Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
File: D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa (raw, json)
Hash identifier: ToC94IZFl3fjlk1BN9ccO82BHzizw5cNvnPwCFezm9E=
Subject key identifier: C1:2D:46:4B:7F:85:E0:6F:47:5F:B3:4C:24:8C:04:54:60:CE:B7:E0
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0951
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
Signing time: Wed 23 Jun 2021 06:48:13 +0000
ROA not before: Wed 23 Jun 2021 06:48:13 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 141765
IP address blocks: 103.232.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jun 23 06:48:13 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60d2d92c-2063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:81:30:7c:02:c0:0f:a7:6f:ee:70:38:93:
74:ea:06:0d:ff:5f:06:8a:66:48:9e:14:1e:17:71:
95:ba:35:17:44:f9:7b:41:39:01:34:dd:a9:c1:fd:
ee:76:c2:db:0f:f5:d2:ea:af:3b:87:e4:0e:3b:79:
8e:de:25:2d:46:84:ae:b4:7d:ef:32:70:eb:7a:de:
62:1a:c5:e9:a5:51:84:4b:10:7c:4b:5a:dc:fb:f1:
00:ed:d7:4b:13:04:b9:95:fd:30:45:d4:08:68:d7:
23:bf:d6:36:f6:59:26:ad:dd:4a:9d:79:cd:bb:5d:
05:b2:ac:87:8f:3c:54:fb:ff:57:58:fe:63:9e:1c:
95:f9:b9:c9:42:60:d8:70:db:07:9d:9e:02:17:f7:
c4:75:0d:dc:23:ad:a4:c4:c3:44:7c:ee:52:f0:3d:
d7:ae:62:da:ea:35:71:4c:39:a3:07:6b:33:77:54:
05:79:40:0a:52:7e:80:04:be:a1:0d:d2:5a:8f:a0:
39:1b:a5:be:96:69:a8:7a:82:8f:49:b1:43:52:7c:
d0:2d:4b:c2:f1:46:33:24:c6:ba:70:40:b1:94:28:
95:f0:24:fb:fd:06:e3:29:af:8a:b1:8b:e1:9f:19:
57:a0:c5:11:55:4d:2d:f2:f8:30:73:1a:c4:56:0c:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2D:46:4B:7F:85:E0:6F:47:5F:B3:4C:24:8C:04:54:60:CE:B7:E0
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:78:49:8f:fe:b1:10:cf:02:9c:af:0e:8c:48:66:77:ae:3a:
8f:5c:5a:83:b8:e3:a3:20:fc:06:42:65:d4:54:a8:50:e6:aa:
28:3d:b6:1a:da:ab:e4:f0:3a:dc:11:a8:e3:54:65:80:60:09:
8e:b7:56:61:bf:18:12:89:aa:f5:de:65:21:85:74:d6:91:08:
ef:ff:f7:11:63:fa:7c:a6:88:5f:d5:15:1a:d2:f5:ca:ee:6d:
e8:c4:35:b6:f0:31:af:3b:d2:48:ec:eb:22:27:7a:2a:ce:fa:
77:dd:ef:65:21:54:67:20:a3:4b:57:52:8b:de:18:73:9d:f9:
5e:2d:eb:19:15:fe:3c:be:75:86:1c:98:a2:4a:0e:fa:e6:63:
17:b1:c5:60:1c:8f:b1:bc:80:a0:96:88:20:f4:03:84:b6:3c:
b0:1b:1e:a5:23:39:e0:f2:e2:7d:ae:98:e7:12:2a:b8:70:9f:
00:5a:99:67:f6:98:9b:78:cc:44:a5:5d:04:d9:40:6d:75:ff:
fc:e9:84:aa:44:ae:e3:09:da:f4:d2:18:2a:04:e9:2d:49:6d:
38:81:8f:bd:1f:59:41:c6:ac:fe:f8:c4:63:30:22:e7:ca:bb:
5c:27:2a:79:b3:77:75:66:ca:21:98:1e:58:44:ad:1c:a9:56:
be:6d:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org