Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/F0C8855EBDBF11ED9E574911C4F9AE02.roa
File: F0C8855EBDBF11ED9E574911C4F9AE02.roa (raw, json)
Hash identifier: Ret74irFOZql/duiCm+raE0re7fPwnLD/Xb1lv8Uo9s=
Subject key identifier: 1F:6C:4C:5F:CA:88:53:27:B8:63:88:99:57:78:4A:B8:92:32:92:D6
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0D50
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/F0C8855EBDBF11ED9E574911C4F9AE02.roa
Signing time: Wed 08 Mar 2023 14:46:00 +0000
ROA not before: Wed 08 Mar 2023 14:46:00 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9833
IP address blocks: 103.232.212.0/23 maxlen: 23
103.232.212.0/24 maxlen: 24
103.232.213.0/24 maxlen: 24
103.232.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Mar 8 14:46:00 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64089fa7-9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:5c:2d:6d:1c:ea:c8:6d:f9:8e:68:de:c9:
63:36:cb:8a:09:64:4f:42:49:15:9f:98:b8:da:fd:
0d:1d:7c:e4:2a:90:c5:cb:33:3b:db:92:65:e0:85:
35:a4:33:04:7d:f6:40:cf:72:0a:fe:9d:16:50:d7:
f5:72:f9:51:b2:63:d7:08:7d:6b:2c:12:38:77:73:
ae:ef:9e:41:d3:3b:f8:57:e8:c8:65:53:ab:d1:2d:
49:d5:01:ed:02:39:2f:0f:a6:0f:66:21:f0:02:3b:
b7:71:91:99:f8:f6:79:a6:4d:94:1d:bc:98:be:c2:
92:d5:92:d7:04:41:d4:53:5d:2c:83:f4:cf:48:80:
b1:4f:09:c5:40:f4:dc:75:11:58:b7:85:4f:88:c0:
21:61:f5:bd:94:f3:7c:c9:17:4a:e3:39:97:9e:84:
b5:79:56:1d:b4:f2:85:c0:d7:ab:3e:54:be:c8:82:
b1:ed:45:b2:02:ce:72:aa:7e:f7:7f:1d:a9:27:dc:
b7:5b:8c:bb:19:14:fa:91:d8:a6:1b:c0:a7:08:b0:
52:70:6a:8f:ae:26:4f:c3:c7:01:c6:c1:de:c8:8e:
a8:87:c4:b2:57:26:b9:26:4d:5f:a8:7b:e3:e4:bd:
87:ae:eb:1d:12:5b:db:60:34:47:a6:1f:ef:92:00:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:4C:5F:CA:88:53:27:B8:63:88:99:57:78:4A:B8:92:32:92:D6
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/F0C8855EBDBF11ED9E574911C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.212.0/23
103.232.215.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fe:27:36:14:65:4b:0c:1f:9d:13:36:55:b1:d5:39:a6:e3:
69:10:3b:cc:d2:45:b5:d5:a9:ff:4a:75:00:a4:58:7a:a2:f1:
ea:00:cf:4a:cb:88:d2:a0:14:17:18:1b:32:da:8b:1a:4b:cb:
6d:8d:80:61:41:b8:19:1e:61:94:05:d7:05:e0:2d:27:ce:bb:
e2:68:3f:37:1b:9a:af:06:d9:68:52:88:e6:64:44:24:1f:cc:
aa:63:20:df:2e:bf:8e:ab:eb:dc:29:a9:dd:b5:b3:a2:4d:eb:
21:91:33:ad:e2:f6:c0:4a:ad:31:ee:e6:2f:54:eb:5c:39:bf:
76:b6:0c:28:c9:fc:34:82:8f:fd:0d:93:fc:d6:03:13:1e:7f:
b6:af:f3:ee:da:d3:57:b2:52:65:c8:a3:9d:7b:da:f3:2d:c1:
17:33:67:82:28:87:1f:2e:81:9a:5c:e9:d1:ed:e1:fd:b0:1f:
01:7e:db:48:a4:df:f2:87:9c:66:a9:6c:21:66:83:95:8f:74:
77:12:66:0b:17:5f:a1:6c:d5:ef:c8:01:8f:14:21:35:59:f9:
4a:9e:8a:e1:29:e0:ae:32:80:39:48:c0:e2:94:bf:e5:c8:0d:
f0:18:31:20:30:b9:ce:50:38:9e:de:25:f0:95:fd:74:95:5c:
a4:ef:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org