Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/EE41CBE0DE8811ECB96DAA83C4F9AE02.roa
File: EE41CBE0DE8811ECB96DAA83C4F9AE02.roa (raw, json)
Hash identifier: lgYmAFt6ozgZ5PWJYxF8unHmqNZiake26VBrmLMfL20=
Subject key identifier: CB:19:62:EF:9B:5A:83:BE:AD:B2:88:55:40:27:50:8B:91:5F:23:6A
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 08F5
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/EE41CBE0DE8811ECB96DAA83C4F9AE02.roa
Signing time: Mon 30 May 2022 08:50:22 +0000
ROA not before: Mon 30 May 2022 08:50:22 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 137570
IP address blocks: 103.113.208.0/23 maxlen: 23
103.113.208.0/24 maxlen: 24
103.113.209.0/24 maxlen: 24
103.113.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: May 30 08:50:22 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6294854e-57ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:66:67:43:b6:04:4d:65:3b:f2:be:c7:7d:
39:d4:0d:d0:9d:ac:78:62:6b:e7:1b:a9:28:24:ca:
ac:7e:06:51:89:02:fe:fa:78:21:64:ca:90:c1:0a:
da:49:4c:16:a7:46:e5:a0:76:cb:de:ff:3f:42:4f:
ae:12:fb:de:f8:8f:56:60:d9:4f:6b:dd:5e:61:06:
cd:4e:23:27:1d:db:66:dd:4c:bd:b3:41:57:f2:21:
e3:65:c7:b2:d3:51:c2:e5:de:70:f6:3a:e3:72:47:
d9:87:75:2a:69:1d:30:ab:36:16:93:ec:e0:bf:20:
3a:87:58:b4:dc:f1:49:b4:85:3f:bb:4c:82:8c:4c:
0e:9c:a7:d0:0b:68:d5:be:f0:a1:99:36:ee:fa:6e:
85:58:c0:67:58:39:3d:09:a7:57:52:2a:31:af:77:
85:3e:9f:40:0f:5c:e3:1a:ba:5a:a8:3f:7a:8b:a7:
b2:25:c8:1b:14:75:75:12:0c:b2:c5:d0:ec:a3:da:
96:bd:58:40:fd:c2:7e:b6:83:a5:f1:6f:15:78:3f:
06:ac:a8:e2:1c:4c:6b:cf:6d:cd:f5:d2:66:91:56:
fd:02:03:2b:7f:47:db:7c:64:18:01:82:60:ed:97:
ea:ad:15:7d:72:6d:7f:24:5b:3f:8c:72:7b:01:6d:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:62:EF:9B:5A:83:BE:AD:B2:88:55:40:27:50:8B:91:5F:23:6A
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/EE41CBE0DE8811ECB96DAA83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.208.0-103.113.210.255
Signature Algorithm: sha256WithRSAEncryption
85:b8:e9:dd:fd:f5:dd:68:bc:18:ae:ce:d1:03:18:a9:80:f8:
25:b3:da:8e:4b:f4:e5:11:6f:50:c0:e6:60:dc:3c:96:58:17:
00:92:9b:8f:19:48:4f:45:5b:39:ab:1f:4c:13:75:37:f6:1e:
d0:aa:a9:5c:fc:5d:13:9c:8b:b7:3b:2f:63:65:cf:81:74:30:
bd:11:d7:cc:4c:15:6b:c4:d0:2a:66:1b:59:be:ff:12:41:2c:
8a:99:80:82:10:b1:4a:11:60:7b:4f:13:c7:5d:ff:92:aa:7b:
49:06:b2:5b:88:a4:5d:f0:6b:3c:1d:e4:46:7f:c9:49:a8:f9:
78:41:89:6a:f3:99:17:f6:ab:4a:6c:34:ba:ad:38:df:9b:4b:
58:4f:5c:f0:00:80:5a:3a:ca:7a:e1:02:6c:de:8b:a1:f8:ca:
78:fe:4f:f0:0a:47:32:dd:50:d1:fc:0e:50:bd:76:89:36:d6:
89:ee:fd:24:d7:ba:5e:1d:92:93:70:f4:4d:bc:0c:dc:eb:69:
90:0e:61:91:ae:f5:28:a7:08:18:35:eb:67:d4:8f:8d:90:3b:
31:8e:bc:29:e4:b1:a9:e9:b5:2a:d7:b2:d1:bf:b2:89:1e:ee:
aa:0e:d1:6d:0f:4e:20:60:df:a8:a1:40:cc:1b:2c:8c:68:44:
51:2b:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org