Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F2F6F82A417011EA951D4669C4F9AE02.roa
File: F2F6F82A417011EA951D4669C4F9AE02.roa (raw, json)
Hash identifier: Pphdved+NtmYzM2bZjWjBcgXmiHNO0O3mEXUpHUZHds=
Subject key identifier: 48:80:E3:8C:67:71:90:13:A6:23:ED:A4:3D:1B:F6:43:04:B7:A2:7E
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 06B8
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F2F6F82A417011EA951D4669C4F9AE02.roa
Signing time: Wed 01 Dec 2021 09:18:45 +0000
ROA not before: Wed 01 Dec 2021 09:18:45 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 132827
IP address blocks: 103.11.236.0/24 maxlen: 24
103.11.237.0/24 maxlen: 24
103.11.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Dec 1 09:18:45 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61a73df5-d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:6f:59:ff:5f:3b:f9:2d:d9:71:bd:d6:ca:
70:20:08:8f:ff:90:be:8d:a8:dc:ad:71:68:ea:49:
f2:26:46:7e:d3:90:cf:b6:62:e1:19:06:52:d0:39:
14:45:98:8e:4d:27:6f:8b:07:03:d0:24:2d:5e:fe:
49:ed:d2:d1:c1:92:1b:57:ed:54:1f:88:50:55:58:
3a:66:c7:af:e5:46:0a:89:67:c7:94:e5:b4:ad:ab:
d1:32:97:1c:57:82:6a:27:84:cf:3b:1c:13:be:b3:
dd:04:ea:f8:22:5b:59:a2:58:40:e7:34:63:fd:12:
25:e7:bb:5e:37:22:e7:d3:67:54:e9:b5:fb:5c:fc:
d4:f8:3b:12:28:65:f2:4b:ec:c1:ed:0f:3a:9d:6c:
11:8f:09:2a:f4:04:77:3e:86:b7:a1:a5:bd:5f:26:
e8:28:38:24:bf:9f:7d:e3:1c:1b:23:8e:0b:27:15:
31:e4:99:7c:7c:ab:0c:5c:90:4f:ff:dc:e3:6a:a2:
15:5f:09:a8:2b:c6:5f:ee:2a:54:05:e3:4b:df:34:
32:0c:a9:35:87:d3:be:f6:11:ab:6d:ea:27:c0:0e:
db:b6:97:79:d8:d1:c7:16:2b:6d:11:52:87:2a:60:
f6:a5:b3:cd:d4:6f:08:78:91:47:18:c6:09:2f:8b:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:E3:8C:67:71:90:13:A6:23:ED:A4:3D:1B:F6:43:04:B7:A2:7E
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/F2F6F82A417011EA951D4669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.236.0-103.11.238.255
Signature Algorithm: sha256WithRSAEncryption
2d:80:de:cf:b9:91:70:08:cc:3a:59:43:7a:90:74:96:4d:aa:
32:5c:77:fc:26:37:42:40:f3:f1:49:85:74:93:2e:ea:fe:8a:
67:a0:5a:e5:0b:8e:25:b6:0a:12:11:1f:82:6c:d9:5a:e0:a5:
22:ac:cd:1d:7f:ac:5b:b5:12:07:fe:16:e4:73:da:d4:9e:78:
67:3e:71:f5:b0:07:5b:94:d2:44:65:19:50:fd:d2:8c:a7:c3:
fb:af:68:4e:c6:7d:14:79:5d:47:6e:97:ba:0e:c3:a2:9f:47:
10:c7:a5:19:8d:09:b1:d6:93:77:1d:2a:dc:52:e3:ab:c2:3f:
87:12:2d:3e:fc:6a:41:8f:27:24:6c:d6:42:9a:44:8d:74:46:
05:6b:3a:fa:44:30:e6:b1:fe:1d:d6:8c:b0:89:a2:d5:eb:f8:
39:bc:f7:3b:de:f2:e7:94:a3:56:16:70:15:50:fe:70:4d:07:
d6:f1:73:e8:f2:1d:f1:a3:f5:e2:3a:db:95:8f:fb:a9:31:11:
bd:d5:b6:9b:92:b6:bc:92:f2:9b:7e:a4:61:df:3b:28:b2:d8:
11:8c:55:3c:27:77:ba:86:a2:86:90:5f:e4:bc:53:b8:41:91:
d4:40:8d:ba:20:08:2d:5b:ed:f3:18:12:eb:d2:58:78:5d:a4:
ee:9c:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org