Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/57474F1A458411EB8CD1C833C4F9AE02.roa
File: 57474F1A458411EB8CD1C833C4F9AE02.roa (raw, json)
Hash identifier: ZzkizcdTa2KPRsYTskzQt13jBFwSI1XNGwo6E6DlN7o=
Subject key identifier: D1:9E:DD:1D:EE:90:10:2D:9E:6F:A3:20:32:37:82:A9:87:2E:21:88
Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial: 025B
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/57474F1A458411EB8CD1C833C4F9AE02.roa
Signing time: Mon 18 Oct 2021 13:29:46 +0000
ROA not before: Mon 18 Oct 2021 13:29:46 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 134072
IP address blocks: 103.76.112.0/22 maxlen: 24
116.206.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Validity
Not Before: Oct 18 13:29:46 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=616d76ca-9408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:88:4d:5b:7d:3d:61:12:db:d3:84:c9:7e:
b9:14:04:88:de:25:0e:f1:a9:ff:09:12:2d:5d:ac:
d7:01:35:26:eb:a6:98:c3:1f:23:f9:8b:84:3d:a2:
61:71:ff:94:13:71:fe:61:f9:77:6c:db:a0:27:7a:
a7:04:16:fe:d4:71:eb:1b:81:28:f6:ec:c0:c5:74:
a3:c9:fb:e8:d3:a9:3d:31:dd:5c:b5:6d:35:b6:46:
a5:f3:38:5c:f5:0e:f0:8a:70:19:af:be:9a:4d:f9:
d8:1b:3c:31:66:bf:6b:a6:4b:7b:c7:c0:4e:1e:60:
45:d2:17:8e:f9:69:17:4e:55:a0:bc:ad:ab:19:b6:
d7:d4:7f:6b:72:9b:95:af:22:46:6e:8d:36:dd:fc:
28:40:76:48:79:49:d1:d3:e9:2b:42:91:1e:91:67:
30:2e:b2:44:2d:6b:9d:be:f1:82:e1:4b:6f:f6:17:
47:f5:b6:40:cb:16:e3:84:72:90:da:6b:e3:fd:5c:
74:98:a2:20:d5:87:a6:71:bb:06:81:9c:7a:4d:e5:
05:b7:e0:f8:de:3e:03:86:4d:dd:ae:5b:31:5d:3d:
36:98:c4:2f:5d:6f:8a:53:f3:68:cc:97:2a:fa:6d:
84:bd:ee:d0:67:94:8d:68:01:d7:b6:5b:a0:74:20:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:DD:1D:EE:90:10:2D:9E:6F:A3:20:32:37:82:A9:87:2E:21:88
X509v3 Authority Key Identifier:
keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/57474F1A458411EB8CD1C833C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.112.0/22
116.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ec:bb:7d:9f:82:a0:98:2d:83:a7:c0:c8:0f:fa:c4:88:ab:
c7:9c:d1:ff:3d:bc:5b:32:67:4c:ad:01:08:cc:e5:c0:3f:6a:
62:d0:9e:82:2d:eb:2f:7a:dc:26:23:b1:4e:f2:e3:a5:15:2c:
85:81:cd:ed:f3:61:e7:7b:65:2e:37:46:d8:be:fd:37:c6:a7:
70:76:4b:f3:75:d0:74:8c:42:7d:90:61:c5:db:a5:14:ca:06:
27:72:72:39:2b:bb:72:f5:99:a9:8e:23:c5:34:0d:f9:9e:92:
0a:35:89:1a:41:52:74:55:d9:e5:cf:c8:27:ef:88:98:2c:99:
f8:9e:17:1c:10:80:db:95:e6:96:de:1e:14:08:ee:04:70:85:
52:3f:1d:64:c9:af:f2:64:1e:f9:2c:a6:4a:28:f8:ad:bb:23:
66:92:d5:72:87:fc:04:3b:b4:e5:5d:c4:ff:6a:02:c2:ab:54:
37:75:e1:59:64:3f:7a:be:ca:b2:b7:d5:90:3a:17:69:b5:c9:
bf:23:90:c9:d8:d3:5e:03:07:d6:a8:3c:8e:e3:6f:16:f0:50:
bd:ab:24:d9:9b:1f:ed:13:bd:9c:1a:f8:1e:94:b1:63:70:85:
4c:92:87:21:b7:1e:ab:77:92:99:f6:e5:26:63:4a:d8:95:29:
32:53:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org