Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
File: 43F4B16E388011EDB3E3D23DC4F9AE02.roa (raw, json)
Hash identifier: Ck61Rkwm5kvuwxHz+p013sdE16yRrvnnXpyhtUWtPn4=
Subject key identifier: 6E:C4:7F:21:49:2D:4E:EA:6B:43:45:51:26:C1:AA:70:CF:30:A3:54
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 13
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
Signing time: Tue 20 Sep 2022 01:05:07 +0000
ROA not before: Tue 20 Sep 2022 01:05:07 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 7586
IP address blocks: 103.1.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Sep 20 01:05:07 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=632911c2-2889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:90:03:3e:f8:a8:2a:57:be:98:ae:3c:09:
c9:ec:ca:19:b6:64:ac:00:e4:4d:d7:46:de:0a:96:
c6:4a:ff:36:1d:12:98:ef:8c:7a:05:49:14:96:6a:
d0:9a:4e:80:df:65:80:f1:ee:11:89:41:bd:08:06:
f5:0b:78:c9:fe:fe:81:40:0c:fb:11:c2:e4:1a:a9:
cd:a5:df:b4:41:8f:2c:c4:98:01:dd:b0:19:57:bb:
fd:ac:51:54:d6:55:e8:50:21:6a:f8:c5:e3:25:eb:
6f:38:a1:e0:46:30:7a:81:cc:25:53:15:fd:12:14:
d6:d3:00:ff:3a:9c:01:b0:b3:5b:e1:0f:1f:09:d5:
a2:ba:66:c3:34:7b:de:82:25:f0:ac:79:83:68:a4:
19:8d:8e:c9:25:74:a5:19:d6:bd:01:68:22:49:b8:
5d:86:e2:d7:22:f6:10:c1:1f:84:68:ad:cb:2b:f6:
11:d6:6d:dd:f2:68:04:f6:b1:66:b1:ed:c9:41:87:
69:63:74:eb:08:b8:bc:c5:8c:e6:9b:cc:b5:c8:7e:
95:43:7b:d3:6a:04:2d:f1:bb:b0:14:f2:ac:8c:c7:
1a:11:42:5b:99:df:03:a5:48:7d:4c:bf:35:93:20:
4d:52:d3:10:38:25:1b:f2:d2:6a:a0:9f:76:25:3a:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C4:7F:21:49:2D:4E:EA:6B:43:45:51:26:C1:AA:70:CF:30:A3:54
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.158.0/24
Signature Algorithm: sha256WithRSAEncryption
85:56:6a:c4:2d:65:9e:e0:8e:57:14:4b:4e:04:ca:99:b2:6a:
65:1c:c1:d5:d6:71:e7:30:c5:a6:d2:a8:38:64:ee:a3:17:58:
0c:27:f7:6b:25:4e:8c:a6:9e:7f:72:a0:84:ef:f0:ce:8e:3c:
ab:54:4d:6c:78:6a:d1:92:12:c4:51:da:94:3b:23:5c:41:c5:
18:54:64:02:06:e6:6c:b8:f3:29:d0:ef:53:b7:5e:db:c3:ec:
59:65:43:01:9c:8d:43:36:d9:41:e6:39:e6:7d:95:fe:b4:9b:
c0:bb:2f:3d:87:12:0b:8a:0a:9a:aa:98:39:59:c4:e1:c9:25:
d9:a6:c6:7a:10:ea:65:7c:68:db:ab:eb:61:7a:d8:88:ec:2b:
35:aa:8d:22:c3:56:84:41:11:83:f2:5f:44:6b:03:b0:25:d7:
68:d0:8f:ea:48:72:0c:f7:2b:78:e2:8c:a0:69:c4:d4:43:86:
fb:bb:bc:c0:73:6d:31:c6:a3:1d:3c:51:d0:c1:f5:8d:34:ba:
a4:63:ce:a6:63:11:18:b0:b0:9c:c6:e7:e4:c9:bf:10:bc:2c:
87:c7:1e:ca:45:e0:5a:88:d9:0d:7f:b5:18:a9:47:34:40:e4:
ef:33:b0:ee:e9:0a:33:13:3c:d1:5c:a0:ea:96:6d:34:8e:c5:
7e:d7:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org