Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/086DD44C2EDE11E7A36C1819C4F9AE02.roa
File: 086DD44C2EDE11E7A36C1819C4F9AE02.roa (raw, json)
Hash identifier: k7gKJS+S5PuVvh7ckKdz6gYw6OmDGJKSxzZuy+smg34=
Subject key identifier: 3F:6A:87:79:20:6E:C8:F0:97:15:A0:F8:BC:ED:4A:FF:C0:41:71:D1
Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial: 1A15
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/086DD44C2EDE11E7A36C1819C4F9AE02.roa
Signing time: Fri 30 Sep 2022 17:13:41 +0000
ROA not before: Fri 30 Sep 2022 17:13:41 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 17766
IP address blocks: 103.192.175.0/24 maxlen: 24
103.214.207.0/24 maxlen: 24
192.140.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6677 (0x1a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Validity
Not Before: Sep 30 17:13:41 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=633723c5-ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:87:9f:5a:cf:b8:39:d4:0f:3f:3a:48:97:
4e:a1:32:13:d6:09:e3:93:74:cd:1a:56:e1:89:17:
39:31:b9:59:27:d2:19:22:65:86:2a:51:51:90:6c:
ab:d2:38:ee:cc:ae:b0:d8:77:d5:bc:9d:18:40:72:
44:1c:0a:57:52:e6:c6:b3:e7:32:d4:9a:61:3b:57:
d5:b6:b4:66:b9:3d:86:7c:ec:1c:17:8c:c2:f9:58:
59:bb:bb:98:75:15:8d:83:c3:b8:16:32:b3:a7:f6:
08:c9:91:31:62:77:2e:ca:0c:34:e5:7c:88:44:bb:
7c:9b:04:94:da:c0:cb:56:f0:1d:1e:d7:03:eb:7d:
b4:6a:23:35:4d:10:30:99:cf:3b:b3:13:6c:62:a3:
96:a4:ef:15:13:d2:7c:76:fa:be:8c:4e:ff:35:f4:
7a:c8:dd:f0:de:de:a5:f8:b0:89:f4:39:ab:0a:62:
0f:cf:51:4c:e4:ce:ef:8b:ba:ae:b7:b5:30:44:6f:
2b:99:1f:a3:bf:b9:66:c2:45:a3:61:eb:4a:83:ec:
ac:cf:46:99:67:4a:70:ff:15:42:df:20:b5:d9:40:
56:63:4d:46:a8:aa:8f:7e:31:7a:a0:91:95:f5:66:
93:1d:1a:26:a6:db:2c:f2:40:9a:45:33:2f:ce:76:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:87:79:20:6E:C8:F0:97:15:A0:F8:BC:ED:4A:FF:C0:41:71:D1
X509v3 Authority Key Identifier:
keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/086DD44C2EDE11E7A36C1819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.192.175.0/24
103.214.207.0/24
192.140.226.0/23
Signature Algorithm: sha256WithRSAEncryption
26:fc:35:62:51:96:49:ec:e4:5a:6e:70:eb:ab:19:7b:aa:9c:
ef:1f:85:c8:74:4d:15:50:62:33:9f:9d:68:6f:aa:56:c2:66:
89:39:4a:de:60:a0:7c:9d:76:e4:59:e8:eb:21:73:7c:cd:a5:
fd:2e:2f:25:22:b2:25:8a:e4:b6:77:7c:68:54:6a:5f:96:0c:
79:ed:05:a5:fd:3a:f5:9b:6c:4f:f3:50:59:0d:68:b3:38:0d:
bb:e4:7e:a5:24:f6:13:58:7f:2b:93:8f:c5:33:34:5e:9d:53:
80:86:72:c6:6e:57:e6:e4:f3:c4:2c:df:7e:79:c2:6c:f6:5c:
f3:e3:46:cd:7d:e6:f8:0e:3c:c8:b3:1d:c3:71:59:d2:9a:55:
02:69:52:c2:4c:8b:06:98:f6:59:24:6b:02:ff:ce:cd:d8:88:
5b:ab:c8:98:cf:35:6c:f8:14:b4:41:90:6f:8b:ca:db:14:5d:
ac:a0:77:a7:66:3a:62:e3:a1:30:2f:11:c0:e5:81:3b:e0:7a:
a4:4f:ec:0c:b6:92:d9:e6:fd:fd:27:5e:c6:4c:5b:06:89:c7:
3c:34:70:08:70:6a:cf:af:39:11:fd:8f:09:3a:2a:c6:83:bc:
b5:5c:f3:54:07:ec:de:2e:49:82:e4:3e:3e:35:f2:1d:51:2b:
32:00:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org