Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FE43CEAEE22911EC844F7835C4F9AE02.roa
File: FE43CEAEE22911EC844F7835C4F9AE02.roa (raw, json)
Hash identifier: TVeXDTqBrV3sz2GpJGbFePeweEPz4jb0GjKnt0RNs78=
Subject key identifier: 31:86:16:57:0B:FD:98:D1:34:B3:D7:16:14:72:15:F0:47:53:44:73
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 31A4
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FE43CEAEE22911EC844F7835C4F9AE02.roa
Signing time: Thu 02 Jun 2022 04:10:54 +0000
ROA not before: Thu 02 Jun 2022 04:10:54 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 49901
IP address blocks: 103.21.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12708 (0x31a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Jun 2 04:10:54 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6298384d-cca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:66:3b:57:b7:a9:ee:4b:6b:fe:93:91:96:
f1:3b:9b:cb:6e:41:f1:c0:80:99:33:18:fe:17:f2:
a9:5e:e4:6a:2d:c0:7f:3c:11:14:6a:bd:17:17:17:
54:ad:67:a1:6e:58:35:c9:a4:78:2e:08:e5:9a:12:
0e:f6:53:b6:9f:58:65:68:47:9a:3c:37:9c:09:b4:
46:22:ba:ce:e9:f8:d1:16:14:92:6e:e4:4b:be:3e:
b5:4f:e1:11:82:3c:c3:e1:dc:cc:2a:f4:12:38:53:
9b:1a:52:85:f6:a1:86:aa:c7:5f:1f:60:a6:15:20:
35:d4:cb:d1:d5:ef:b0:63:23:d4:83:30:82:e7:3a:
ca:4d:9f:a0:7f:ab:c3:f5:45:de:48:33:aa:4d:8c:
24:e2:31:d9:21:19:59:84:55:0a:ef:86:85:bd:d8:
1f:7d:10:0c:cd:38:91:48:1a:44:6c:c5:dc:bd:07:
f0:7a:86:6f:3c:93:21:a5:2e:18:b1:4f:33:64:4e:
1c:a7:c2:1a:23:fc:43:aa:9b:50:9a:60:34:c3:2f:
42:0b:ca:c1:f3:bf:66:09:ee:99:22:8f:2e:12:4f:
1e:bf:48:c8:f6:b2:ae:8a:81:85:0d:94:3c:56:c7:
40:ec:36:b2:dc:c6:5c:0a:af:7c:63:d7:4a:6f:19:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:16:57:0B:FD:98:D1:34:B3:D7:16:14:72:15:F0:47:53:44:73
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/FE43CEAEE22911EC844F7835C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:60:61:da:4f:9e:a0:bd:dc:43:1d:be:34:46:83:cb:bf:53:
cd:29:35:62:e9:5e:3c:15:2c:71:ba:9b:d7:17:93:37:ba:48:
e9:71:a2:e2:59:d0:eb:3c:d0:47:08:2e:b4:5c:82:d1:4b:2d:
2b:60:cc:24:1b:7b:d7:5d:97:70:34:23:c3:d6:98:78:b1:84:
75:c8:39:de:d2:b4:78:92:99:2c:59:91:f9:ab:10:11:23:4e:
8a:36:8f:97:b4:e9:33:5f:ad:82:07:41:ae:99:4d:97:de:36:
84:2b:6d:f2:4d:91:07:8f:81:8f:ec:af:1b:d1:06:dd:d2:20:
51:3a:63:98:af:c5:12:82:9d:c5:b5:42:c6:47:18:5c:fe:5e:
35:3b:cf:e6:6b:c0:98:71:bd:fd:f0:d4:55:3f:70:bc:c4:eb:
2b:e5:9d:45:44:06:49:c8:94:b2:4a:90:75:7c:1f:f3:7c:a6:
e2:94:d1:61:36:5e:52:b9:c9:d2:36:d4:22:e5:51:8d:c8:e6:
53:db:6f:a2:87:cc:90:bc:86:92:cb:4d:e7:c4:b2:0b:59:2f:
8c:f9:85:a7:7b:5f:1b:07:f1:e8:41:bb:7c:53:8c:c5:d0:16:
54:39:a2:f9:8a:41:cc:4d:25:61:25:5a:15:71:fc:0c:88:3a:
eb:ac:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org