Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
File: 1A59547A2DEE11EBA42B2973C4F9AE02.roa (raw, json)
Hash identifier: X6sTihwrtsTq6TMmAUVOYGELRFW1fcrjefJb67zvCgw=
Subject key identifier: 20:83:46:07:21:7E:D6:96:76:CD:A1:39:7C:1C:56:CF:0F:D8:FA:54
Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial: 0998
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
Signing time: Tue 21 Jun 2022 19:59:18 +0000
ROA not before: Tue 21 Jun 2022 19:59:18 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 212450
IP address blocks: 103.249.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Validity
Not Before: Jun 21 19:59:18 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62b22316-562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:80:2d:d9:eb:4f:a5:ff:a7:73:66:20:a3:
b1:6b:08:5b:cf:e0:a4:68:af:a9:25:0d:e1:e0:c4:
51:be:6b:8c:48:ad:42:92:2e:b2:f2:26:cb:52:06:
e5:f3:76:ff:c9:c5:29:6a:b0:6c:db:77:5b:b8:78:
dd:31:c4:6b:26:ed:8b:a3:f9:e8:db:02:36:ae:a1:
88:57:7c:dd:62:45:53:41:f9:2b:7f:df:51:92:03:
7d:53:b6:a2:9f:f0:38:35:b6:8d:83:ea:d4:99:5e:
9c:fa:5b:5b:eb:b2:7f:b0:17:4e:e4:f5:14:4e:07:
0e:24:e0:94:38:2a:dc:fd:65:a2:33:21:98:66:09:
32:2e:ee:ad:9c:6c:04:f3:40:f2:6a:b7:a8:40:ce:
9b:3a:28:e9:d2:7a:03:8d:8f:39:69:06:78:b4:e3:
8a:56:25:b7:27:76:4b:ad:68:24:5f:a9:2b:9c:97:
fb:88:d5:96:f0:29:8f:c9:5c:13:d1:7f:5e:01:9b:
b6:76:c5:33:dd:1e:dd:58:dc:70:1a:ac:53:90:49:
c9:26:af:f0:4c:e1:89:d8:ed:c4:47:a7:cc:c6:36:
a2:64:05:e9:af:de:15:cf:07:d7:5d:be:3f:7b:9d:
38:14:ea:e0:c4:00:5c:3a:fc:ae:22:a5:d3:5c:73:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:46:07:21:7E:D6:96:76:CD:A1:39:7C:1C:56:CF:0F:D8:FA:54
X509v3 Authority Key Identifier:
keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.71.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e7:03:9c:61:0c:aa:55:0e:3d:67:0d:c3:7f:5f:10:3a:ac:
54:ab:fc:1d:70:16:3d:72:1a:dc:e4:d0:70:0e:c4:9b:d6:7b:
23:55:8b:d9:f0:88:a9:62:ae:19:b7:84:2b:fb:cf:d3:c5:ee:
db:3f:61:8a:33:0e:1a:97:06:fa:16:a3:14:c4:cc:ed:19:f7:
ca:a3:79:2b:f6:20:0c:8a:5b:4b:90:b7:e5:29:0b:4c:f5:9e:
c6:4f:8a:73:86:7b:44:df:b8:12:6c:24:4f:70:81:a8:ea:1e:
eb:34:e6:36:ec:ce:43:a8:d9:1e:45:c2:b3:e8:bd:36:b3:95:
ab:9d:ee:53:31:6c:be:d5:af:d0:8d:bd:98:de:36:9b:b8:2c:
15:0f:09:dc:1f:26:35:45:5c:c8:48:d5:ac:9b:62:b6:8d:0c:
75:36:13:7b:9e:56:8d:cb:a9:6a:c1:28:b9:0a:91:96:50:80:
8d:1c:c9:48:59:14:57:48:72:1b:45:0b:94:43:c9:81:5e:91:
8c:11:71:92:67:77:eb:44:d1:24:f3:e6:dc:87:5f:8c:aa:af:
57:39:c3:16:fa:60:56:b0:d9:06:0d:58:f3:c3:0b:0f:ff:37:
0d:c6:a2:b5:7c:ad:5d:b1:bd:73:dc:4b:28:de:8f:24:a1:17:
fe:14:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org