Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
File: C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa (raw, json)
Hash identifier: /S9dLJ2pfR0M21vf+cU0/TLybLAV5VDMIwqvLQCjpKg=
Subject key identifier: 17:A0:F2:00:B6:0C:C7:F0:4B:DE:8A:92:B1:38:36:AF:6D:CD:05:CA
Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial: 0D5A
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
Signing time: Sat 15 Jan 2022 06:34:31 +0000
ROA not before: Sat 15 Jan 2022 06:34:31 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 138466
IP address blocks: 103.126.52.0/22 maxlen: 24
2404:5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Validity
Not Before: Jan 15 06:34:31 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61e26af7-c453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:61:19:9a:c5:37:64:b0:3d:93:46:82:24:
d6:63:dc:43:59:4a:be:fb:32:a3:41:9a:0c:3a:e0:
8f:52:d6:d6:c6:1a:81:ae:9d:09:8e:81:21:1d:f6:
19:5d:7e:7b:17:a6:11:60:cc:f5:30:f0:30:2e:80:
80:83:13:3a:c6:46:13:7e:cf:09:13:98:e2:84:6e:
35:02:9e:d9:49:87:13:03:24:26:89:0a:df:17:d5:
5b:76:8b:05:70:42:24:6f:04:16:e2:3e:a4:91:9f:
4b:0a:ff:75:a7:b9:ec:10:ee:9c:71:50:25:ca:d2:
ba:6d:d1:57:f1:5d:ef:ac:98:4e:1c:15:ed:3e:6d:
a5:66:2b:fb:ab:7f:c9:66:e5:60:17:10:16:47:cf:
85:86:77:0b:c1:f0:17:52:bf:16:ce:0f:cb:34:31:
c2:88:26:42:39:5a:ef:2e:71:9f:64:d5:5b:87:e8:
6b:39:b5:05:15:5e:58:d9:45:97:49:19:6a:08:5f:
59:d6:79:d9:23:34:d5:dd:1a:fb:8d:83:f4:8b:f3:
3f:7b:36:ff:32:1c:07:54:2c:61:bf:9a:eb:c9:27:
da:46:7d:9a:79:0a:b2:83:b8:16:30:7d:17:f9:af:
73:8f:1a:05:f3:e2:39:e3:d6:6a:ae:19:3a:31:6e:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:F2:00:B6:0C:C7:F0:4B:DE:8A:92:B1:38:36:AF:6D:CD:05:CA
X509v3 Authority Key Identifier:
keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.52.0/22
IPv6:
2404:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:d6:d7:99:38:59:e1:16:53:3d:9a:2b:62:61:98:5f:79:0a:
03:f2:47:92:64:82:51:83:8d:d9:ef:b9:8b:5b:29:a7:ac:cc:
89:e0:c7:ed:a5:43:56:b6:4a:e9:f5:b4:8e:6b:23:8e:d0:5f:
a1:80:4a:64:a2:e9:6a:46:b0:34:d3:be:74:f7:12:f1:88:a2:
6c:c1:92:18:7c:84:5d:9d:7e:01:32:84:c6:3c:1f:a4:fc:95:
e4:d1:4a:e0:80:47:7d:78:b9:7a:a1:2b:f9:8a:90:ac:4e:bd:
19:62:22:42:c6:54:67:ff:2b:14:ab:98:ae:9b:bd:1b:66:5b:
8f:fc:a1:47:21:51:75:f6:a4:d1:c0:7c:b6:9b:5b:c7:b6:37:
e8:0b:5e:cf:9d:97:03:05:8a:37:f6:f6:c0:36:8e:e9:52:b8:
0b:43:07:3f:1d:3e:b5:65:8c:51:12:9f:7c:51:cf:3c:0a:49:
eb:56:dd:b6:34:76:a8:3a:55:da:12:91:59:cc:97:e1:e2:a3:
e3:5e:b0:f0:72:f2:04:ac:1e:50:d7:20:13:f9:8a:43:67:26:
95:4a:23:15:b4:a9:71:9f:42:66:66:3b:95:81:bb:b7:a4:f1:
d9:46:1e:67:1b:bb:7a:67:04:bb:1a:f0:66:04:cf:00:36:63:
5b:b4:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org