Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/7DD4FD42093F11ECB99A962DC4F9AE02.roa
File: 7DD4FD42093F11ECB99A962DC4F9AE02.roa (raw, json)
Hash identifier: xarjsXk/9AKpX/6FFrLtjmk+mvCNqkliSs/pBCYn6M8=
Subject key identifier: 88:AD:43:40:08:B1:78:54:22:59:C6:F7:69:A2:50:5E:A0:DD:53:A2
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0772
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/7DD4FD42093F11ECB99A962DC4F9AE02.roa
Signing time: Fri 11 Mar 2022 04:28:09 +0000
ROA not before: Fri 11 Mar 2022 04:28:09 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 24121
IP address blocks: 103.8.176.0/22 maxlen: 22
103.8.180.0/22 maxlen: 22
2407:b001::/32 maxlen: 32
2407:b001:1000::/40 maxlen: 40
2407:b001:3000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Mar 11 04:28:09 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=622acfd9-6ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:61:b4:18:45:b2:7e:e4:bb:f2:3e:1f:be:
e9:ce:90:c6:fe:b9:98:b5:af:8c:68:7e:7f:17:b2:
33:62:04:57:d1:ad:27:88:95:d4:f5:4e:c5:32:ff:
dd:82:90:46:cc:cd:88:66:b1:b2:7d:5b:01:69:5c:
1c:46:d2:93:0f:47:6f:b6:39:ce:dc:8b:a8:41:f6:
03:93:0a:80:fc:89:8a:57:68:79:d0:95:1f:8b:13:
9d:af:d8:e0:47:1b:42:f3:ac:a0:40:37:8d:76:58:
e1:e1:d8:26:9b:7d:57:51:7f:40:e1:79:6f:0e:5f:
b7:bd:7f:8a:10:f8:e3:ed:6e:12:8c:3f:8d:04:e7:
fb:e6:35:60:c1:84:2f:62:3e:3c:fe:93:cb:1f:94:
e4:70:b9:c8:21:82:d4:2a:ec:63:b6:f9:ae:0e:4a:
06:b9:13:57:34:ef:cb:88:4b:24:7b:96:37:d0:25:
0d:77:34:36:43:cb:93:ec:8c:b3:cd:a7:8d:f4:9d:
6c:84:96:9f:8c:eb:0e:7c:73:08:2b:6d:93:54:8b:
ef:d7:94:dc:87:11:c1:e4:68:8c:e7:4e:35:f9:1d:
3b:e3:dc:10:17:4d:2a:83:05:81:94:aa:e3:87:8c:
fe:03:3a:70:0b:17:9a:43:ec:0e:ae:b3:c9:cb:4f:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AD:43:40:08:B1:78:54:22:59:C6:F7:69:A2:50:5E:A0:DD:53:A2
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/7DD4FD42093F11ECB99A962DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.176.0/21
IPv6:
2407:b001::/32
Signature Algorithm: sha256WithRSAEncryption
60:c6:35:8b:f1:5d:4a:f1:c7:4f:a7:87:84:0c:1a:3f:f3:62:
92:1b:56:ed:14:21:df:e1:f6:83:0b:6a:d4:2f:37:93:cb:ba:
6e:df:33:26:44:bc:7c:ac:5a:34:93:fa:5a:8f:4f:5b:bf:e9:
d7:1f:a2:cb:bb:37:1d:7c:6b:4e:e6:78:c2:7f:ad:48:e3:3e:
ce:b2:75:a3:3b:4c:1d:85:c9:27:a4:dc:0a:85:f6:d1:56:85:
79:cc:d1:65:72:08:15:9a:8a:8f:f1:ea:39:e2:8a:94:55:4c:
43:57:4e:d1:07:c4:c9:72:9e:a3:1f:90:50:b6:2c:23:15:c2:
c3:b3:d3:c1:65:08:f8:5c:30:f9:e5:de:a3:de:2f:86:ac:0a:
ed:2b:5f:df:5e:91:29:f2:f7:78:db:a2:31:56:28:e5:82:e3:
30:18:4c:22:82:cb:ee:0f:a1:fe:bc:f3:33:e5:d6:0c:a8:09:
95:63:06:80:e3:1a:5e:6f:d0:47:12:70:30:4a:27:e4:2c:2b:
7f:a8:c9:26:93:b8:41:6a:24:ad:38:c2:18:af:6c:53:da:e6:
81:43:42:61:11:49:c9:41:8c:e5:3e:c9:46:b7:5e:98:ec:14:
e7:8a:c2:4a:91:13:6d:66:dc:c5:4f:45:59:2c:6e:44:3b:0e:
be:de:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org