Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/9A87ED3E744F11ECBFE4A57DC4F9AE02.roa
File: 9A87ED3E744F11ECBFE4A57DC4F9AE02.roa (raw, json)
Hash identifier: gKUGbNdeb2NmBs7AAK+GdCzuFprOy1gkB84woTFlcqQ=
Subject key identifier: 6E:A6:05:F4:72:43:3F:4F:20:46:69:B5:98:7E:E3:3D:C7:D3:0C:AA
Certificate issuer: /CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
Certificate serial: 02
Authority key identifier: 76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/9A87ED3E744F11ECBFE4A57DC4F9AE02.roa
Signing time: Thu 13 Jan 2022 09:02:59 +0000
ROA not before: Thu 13 Jan 2022 09:02:59 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 139303
IP address blocks: 103.141.12.0/24 maxlen: 24
103.141.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
Validity
Not Before: Jan 13 09:02:59 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=61dfeac2-2a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:a7:aa:15:5c:b9:c6:03:1e:dd:c9:49:14:
c1:7b:8b:d9:86:c2:26:79:58:42:68:da:c4:66:2d:
7b:ad:e6:19:67:75:22:10:e2:36:ab:54:31:f9:56:
1d:f0:3b:eb:ea:45:0f:96:c6:5b:51:97:fc:91:f1:
20:9a:6e:32:89:77:5a:1c:2c:e0:59:04:0b:2f:03:
41:a4:75:f1:e7:f9:da:8c:66:fe:6e:da:bf:69:7f:
cd:f9:eb:a3:8c:5e:a7:35:cd:b5:43:39:a3:d9:51:
c8:14:e0:68:25:06:50:87:af:f5:6b:e3:94:8f:a5:
ae:08:1f:4d:93:9f:8b:3a:74:d4:6d:04:87:e6:40:
59:73:e3:1d:b0:b2:a8:7b:e3:72:97:0f:79:1b:32:
9b:d0:ba:d2:1d:5f:06:87:a9:bd:fc:ee:f0:3b:d2:
cf:8b:f2:0b:eb:10:5b:20:25:37:31:1b:74:89:c7:
a5:5c:2f:31:04:26:15:85:b4:2f:e3:3c:33:4b:e3:
08:3d:01:22:3b:64:92:c3:68:64:3d:b9:cc:85:0a:
18:bb:47:42:58:5c:df:21:33:68:2d:81:44:92:a6:
df:9c:0d:bc:52:61:6e:30:0c:d5:2f:7e:da:bf:96:
2b:8d:ed:61:5a:9c:19:24:73:2b:d4:e3:86:77:8e:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A6:05:F4:72:43:3F:4F:20:46:69:B5:98:7E:E3:3D:C7:D3:0C:AA
X509v3 Authority Key Identifier:
keyid:76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/9A87ED3E744F11ECBFE4A57DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:17:40:12:df:29:93:86:5f:e2:94:32:0d:ea:09:95:10:13:
3d:35:77:59:df:b1:e3:ff:8f:11:02:c7:aa:44:d5:97:81:58:
a2:ad:26:81:c9:e1:fc:0c:f2:68:b5:12:79:de:dc:21:bf:5c:
bb:39:0d:cc:85:f3:6f:92:f1:a6:38:c1:6e:34:e0:32:e9:78:
68:b0:19:ff:61:17:fc:55:9b:c1:7d:f6:6b:4b:81:43:87:10:
a0:be:88:01:8b:f0:fc:26:fe:1b:df:5f:a6:b9:4a:c2:7f:8c:
64:84:32:7a:59:9f:14:6b:44:e1:b3:a5:20:84:01:a8:9d:d6:
71:b2:d3:aa:57:77:35:7d:8a:07:d7:11:42:c4:a9:50:8e:4c:
ea:36:81:35:2a:58:3e:b9:12:e7:34:5b:89:93:50:3e:01:34:
c0:e3:2a:96:3e:ad:1c:9e:65:c3:82:13:22:fa:80:09:a9:fa:
be:be:69:8a:32:4d:08:53:5e:95:65:bb:7b:5f:28:7c:25:16:
bf:cb:92:82:be:69:3e:31:89:1f:f5:b6:5a:18:bc:e0:10:9a:
eb:0f:1e:6c:f8:98:d5:23:47:d4:a0:85:cc:c9:0b:3a:1a:75:
a4:24:c5:a7:74:c3:c5:38:26:ae:73:35:c3:2f:22:42:03:8f:
5b:cb:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org