Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/3D21AD54792A11EBBC559E1BC4F9AE02.roa
File: 3D21AD54792A11EBBC559E1BC4F9AE02.roa (raw, json)
Hash identifier: b2kQW+dib1T8igUrMBXnToITGKTVpXuZKNJ7zbUTGIA=
Subject key identifier: F1:85:D5:72:69:BA:C7:6D:1E:CD:01:08:07:08:B1:8C:A1:EF:15:A8
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 1528
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/3D21AD54792A11EBBC559E1BC4F9AE02.roa
Signing time: Sun 31 Jul 2022 17:43:51 +0000
ROA not before: Sun 31 Jul 2022 17:43:51 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 132092
IP address blocks: 103.70.140.0/22 maxlen: 24
182.54.152.0/22 maxlen: 24
2406:c80::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5416 (0x1528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Validity
Not Before: Jul 31 17:43:51 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e6bf56-d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:39:62:1f:02:4d:bd:f4:6e:d6:be:97:94:
ff:b3:29:d3:96:6a:fc:94:f9:f0:72:d1:08:20:00:
d3:4f:fe:59:63:5d:a3:56:44:cf:5a:30:6f:5a:8f:
bc:c0:36:9e:ee:1e:e0:d8:57:5f:97:44:c3:80:06:
e5:72:41:d6:48:e2:1d:53:43:4b:16:99:f4:0a:c4:
2c:80:f8:b5:fa:81:23:90:63:d0:18:3e:09:d6:db:
8d:05:4d:61:e0:5f:e9:c5:1e:8b:f9:fc:a0:2e:0a:
d6:80:17:2d:30:dd:37:a0:03:be:0e:5c:2f:f5:1e:
ec:9a:26:aa:1b:bc:ea:5e:2b:af:b0:06:5d:b1:89:
ad:d7:fc:4b:ad:d0:82:9b:0b:29:2b:1b:30:6f:0b:
b9:52:ab:72:20:1c:46:f6:5f:bf:0d:54:12:8c:03:
77:8b:58:e7:9b:69:a7:c9:df:78:83:6b:88:b1:78:
69:6b:ae:ad:fc:43:7d:68:0b:dc:79:65:e1:4f:92:
37:45:2f:41:c6:a2:62:75:57:d8:19:2f:41:c6:4d:
fc:e6:5b:fd:14:3a:6e:a6:02:1e:d2:3b:c7:8e:b9:
b3:8d:42:6d:9c:17:ae:ec:d2:69:65:46:0c:f4:e0:
4c:ae:43:b4:bc:e1:a3:0a:8a:b5:29:4e:00:60:12:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:D5:72:69:BA:C7:6D:1E:CD:01:08:07:08:B1:8C:A1:EF:15:A8
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/3D21AD54792A11EBBC559E1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.140.0/22
182.54.152.0/22
IPv6:
2406:c80::/32
Signature Algorithm: sha256WithRSAEncryption
63:d5:7d:53:2e:de:e8:5d:c5:ba:12:46:e4:94:ac:24:e0:8e:
0a:5b:c6:35:21:f5:ff:8b:a0:26:be:a1:8c:b7:0d:9f:06:61:
fa:ac:1b:14:6a:c0:43:03:78:a7:8a:ea:ad:72:18:39:87:dd:
ab:ff:a4:89:f4:da:0b:36:16:3e:9b:ea:f2:d3:22:60:cb:86:
6b:66:27:0e:af:6c:df:ca:94:26:28:0a:bd:c7:c4:dc:5b:34:
8a:9d:f6:c8:de:34:65:7e:7a:83:60:5e:03:54:d4:1f:46:18:
5d:68:87:f2:c1:be:67:c8:d5:ae:22:a7:d8:7c:f8:68:b0:1a:
65:d5:9b:1c:10:70:de:b6:73:ac:b4:4e:b4:c9:75:38:94:2e:
aa:1d:08:87:54:a0:c6:05:f4:ab:fe:3c:f4:b6:b7:c2:6c:28:
c9:38:99:2c:05:1e:c5:96:cc:cd:38:9f:5e:72:64:92:c8:48:
29:45:e3:b0:50:b8:69:a7:16:c6:57:9c:a4:0f:28:e1:d1:d4:
50:76:37:54:1c:98:03:1e:0b:df:39:0c:b8:8a:2a:fd:7e:d9:
b1:5f:3f:dd:f8:2a:f0:3f:c8:85:53:96:e4:bb:c1:a0:51:aa:
8b:19:38:a2:cb:30:44:20:2a:77:d8:f4:f1:bc:bd:a6:fb:90:
3a:b4:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org