Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
File: F8762DC8C7C511EDA7A8CD39C4F9AE02.roa (raw, json)
Hash identifier: cLh9fF1Oc9A/+nJOPtgtgUMoj2lsytmyRMLLWe30xv8=
Subject key identifier: 8B:AB:7F:88:33:62:0F:24:7D:68:B8:51:4E:30:BE:46:88:17:A4:D7
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 0190
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
Signing time: Tue 21 Mar 2023 08:54:21 +0000
ROA not before: Tue 21 Mar 2023 08:54:21 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 132422
IP address blocks: 103.215.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Mar 21 08:54:21 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=641970bd-665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:cc:cc:73:c7:46:96:84:09:38:14:c9:b4:
36:3a:28:44:a3:5d:50:6c:fb:81:a3:9d:92:48:0a:
f4:0c:a2:8a:15:b9:5e:19:e0:97:2d:35:aa:2d:06:
14:12:f9:dd:da:78:7f:15:a1:a1:56:6b:fd:2d:cf:
2a:57:f8:83:d8:7a:e9:4e:db:38:89:74:23:ed:0d:
ac:aa:66:45:02:a2:db:aa:ed:e8:8c:87:16:07:05:
c9:b4:cb:fa:16:fe:d1:fc:94:ba:f1:20:60:86:12:
18:e2:3e:2a:e1:26:4a:8e:c9:3d:2c:e6:2c:b4:5a:
0e:3c:cf:72:f3:99:27:66:9e:d3:f5:b0:27:ad:10:
00:85:df:f9:29:d7:cc:43:26:e4:57:70:35:b4:02:
0f:97:1c:b2:1d:c9:cc:78:0f:07:42:8c:44:e9:a9:
c9:a5:4a:ae:28:5c:ee:e2:67:a3:60:17:c2:f7:61:
6c:69:ad:51:05:a9:29:60:fd:77:dd:1a:65:f8:9e:
fd:80:2c:4b:a7:06:5d:f2:4d:e6:d0:19:55:3a:c1:
75:ea:50:c1:f6:e6:b8:1c:91:53:0f:bb:98:fa:9e:
5a:5d:31:9d:29:43:bf:64:fb:4f:21:b2:d2:f9:e8:
ba:46:86:37:ec:86:fe:80:50:0c:18:31:d9:e0:3e:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AB:7F:88:33:62:0F:24:7D:68:B8:51:4E:30:BE:46:88:17:A4:D7
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.127.0/24
Signature Algorithm: sha256WithRSAEncryption
62:20:d8:17:6c:b8:b4:63:2e:0d:ce:bd:0b:c1:38:95:af:31:
b2:e8:6c:73:2d:3e:39:45:3e:5f:cb:13:4f:86:b4:4d:14:67:
d1:8f:9e:50:a5:96:e9:c6:24:4d:0b:af:66:3d:51:2c:57:bc:
fa:a4:bd:25:53:0b:14:54:47:00:81:ee:bf:dc:5b:3f:5b:14:
25:04:e5:2b:19:90:54:a5:4d:65:28:52:d3:7d:b0:2f:d0:56:
08:4e:3e:67:83:c5:63:80:e9:2e:e2:1e:0d:e8:8d:1c:53:cf:
1b:0f:b1:b2:4f:ac:22:df:f3:00:56:a2:e7:31:a3:bd:11:7b:
20:7c:fe:71:a0:81:c9:f2:8b:9d:69:32:12:5b:13:e3:c0:fc:
f3:6a:2d:11:b5:69:96:ae:e0:1e:d9:a4:76:a8:c5:52:1c:d6:
07:34:e6:3f:da:6a:4c:78:15:f2:50:ff:16:69:6a:43:a6:df:
1b:36:2c:4b:ab:bb:93:f2:c0:5c:98:51:0e:91:5a:6d:a4:f0:
6f:db:55:b9:ff:f8:e9:ba:4b:d0:6b:c3:e4:8c:64:b4:6b:14:
1f:9b:ad:ac:a5:94:16:84:fc:87:50:f8:e0:b2:12:64:5d:f6:
46:d3:97:57:85:fa:11:97:95:1b:52:27:f4:94:85:33:6e:fa:
7a:c6:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org