Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/CB4E7E12765811EE8D567321C4F9AE02.roa
File: CB4E7E12765811EE8D567321C4F9AE02.roa (raw, json)
Hash identifier: ZN48VX9u6Otuk8Llc4ovcuIJu9CFDYUWVD/NDUIXvVI=
Subject key identifier: 8D:0E:17:37:94:EB:0A:43:99:0C:FB:3C:8F:D6:15:C3:BC:F2:09:17
Certificate issuer: /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial: 060E
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/CB4E7E12765811EE8D567321C4F9AE02.roa
Signing time: Sun 29 Oct 2023 12:43:43 +0000
ROA not before: Sun 29 Oct 2023 12:43:43 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 136416
IP address blocks: 103.86.200.0/22 maxlen: 23
103.86.200.0/23 maxlen: 24
103.86.202.0/24 maxlen: 24
2400:c740::/32 maxlen: 32
2400:c740::/36 maxlen: 36
2400:c740:1000::/36 maxlen: 36
2400:c740:2000::/36 maxlen: 36
2400:c740:3000::/36 maxlen: 36
2400:c740:4000::/36 maxlen: 36
2400:c740:5000::/36 maxlen: 36
2400:c740:6000::/36 maxlen: 36
2400:c740:7000::/36 maxlen: 36
2400:c740:8000::/36 maxlen: 36
2400:c740:9000::/36 maxlen: 36
2400:c740:a000::/36 maxlen: 36
2400:c740:b000::/36 maxlen: 36
2400:c740:c000::/36 maxlen: 36
2400:c740:d000::/36 maxlen: 36
2400:c740:e000::/36 maxlen: 36
2400:c740:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Validity
Not Before: Oct 29 12:43:43 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=653e537f-e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:ae:a4:a3:9c:c9:1c:28:12:51:48:54:3b:
03:15:0b:65:4c:52:c7:67:3d:d3:09:e1:d0:11:41:
7b:27:98:a0:0f:e0:56:7a:61:98:fb:cc:29:8d:4a:
02:48:9f:73:d5:2a:d9:af:d7:85:c0:c4:28:d9:f8:
7e:5c:18:23:a7:d9:8c:1c:a1:24:b0:55:fb:85:e1:
4c:a4:4a:ae:1e:17:2f:38:7b:b3:a8:e3:d3:87:2f:
0c:df:fe:1d:8d:b8:a9:83:83:aa:51:bb:2b:cd:08:
f4:3f:b4:42:3e:6b:84:68:e4:d4:3e:50:bd:6c:8f:
6d:c3:e0:2c:95:60:bb:8e:bb:4d:a6:39:73:6a:24:
3f:7c:f3:fc:b9:3e:37:2b:08:0d:28:30:e0:2f:bd:
fa:5e:66:e3:76:06:8a:c1:51:06:34:b5:0a:84:bb:
ed:c7:4e:c9:a5:03:c8:e9:d1:3a:1f:26:06:b5:24:
46:02:04:44:83:a4:a6:55:49:71:77:d7:65:90:99:
71:5a:e4:98:8c:bb:9f:de:41:69:39:f7:9e:8d:d5:
19:aa:e1:aa:34:82:f6:dd:f7:d6:ff:e5:e1:8d:8f:
9b:41:a7:93:25:27:f3:5f:b4:e3:79:3a:63:f9:fa:
c0:8d:73:9c:c1:8e:8d:9e:e4:9c:68:74:e7:5d:9a:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:17:37:94:EB:0A:43:99:0C:FB:3C:8F:D6:15:C3:BC:F2:09:17
X509v3 Authority Key Identifier:
keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/CB4E7E12765811EE8D567321C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.200.0/22
IPv6:
2400:c740::/32
Signature Algorithm: sha256WithRSAEncryption
42:66:7e:2f:76:92:de:16:55:15:ce:9e:5a:00:34:76:93:eb:
f8:dd:ea:99:41:f0:a5:d6:6c:f9:77:d2:d4:91:77:cc:fa:a7:
06:b1:8d:e3:86:f8:57:32:26:82:c8:d0:fe:ae:46:72:f0:da:
02:09:7b:ef:14:63:26:93:be:bf:ee:16:e1:13:e5:38:d0:40:
07:b7:ff:45:de:e1:0c:9b:5b:3f:21:d6:e9:24:7e:78:a3:9b:
3e:ce:71:0b:5a:b5:d4:5c:45:b2:f7:06:f9:3f:a3:bc:be:cc:
af:7d:82:45:bb:ab:35:55:e4:2f:05:0b:6f:30:36:04:6a:48:
96:58:5a:83:76:20:70:cc:42:9c:7a:3a:0c:2b:77:73:50:8b:
e1:65:c8:6d:11:59:ab:c0:5d:6b:68:1a:6f:49:00:78:5e:dc:
43:46:18:de:ae:90:06:3b:a8:c3:f5:6c:a1:88:96:da:f9:a5:
90:55:81:0a:b9:b4:44:3f:29:f6:85:ab:86:af:2f:c9:40:a8:
4f:97:f4:71:cd:ab:bb:bb:88:bb:c1:6b:3f:d4:5f:e8:95:e7:
00:2f:11:01:de:e6:c5:1b:0d:e7:5c:66:db:07:18:74:d1:b4:
5e:e9:22:55:6c:f9:41:3a:96:6c:93:76:05:f7:32:72:1e:10:
46:63:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org