Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/3CECB1C6325B11ED8403A325C4F9AE02.roa
File: 3CECB1C6325B11ED8403A325C4F9AE02.roa (raw, json)
Hash identifier: H1KBLsqtYT82Ssn3uIVaFknOUuWtdcP23QfnbQDq0Wc=
Subject key identifier: 38:8C:02:AC:05:68:A5:F6:7D:68:33:88:D8:3A:C7:56:75:16:68:B7
Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Certificate serial: 08
Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/3CECB1C6325B11ED8403A325C4F9AE02.roa
Signing time: Thu 15 Sep 2022 01:04:50 +0000
ROA not before: Thu 15 Sep 2022 01:04:49 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 10080
IP address blocks: 103.143.156.0/23 maxlen: 23
2400:a2e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Validity
Not Before: Sep 15 01:04:49 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63227a31-0623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:39:53:a8:f0:48:a8:2f:d7:5b:bc:6c:14:
85:25:fa:e3:92:33:0b:b2:8f:b1:6e:22:50:9a:83:
fc:11:60:4f:68:55:2e:fa:dd:e9:7b:c0:c8:ee:c6:
9d:85:bb:ac:54:52:bf:33:ba:75:81:57:7f:94:e6:
75:d7:1f:e6:33:4b:16:e9:38:a6:94:70:e8:dc:66:
75:00:a2:3d:26:02:df:d0:53:1a:d9:c5:33:07:72:
55:8b:ee:55:cb:13:70:b7:65:75:af:a3:61:79:60:
dc:b6:97:91:b6:a7:ed:ab:7c:9d:8f:64:9c:25:49:
d4:11:71:85:16:27:6b:a6:da:76:6e:cc:91:82:e7:
91:58:c7:90:68:ad:33:10:c6:ad:3c:78:31:16:3a:
ef:4b:b8:88:32:53:0c:80:71:bd:56:31:5b:12:e7:
00:ff:68:5f:95:c7:b3:67:41:b8:0c:84:2b:8a:56:
19:48:50:fd:91:02:26:9a:29:f4:fb:09:94:18:4e:
bf:eb:cc:02:fc:c8:56:c8:57:b1:1a:5c:5d:55:b9:
9c:7c:e3:62:ff:a6:ef:06:39:f1:39:03:78:9d:1f:
2c:34:8b:0e:18:e8:f8:12:74:2c:1e:cb:90:6c:6a:
9b:7f:00:13:f7:32:c7:ac:9d:d9:f0:07:4a:93:e3:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:02:AC:05:68:A5:F6:7D:68:33:88:D8:3A:C7:56:75:16:68:B7
X509v3 Authority Key Identifier:
keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/3CECB1C6325B11ED8403A325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.156.0/23
IPv6:
2400:a2e0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:38:02:0a:e8:c1:10:b4:5b:f6:55:db:8e:19:af:3e:b2:b2:
99:7c:05:a7:35:a2:c2:a8:c4:4e:c9:a8:67:c9:89:41:54:8e:
f3:9d:d2:21:b9:63:77:31:7d:15:33:ad:94:b8:c5:9e:50:42:
62:1f:e0:be:f5:7b:c2:a0:14:99:fa:a1:ed:fe:95:a8:a4:e2:
6e:c4:81:23:93:ed:10:b6:4e:72:47:04:77:ee:3c:1a:e0:58:
43:30:6c:bb:71:c7:ea:c1:fc:f8:aa:d1:8b:95:94:78:bc:25:
6a:1f:bd:7b:8a:24:7b:1b:d2:e1:29:96:c2:bb:af:52:3f:e6:
fb:a6:bd:4a:d2:44:15:e2:ef:73:cb:51:63:f3:fb:2a:82:5e:
82:6d:82:c7:9b:b5:a2:1b:f4:94:50:5d:38:f4:65:57:03:b7:
3c:3e:f5:8c:18:84:b3:4f:70:3d:86:51:1d:c3:59:af:dc:27:
de:6c:3c:9f:ea:89:2a:dc:16:29:31:14:f5:9e:61:c3:de:36:
11:ca:f4:17:40:c5:dc:f6:80:a9:e8:db:d4:cb:65:2b:ad:54:
e1:69:e5:9f:9c:53:f4:0a:06:6b:89:78:7a:53:82:c5:8f:55:
98:e2:4a:67:96:63:f1:54:a4:61:4d:e3:c9:a7:fa:25:46:36:
ca:12:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org