Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/B4C6BAA0E02811ECB5DA272AC4F9AE02.roa
File: B4C6BAA0E02811ECB5DA272AC4F9AE02.roa (raw, json)
Hash identifier: iwkhF9Cw0q64ZhnpQVTXMBR5ACVLur8ljogyTGM9Db0=
Subject key identifier: D1:0F:72:66:8C:E7:E4:F9:AC:14:15:05:1A:89:E0:E4:A8:8D:3E:10
Certificate issuer: /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Certificate serial: 047B
Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/B4C6BAA0E02811ECB5DA272AC4F9AE02.roa
Signing time: Mon 30 May 2022 14:56:38 +0000
ROA not before: Mon 30 May 2022 14:56:38 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 58715
IP address blocks: 103.85.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Validity
Not Before: May 30 14:56:38 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6294db26-7309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:9f:b7:28:39:56:b2:60:76:d1:72:46:85:
7f:65:98:6e:5e:5a:b3:8c:83:68:50:0e:6e:5f:c1:
1f:6d:93:49:3a:1a:b6:b0:78:24:57:16:7d:8c:b2:
f6:bc:0b:ef:f8:80:08:75:c5:e9:8e:49:53:0c:cc:
26:ef:7f:16:01:2a:38:30:65:f4:ad:62:23:dc:3f:
d6:3c:40:6e:bf:92:cc:6b:39:93:31:e1:59:d7:c6:
1f:18:c1:fa:11:fb:2c:05:a5:92:da:0f:da:6d:ee:
99:ab:9e:26:b0:4d:34:54:f4:68:9e:b4:54:c3:72:
c2:55:1f:e0:61:b9:5c:ce:52:91:68:e4:0b:ef:05:
92:4d:58:d5:ab:15:b5:fa:a5:87:9a:d1:f7:26:61:
57:f4:ea:95:3b:75:ce:d5:fa:8c:07:59:ed:a9:68:
ac:80:15:c3:67:d2:d3:84:50:95:69:d5:6c:ea:a1:
e1:d6:d7:ac:d1:3f:6d:59:66:a7:04:81:db:c0:eb:
d6:20:e4:3c:b9:f8:3f:ee:5c:cb:b8:cd:73:4e:d6:
7c:24:aa:16:50:b0:b8:d5:be:7d:5c:f4:d9:5b:3e:
7e:f2:2d:62:0a:37:e8:bc:ac:38:c4:ab:e4:0e:59:
f5:f5:29:f3:a0:83:b0:6a:db:f8:12:64:a4:10:0e:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:72:66:8C:E7:E4:F9:AC:14:15:05:1A:89:E0:E4:A8:8D:3E:10
X509v3 Authority Key Identifier:
keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/B4C6BAA0E02811ECB5DA272AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.114.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3a:56:2f:ee:bb:db:15:89:99:d4:80:e7:5a:97:f2:f1:e7:
f7:a7:4f:1c:41:d0:28:4e:b9:bd:36:80:24:1b:e5:db:a3:4a:
76:7e:70:54:ff:b1:b8:3c:8b:17:bf:0d:9c:64:06:32:a1:a0:
f9:a5:48:90:35:a8:f2:98:9b:b3:9a:3a:3b:62:98:7c:29:4c:
0a:80:04:a8:14:53:31:83:5f:59:d2:5f:1f:6f:c8:bd:a3:e8:
f6:f0:69:08:0e:8d:bb:c3:b1:f4:7c:63:d1:4a:ca:00:7c:66:
43:ba:04:dd:e3:0b:81:a3:fc:a5:ba:f7:28:12:c5:bd:83:ef:
72:55:e8:60:a7:9d:e1:2e:de:60:69:e0:1e:dd:63:97:75:3c:
b3:0b:c0:c9:c6:b2:b6:20:7b:f5:c2:0f:aa:49:b6:0c:5f:ac:
ff:74:e5:1c:ba:31:b7:0b:cf:1c:3d:d0:f9:9a:58:c0:a7:3d:
61:cc:4f:21:39:e9:ed:40:b8:66:82:84:92:c0:05:b2:66:75:
96:15:d4:f3:c6:9b:d5:88:1c:31:fa:bc:61:51:70:74:ed:3b:
7e:5c:4b:6e:4b:ea:27:d6:f8:e4:45:21:b8:99:48:b2:4f:38:
99:6a:15:81:fc:24:db:7e:f4:86:d7:58:f1:25:06:84:d9:cc:
8f:82:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org