Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
File: AB3AB116E09711EC88BEF370C4F9AE02.roa (raw, json)
Hash identifier: 58iMZsdge+zwFjKruPQPngMNCiHUouOKZO5HOoDiPzA=
Subject key identifier: B1:D3:64:EB:54:1C:71:71:53:35:32:08:AE:9E:35:2D:7E:6D:47:EA
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 319C
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
Signing time: Tue 31 May 2022 04:10:56 +0000
ROA not before: Tue 31 May 2022 04:10:56 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 49901
IP address blocks: 103.21.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12700 (0x319c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: May 31 04:10:56 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62959550-858f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:91:af:0c:39:6b:83:d2:fd:c5:85:41:48:
17:3c:c2:4a:3b:0e:9e:9b:1f:a3:9a:13:30:9e:c0:
a3:4a:a1:09:0a:b6:16:bb:5f:c2:e8:75:d7:8f:df:
c1:35:bc:c6:dc:d6:41:00:01:00:f3:d8:7f:08:7b:
4b:26:b7:86:95:89:00:43:4c:88:fa:da:51:e0:46:
67:9c:70:a3:b7:95:4f:26:76:44:e1:02:7e:bd:d9:
b8:8a:53:51:4a:de:dc:3b:be:cb:e1:90:dd:4d:64:
db:06:08:b4:cc:ff:ed:23:be:44:58:5e:9f:62:71:
78:ef:a7:be:2b:c7:6b:c2:06:48:2c:b9:08:9d:d5:
04:64:d5:89:bc:54:13:e8:6e:23:52:06:3d:1e:6c:
4d:ae:17:be:cb:c5:15:b3:a3:ec:56:80:35:db:4a:
31:ee:d0:58:22:43:40:81:74:8a:67:07:94:a2:db:
26:e8:a3:37:a8:07:f3:de:88:f0:dc:d3:e6:fc:5a:
ed:07:2b:26:4b:e1:21:9e:17:10:bf:78:7b:ef:6d:
1f:c1:a4:6b:dc:37:ca:b7:c0:15:40:c9:e0:e8:82:
da:91:b9:3d:bc:5e:c6:45:32:86:44:db:47:36:5a:
f1:ad:66:25:1f:af:f1:75:49:2e:08:f2:d4:21:25:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:64:EB:54:1C:71:71:53:35:32:08:AE:9E:35:2D:7E:6D:47:EA
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
47:55:6c:cf:dd:a3:1d:6b:17:54:a5:16:78:4d:03:58:3e:0b:
80:0b:01:24:bb:e7:b5:95:18:00:e8:1b:c1:28:bb:e4:9e:7b:
85:15:cc:b5:19:40:60:e8:3d:b2:c3:21:6d:64:06:74:21:bf:
5a:af:87:8f:56:64:a9:f7:6c:f5:e4:b3:3c:c3:83:45:46:b8:
87:33:16:77:e5:12:9d:09:14:99:81:20:57:77:d4:0e:44:aa:
f6:f7:86:80:18:63:07:9d:91:3e:85:49:f2:23:9c:80:c1:73:
2e:b4:a8:62:be:bd:30:97:f3:80:de:95:57:a6:24:11:bc:6b:
89:b3:68:e7:cd:86:7b:0b:0a:ee:04:1a:9f:7d:eb:68:d9:0f:
d5:a9:52:3a:13:b6:b2:77:5f:ea:3a:85:32:48:62:c9:27:3d:
c4:4c:d0:fb:7b:24:bc:c4:af:47:9b:ac:61:bb:a9:91:87:fd:
e2:af:3f:16:9c:ab:ef:93:0b:7a:67:f8:76:2e:cc:7a:3e:3d:
bb:df:63:73:03:46:96:05:e3:bb:1f:b7:56:b5:d9:6b:a4:e8:
5d:42:fe:b3:d5:ec:f6:23:02:6e:73:bb:d2:f4:39:98:46:65:
9f:37:32:76:b0:a5:51:3b:60:ad:ae:f1:a8:ba:5d:35:3a:fd:
c4:d8:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org