Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/431248C460B811EC9B0F7446C4F9AE02.roa
File: 431248C460B811EC9B0F7446C4F9AE02.roa (raw, json)
Hash identifier: UUrbgu5eZxVC960VxvYPprfPPS3E+UbFSSCVEuacThQ=
Subject key identifier: 1F:02:AA:D6:C2:15:80:B5:8B:1D:7B:31:06:A4:0B:EE:A2:27:16:C8
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 02
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/431248C460B811EC9B0F7446C4F9AE02.roa
Signing time: Sun 19 Dec 2021 10:41:46 +0000
ROA not before: Sun 19 Dec 2021 10:41:46 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 141465
IP address blocks: 103.161.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Dec 19 10:41:46 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=61bf0c6a-9a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:30:82:f8:66:6b:a1:b1:43:94:0d:6d:ba:
f3:f5:57:93:d6:32:2f:ad:d6:62:a5:ca:fc:2a:f7:
13:d2:fc:cb:e6:39:05:75:33:d2:17:af:af:6c:f4:
b9:1a:12:0b:d9:fc:89:87:45:b8:a9:66:c6:7f:17:
2c:a6:6a:06:3a:9b:4f:08:e9:18:d1:d0:9f:46:c9:
a8:a4:02:4e:0d:42:2b:0b:2e:00:e0:b4:43:2a:81:
83:3b:59:dd:38:59:1c:5b:3d:b9:69:63:07:76:fd:
1e:10:9d:1a:0c:51:17:79:38:bb:b4:f6:1e:31:fb:
7a:84:a6:8a:c7:49:d9:d0:18:9e:1d:03:56:9a:74:
06:22:22:0d:9c:b1:d1:9b:40:44:57:a4:4b:47:9b:
d9:c3:ef:4e:36:4c:79:dd:2b:4b:27:10:c9:69:ee:
48:38:b0:a9:ed:ae:74:2f:ad:9c:57:d1:70:f1:c5:
24:4a:39:15:15:1d:37:d8:82:ba:40:5f:3a:ab:15:
b3:44:1c:9a:58:a1:50:62:2c:5c:1a:ca:45:75:1d:
f9:42:73:89:11:78:09:f5:61:0c:da:a9:e4:c3:0f:
87:28:ee:e9:4f:1f:90:c1:6e:94:c1:9e:5e:25:41:
b9:f3:ba:e3:6a:cf:c2:80:7a:5d:6f:b8:b5:8f:50:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:02:AA:D6:C2:15:80:B5:8B:1D:7B:31:06:A4:0B:EE:A2:27:16:C8
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/431248C460B811EC9B0F7446C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.214.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e0:c2:e2:29:16:af:e8:e2:ef:b1:79:f0:bd:5d:b2:84:f2:
24:d5:b6:0a:df:b1:25:c6:e6:30:f2:9a:59:90:d9:51:d6:81:
97:51:79:07:e4:6c:37:f2:e8:6f:1c:7d:1e:37:d9:1e:b9:a7:
00:24:d2:2c:b2:63:ee:ad:aa:93:99:c0:43:28:16:15:34:fc:
da:76:41:e2:18:b2:c2:8d:27:c4:74:c3:35:dd:71:1e:6a:65:
7e:60:60:42:34:4b:cc:84:85:60:59:ec:8c:31:0f:8a:c0:83:
c5:66:b8:ed:08:24:cd:40:fa:8a:b5:e4:e4:15:fd:db:46:4f:
b5:22:fb:17:52:4b:17:3b:9c:ac:bb:41:a2:40:b8:72:03:f9:
e0:78:45:ab:e5:1a:a1:e0:23:fa:c5:2e:03:cd:38:14:d7:3c:
51:01:9b:44:34:18:3e:34:46:25:17:74:ea:0e:ee:85:65:83:
b4:04:ec:d5:f2:23:ff:b2:8e:5e:d3:17:52:fa:87:61:69:bd:
ec:df:2a:87:4f:74:09:2b:a3:c3:84:da:9d:3d:6d:93:41:24:
2d:c5:b2:36:e7:2a:e7:a8:29:df:8d:c4:e5:75:1c:b0:0e:a5:
84:0f:61:b0:42:da:5e:5f:de:63:0d:d9:62:7f:04:de:4f:53:
9e:7f:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org