cb:61:e1:
23:93:4d:68:e6:a9:0c:4c:51:17:42:9b:f9:0a:73:
d1:0b:29:0b:60:c8:55:a0:e5:2b:26:13:33:3e:85:
76:85:1b:e6:5d:27:04:1b:4b:e9:f7:1b:b1:aa:d3:
85:9e:27:db:47:1a:97:bb:cd:dd:3e:26:40:5f:b0:
7b:eb:ef:31:8a:dc:bf:ee:7d:79:c4:3f:0f:f7:fd:
dc:6b:f9:fc:c9:72:d3:e8:90:e9:ec:92:7c:cf:43:
32:5c:63:ef:f8:1c:e6:29:b2:31:fd:f3:67:a8:24:
b5:3f:94:5c:8d:46:2c:07:03:e3:28:0e:3a:5b:26:
9d:6f:c7:bb:f2:cb:7e:e7:ac:37:b4:cc:e8:9e:d8:
fe:5c:da:03:57:99:2e:38:40:bb:c7:7a:f6:69:c6:
f1:6d:62:09:0b:9c:61:fc:e1:18:85:a4:7f:2e:a0:
9e:e1:35:02:93:6e:cd:7f:59:97:2b:a3:4b:4d:7a:
8e:1d:d2:d0:ee:c5:16:94:fe:34:93:e1:7b:4b:b6:
1e:05:38:ed:5b:c4:6c:bf:48:b4:45:83:8e:0a:6a:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:79:D2:48:04:06:0F:00:7F:F1:F1:39:66:D6:67:F6:D8:BE:5F
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/1A61C972E2CD11EB940F2E2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.120.0/22
Signature Algorithm: sha256WithRSAEncryption
07:a7:e3:b7:e8:29:ea:2c:7e:db:c7:02:9c:23:62:34:c5:fd:
4e:0d:f3:ee:e2:f7:d2:bf:b6:c5:e8:d3:48:cf:2f:68:d5:3d:
7e:54:2f:bf:58:06:9e:46:26:a5:fe:17:44:ef:3b:d1:09:05:
c1:d2:92:a7:dc:b1:46:78:f9:bd:4a:83:d2:03:17:a9:b5:e9:
fe:72:4d:4e:25:e0:df:7c:2c:c2:0d:7a:1a:ba:1f:50:92:d5:
e3:b0:54:b4:06:64:43:86:ec:bf:5e:5e:c6:cb:67:28:45:d5:
dd:d3:e9:ab:96:6c:ed:03:c1:ae:c2:30:b5:54:fe:ee:e1:27:
7e:3c:1c:27:ba:51:63:a3:75:c6:6e:e0:30:50:30:64:57:9d:
1f:bd:b1:05:59:09:1e:49:9b:2e:b5:17:d9:29:ff:25:8d:b7:
8c:53:71:6d:4b:8b:e4:e1:3d:c8:d3:e9:a3:0b:a7:12:28:a9:
2c:49:a3:fd:f1:28:9a:39:48:54:5d:f9:4d:8a:ff:f1:22:fb:
8c:9f:9b:7c:d9:4c:d1:40:d3:83:3e:39:36:94:72:6b:43:db:
1a:a7:a5:64:19:e2:86:fd:56:4c:40:00:b7:08:93:1e:73:0f:
15:22:13:47:a0:ce:e0:59:47:66:54:9f:33:c3:02:44:fe:ef:
85:b1:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org