Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/152B8948421311ECA9C45064C4F9AE02.roa
File: 152B8948421311ECA9C45064C4F9AE02.roa (raw, json)
Hash identifier: Ps8KxziECqpl8iAuZYjLCLs/sjSU9GDU4LHg0BKAm3w=
Subject key identifier: 65:BC:60:23:A1:9F:FE:21:02:3D:16:28:1C:7A:43:CC:CB:20:AA:BD
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 12B2
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/152B8948421311ECA9C45064C4F9AE02.roa
Signing time: Thu 02 Dec 2021 17:53:52 +0000
ROA not before: Thu 02 Dec 2021 17:53:52 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 396356
IP address blocks: 103.104.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4786 (0x12b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Dec 2 17:53:52 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a90830-cb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:13:9e:a5:ad:a7:03:18:d2:73:b4:56:1a:
75:49:e8:98:fa:96:83:cc:1d:c5:e0:be:d9:a6:b4:
08:06:e6:74:5f:77:ec:53:c2:70:60:f4:01:e8:1a:
88:c7:31:15:42:ce:4f:80:4a:c3:09:93:98:4a:24:
85:82:1b:be:64:44:4e:01:97:47:d5:9d:1a:de:2e:
ac:46:6f:ce:05:3f:f4:51:66:ee:7d:2c:50:d5:88:
99:3a:c2:bc:91:bf:f4:50:7a:7c:32:42:99:8d:a0:
c3:81:53:63:72:63:ec:4a:35:64:5c:6d:2e:8c:3b:
66:37:9f:18:31:d2:0e:f6:a4:94:4c:dc:54:0d:0c:
d8:a0:03:e2:89:4d:5e:5b:6e:04:c5:26:0b:ca:af:
8d:75:63:ca:27:47:76:73:f5:42:37:01:6d:69:0a:
f3:8d:c4:d0:f5:1a:ff:0a:b9:52:0b:f8:7e:e6:11:
64:05:14:11:ec:da:04:a1:17:60:24:2b:b0:11:12:
82:4e:09:fc:d3:1e:a5:58:dd:54:57:e5:94:26:d7:
38:99:05:ae:e5:21:f0:4a:25:f5:61:5c:c6:28:9c:
f1:04:cf:8f:ae:44:e4:0f:ea:84:ae:f9:19:85:6e:
a2:99:13:af:d1:91:1b:83:f6:8d:4f:e3:61:1f:6d:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BC:60:23:A1:9F:FE:21:02:3D:16:28:1C:7A:43:CC:CB:20:AA:BD
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/152B8948421311ECA9C45064C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:23:47:e7:87:42:82:4a:22:31:1d:aa:83:b5:14:23:21:52:
cf:19:1b:23:6d:9c:9c:3e:46:a0:af:28:e0:91:c0:42:22:c8:
90:f1:c0:d1:8f:30:ff:e0:fb:63:58:65:12:e0:e6:8d:3c:1e:
0e:7b:02:24:2e:2f:7d:50:87:60:54:8d:ca:4f:25:d7:e6:15:
27:4e:c3:89:b5:37:87:65:db:4e:f6:d8:36:52:fb:cf:bf:95:
0f:35:53:c7:2f:7e:46:a3:c4:38:a4:f9:88:ec:15:17:3b:4f:
6c:d1:1a:91:18:ba:47:3a:41:59:f6:33:ba:6a:f1:84:3b:90:
7c:6e:0c:56:3e:a2:68:56:b1:e2:a8:39:e1:12:dd:09:1f:49:
1b:b3:08:34:46:c8:b7:9e:71:f4:25:cf:2b:ee:64:fc:29:20:
0a:e7:9b:91:ca:97:6d:8f:5e:7a:cc:fd:d2:12:7a:34:71:db:
35:4a:1a:64:40:b8:10:59:f4:5b:37:81:38:4f:5f:d3:19:fa:
05:51:c1:60:d4:60:d6:df:dd:1c:02:37:6b:fe:9e:94:cf:6d:
e4:9a:e3:1d:3c:58:26:d9:51:67:72:b7:5a:d6:e3:3f:81:a5:
04:dd:ed:63:f3:e8:51:3d:4d:c3:ae:63:7b:30:44:1d:71:76:
8e:6f:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org