Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/6DE6D6C0330C11ECAE19F21CC4F9AE02.roa
File: 6DE6D6C0330C11ECAE19F21CC4F9AE02.roa (raw, json)
Hash identifier: ngXAnFoabCE4RLxG+OwgGHow6HA5bbhtpJFU6n7JFRE=
Subject key identifier: F3:09:20:61:5A:AC:F8:D3:F9:EF:E1:BA:0B:28:59:CA:60:C3:FE:24
Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
Certificate serial: 05B5
Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/6DE6D6C0330C11ECAE19F21CC4F9AE02.roa
Signing time: Thu 27 Jan 2022 22:37:47 +0000
ROA not before: Thu 27 Jan 2022 22:37:47 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 142302
IP address blocks: 103.82.120.0/24 maxlen: 24
103.82.121.0/24 maxlen: 24
103.82.122.0/24 maxlen: 24
103.82.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
Validity
Not Before: Jan 27 22:37:47 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f31ebb-bc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:52:15:14:33:fa:27:f2:bb:0b:c8:cf:43:
a5:e3:22:00:f5:90:e3:3f:09:b1:9d:72:d8:33:19:
a2:3b:45:2b:6b:1d:1f:92:e4:2e:99:c9:3b:25:cd:
22:d0:08:9d:48:29:08:9e:3b:91:2d:3e:d0:d9:47:
59:6f:ff:ee:b0:d7:f3:8b:4b:6d:36:ac:2e:48:27:
ca:06:2d:b5:2f:93:75:b7:d3:06:8e:60:41:e0:b8:
59:76:f7:9c:8c:fb:a9:c6:e4:9d:ee:a0:46:b9:ba:
b4:3a:2a:b7:6d:4a:bc:4f:c4:70:89:96:07:5f:f1:
1c:39:64:61:d8:91:0c:6f:31:a1:24:c5:f4:9c:cb:
0b:35:23:56:18:a7:0a:b8:41:f3:f8:a3:31:b4:67:
10:d9:f2:c9:62:ae:d3:aa:2e:17:f2:2a:5d:fe:ae:
6a:a4:3c:44:35:db:da:1c:9b:ad:c9:38:1d:18:91:
c8:c7:be:51:47:e9:cd:5a:a7:1f:d4:60:0f:05:0b:
cf:26:70:1c:b6:88:ea:4c:45:33:b4:7c:82:c6:08:
9d:b6:bd:c0:9a:72:29:59:d4:2e:2c:e7:f3:7f:68:
b7:af:06:1b:e4:99:c0:ae:c5:6c:aa:a1:56:4e:5f:
6e:d4:ab:2e:6e:9f:0a:22:bb:69:9d:51:19:51:3f:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:20:61:5A:AC:F8:D3:F9:EF:E1:BA:0B:28:59:CA:60:C3:FE:24
X509v3 Authority Key Identifier:
keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/6DE6D6C0330C11ECAE19F21CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.120.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e4:a7:3e:d3:5f:de:59:0d:1f:bf:5b:cc:28:21:f0:a2:9a:
6d:f2:04:80:d9:e2:41:47:5a:44:a3:6f:3b:86:71:4a:db:94:
b2:65:de:bd:25:f8:16:e7:82:36:75:d0:7a:bb:ea:a9:3e:f3:
62:ab:98:76:91:7e:e2:f4:b6:02:9c:9e:87:79:78:94:1d:83:
0a:12:84:02:7c:e4:88:07:cd:a8:d4:e3:22:a8:f4:4a:a4:fb:
59:95:f8:c8:79:a1:14:50:8f:15:9e:45:4e:2b:69:6c:fa:db:
f3:52:e8:fb:fe:a9:5c:97:34:96:d9:62:51:ed:0b:1b:b6:4d:
53:0c:58:26:e5:4e:98:30:3f:fc:ff:e1:f2:1f:79:c1:87:a6:
d9:98:7b:91:18:22:db:74:13:62:d2:74:7b:2d:57:cb:35:19:
28:59:a6:c4:5e:c7:25:80:0d:33:e9:28:3a:e4:a9:bf:4f:8d:
34:82:88:b5:87:ce:9d:a7:52:e6:01:3f:b8:2c:21:41:1c:9e:
28:ee:d4:fe:9e:b9:ce:92:55:9e:f8:01:b3:d9:c9:51:33:d3:
0b:6f:bc:38:a9:fe:c3:8d:47:c9:52:f8:f6:fd:6a:5a:57:e8:
3f:32:96:01:01:d8:f6:27:3a:53:72:d9:38:16:a5:cb:40:3a:
c0:75:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org