Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/1F3A99F8754B11ED86ED0022C4F9AE02.roa
File: 1F3A99F8754B11ED86ED0022C4F9AE02.roa (raw, json)
Hash identifier: YV/YSUMbKFGjRedzNR8OX0+2LH4oiir+U5O4/oimfVE=
Subject key identifier: A1:3C:AA:91:B0:9D:47:DB:77:44:F1:FC:1D:EA:81:DC:9D:AF:DC:6D
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 07CE
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/1F3A99F8754B11ED86ED0022C4F9AE02.roa
Signing time: Tue 06 Dec 2022 09:48:23 +0000
ROA not before: Tue 06 Dec 2022 09:48:22 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 45814
IP address blocks: 103.82.252.0/24 maxlen: 24
103.82.253.0/24 maxlen: 24
103.82.254.0/24 maxlen: 24
103.82.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Dec 6 09:48:22 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=638f0fe6-7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:cb:91:ce:85:d5:98:2e:23:f0:e3:cf:db:
fc:be:77:43:68:60:ca:b8:fb:f4:34:b2:ec:7c:dc:
80:88:c4:0b:4b:1a:b7:66:50:56:ca:8a:f3:ca:1b:
80:3f:ea:2b:98:e8:78:34:6c:75:d0:57:4b:c0:f9:
ce:fe:13:80:e1:a5:9c:38:2b:8f:9b:ea:6d:76:0d:
b5:c3:40:59:6f:70:61:60:8e:4b:70:fb:a9:25:42:
8d:a0:12:96:77:92:b4:ab:71:a8:d0:59:a5:8e:63:
85:05:28:0c:05:8d:19:f1:e1:68:7e:15:87:65:fa:
93:6e:1d:da:c0:b5:ea:b9:e1:84:da:a6:94:70:45:
8b:2f:69:41:63:02:60:a2:49:d7:75:5a:a5:1e:37:
3f:5a:8b:d6:98:68:0b:86:19:c5:22:77:0f:91:27:
cd:bf:13:07:4f:56:fc:e9:7b:9d:c4:9c:db:60:78:
6c:0e:22:9f:f9:8e:e6:31:12:54:78:a0:5b:12:bb:
b6:49:b1:c3:65:a3:65:a0:32:57:fd:17:43:3e:a1:
ab:7a:f8:c9:70:82:c1:5f:e7:9e:f0:f8:5e:d0:cd:
84:78:d6:63:16:99:6d:d0:1e:87:1b:db:8b:1d:b5:
b0:9d:e4:22:25:38:11:31:e3:1a:22:48:95:c3:c0:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:AA:91:B0:9D:47:DB:77:44:F1:FC:1D:EA:81:DC:9D:AF:DC:6D
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/1F3A99F8754B11ED86ED0022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.252.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1f:95:55:ba:03:58:1c:c1:36:18:b7:a7:b3:e8:4d:8c:ed:
2e:8e:c8:e3:4a:c1:56:d8:c4:e3:0a:b0:40:26:a7:e4:97:80:
05:9a:51:6a:e6:32:a0:72:3d:46:fc:24:5f:50:24:4b:d9:2a:
77:68:83:2b:23:cf:49:a0:b7:69:a3:f5:87:1a:41:54:7f:94:
47:31:2c:dd:15:69:82:a6:05:07:f4:2d:fc:47:66:92:83:73:
06:cc:5a:b5:72:23:5a:ad:da:9a:75:38:18:50:07:9c:a7:98:
25:1f:0b:06:32:19:f2:8c:87:3a:27:ed:92:60:4a:b5:a8:e0:
e5:f2:d5:91:7e:2a:fa:de:15:e4:1a:b8:ad:07:68:3d:80:04:
1d:45:39:55:5c:70:9c:aa:b3:40:1d:de:b8:df:b8:49:a9:50:
77:1c:57:17:b5:70:7f:59:e6:b2:03:a6:59:22:b0:75:03:3f:
1d:b9:36:49:9d:24:07:0b:fc:85:ab:86:d8:02:38:82:cf:d9:
f3:29:d5:e8:9c:a8:3e:09:f5:13:9c:82:d2:2c:7e:1d:e1:c7:
79:27:3b:83:db:1a:e0:20:eb:cd:d3:01:33:e9:04:57:65:39:
5c:95:02:0e:72:c6:fe:29:bb:95:7d:95:31:a5:c7:83:25:5b:
d5:c7:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org