Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/12DF60508D3211ECA1CF9913C4F9AE02.roa
File: 12DF60508D3211ECA1CF9913C4F9AE02.roa (raw, json)
Hash identifier: BclS0OD/3L8bwYAHP+ICB7KzfCK0HS0UxqSNEHWXe10=
Subject key identifier: 60:79:99:40:57:2C:A0:98:2A:46:FB:03:6F:B5:92:C2:53:59:8B:44
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 118C
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/12DF60508D3211ECA1CF9913C4F9AE02.roa
Signing time: Thu 14 Apr 2022 06:04:34 +0000
ROA not before: Thu 14 Apr 2022 06:04:34 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 135106
IP address blocks: 103.209.124.0/22 maxlen: 22
103.209.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4492 (0x118c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Apr 14 06:04:34 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=6257b972-a4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:b7:b0:15:36:bc:af:d6:6c:4d:1e:4d:0e:
52:30:7e:35:8f:91:ef:2e:01:44:a2:a4:31:46:dc:
bb:34:83:92:a2:b3:41:06:33:89:0c:91:0e:a7:c9:
83:0c:1b:f9:7a:aa:34:d7:ca:0f:ef:b5:21:43:a5:
12:8f:b6:67:e5:8e:33:96:1f:5c:34:a0:2d:62:27:
8c:f4:12:41:b3:48:d1:ae:a5:8d:f5:2b:27:68:2a:
ee:34:e5:40:0b:d0:3f:7b:47:c7:cd:93:b2:28:32:
59:aa:98:90:45:ad:d1:01:20:24:c2:3b:16:37:2a:
b8:aa:86:f6:83:24:ba:70:ef:05:99:73:f5:f8:dc:
31:93:0e:9e:21:e8:e3:b7:45:4b:ed:ce:70:3e:79:
74:51:6f:43:98:97:23:50:f7:ff:09:a8:db:56:bb:
80:1b:98:30:cc:74:ba:5f:ce:15:b5:07:90:66:56:
5a:c1:07:2d:ea:93:58:c1:39:e0:5c:9b:eb:c1:d8:
35:eb:5e:69:61:22:b7:f9:50:5c:41:e7:19:02:2c:
82:f6:50:fb:dd:00:43:44:7e:84:d8:23:ef:94:11:
ba:7c:bb:3e:e3:76:f3:92:14:ac:6c:24:be:10:0f:
94:8b:32:20:d5:db:b5:97:cd:aa:e1:ac:da:e5:10:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:99:40:57:2C:A0:98:2A:46:FB:03:6F:B5:92:C2:53:59:8B:44
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/12DF60508D3211ECA1CF9913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:16:a0:61:b3:27:11:eb:b7:91:ba:92:7a:1c:a1:b9:49:79:
ce:82:13:b4:fa:51:a2:ac:ec:6a:d1:ef:ea:8f:99:6b:60:53:
5b:d8:e5:e4:fa:fa:57:ec:50:d7:fc:cc:48:86:bc:3b:91:39:
f7:4a:fc:b0:a6:44:b8:0d:98:62:fd:e3:47:25:56:ef:c6:c7:
ce:35:17:24:e2:14:f7:5c:3d:da:c6:22:12:55:54:2f:94:50:
fa:e2:cf:8a:b4:53:75:98:08:ae:76:95:eb:4e:64:cf:2b:fd:
dc:f3:d5:cb:06:45:03:17:e4:86:dc:7f:28:6b:f3:de:3a:31:
45:73:59:27:bb:b3:84:c7:64:83:25:72:84:24:a6:17:6e:c8:
2d:55:98:ce:2e:21:29:69:ef:02:5a:3f:af:9c:eb:92:80:17:
d5:3a:76:a4:d2:b3:5c:79:01:9a:b6:cf:cb:e7:3c:02:c4:93:
f3:e7:e7:52:0c:1d:92:01:96:a2:fe:66:14:01:51:a4:66:f0:
23:72:f8:23:01:4c:55:d2:9e:d4:80:da:f6:14:a8:b2:37:bc:
13:bd:21:8d:72:62:58:4e:46:fe:61:20:70:fc:9f:2e:c9:c2:
45:c5:8a:80:2a:7f:18:f5:1d:92:8c:e2:3b:6d:05:85:1a:1c:
37:2a:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org