Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/8F5A1D640AE711ECB799F60AC4F9AE02.roa
File: 8F5A1D640AE711ECB799F60AC4F9AE02.roa (raw, json)
Hash identifier: 9OdtfLKnJMExnEwKTbwk/+ieQETxn3NbNMA+1huyiro=
Subject key identifier: B9:46:37:9B:EF:67:D8:1F:93:FB:2C:FD:D1:F9:5B:86:2C:43:E8:EF
Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial: 1650
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/8F5A1D640AE711ECB799F60AC4F9AE02.roa
Signing time: Sun 15 May 2022 17:23:54 +0000
ROA not before: Sun 15 May 2022 17:23:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136479
IP address blocks: 103.89.152.0/24 maxlen: 24
103.89.153.0/24 maxlen: 24
103.126.4.0/24 maxlen: 24
103.126.5.0/24 maxlen: 24
2001:df0:d500::/48 maxlen: 51
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5712 (0x1650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Validity
Not Before: May 15 17:23:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281372a-99d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e9:5c:87:c8:17:89:5f:10:17:3a:56:80:de:
61:55:3c:dd:9f:c4:04:a3:96:2b:03:15:84:b5:fa:
e2:a6:85:8a:23:30:99:7a:24:45:ac:75:32:f4:e7:
97:30:f1:9e:6c:f5:a1:bd:90:5e:09:13:cc:30:9b:
0e:8d:1b:b6:75:df:c8:42:10:36:0a:74:e4:cd:9a:
c7:c6:90:17:0e:bf:4f:37:c0:28:ef:ec:6c:2f:a1:
aa:52:e7:05:4f:76:40:a4:fe:e7:13:31:5e:a6:8f:
f6:70:fa:0b:37:01:a8:25:67:d7:8b:31:f9:9a:aa:
11:46:17:a4:19:18:00:99:61:b5:91:f7:9c:ee:69:
c3:72:e6:a1:ea:2b:b2:c5:61:99:b4:6d:08:d9:15:
6b:8a:4f:87:1c:8d:c5:dc:8d:58:d0:a2:5b:ee:af:
9f:d1:bf:cc:ee:54:b1:b1:b4:6e:1c:da:cc:11:60:
e8:03:6d:f7:72:bc:80:e3:8b:24:15:bf:4a:89:ef:
aa:1b:68:a1:7c:bb:3d:43:42:82:1d:b6:fc:bc:3e:
20:f1:cd:18:c7:ef:d2:dc:df:4c:64:86:fe:d6:cd:
b3:61:c2:99:31:89:03:db:3c:92:e9:84:c8:a0:b9:
44:0d:d6:ff:7c:dd:35:fa:2f:d8:56:dd:b6:95:72:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:37:9B:EF:67:D8:1F:93:FB:2C:FD:D1:F9:5B:86:2C:43:E8:EF
X509v3 Authority Key Identifier:
keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/8F5A1D640AE711ECB799F60AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.152.0/23
103.126.4.0/23
IPv6:
2001:df0:d500::/48
Signature Algorithm: sha256WithRSAEncryption
47:d0:cb:88:c3:96:4d:ea:c9:87:8c:fc:24:65:0a:3d:3d:18:
09:68:89:1e:bd:20:f3:c5:f9:d3:b2:b9:40:e0:f7:8e:19:f1:
95:53:6e:04:04:1a:e4:62:b0:b6:3c:fb:f1:36:df:7c:d4:c4:
35:27:6c:26:b0:0c:cd:07:8d:df:2d:33:73:66:29:d6:ba:f9:
89:18:21:2a:3a:d2:74:83:7b:1b:3f:9f:27:7c:dd:30:dc:0c:
2d:2c:a5:07:a1:02:0e:52:77:54:34:10:89:3c:57:ee:03:e8:
11:65:ca:42:85:9a:8d:e2:bc:13:9a:63:8c:9b:e6:47:8a:c1:
27:b7:6e:78:5a:8c:5d:80:64:c3:14:48:c1:92:00:2f:ac:5b:
64:16:92:a3:c2:5c:f3:a8:0c:a7:b7:2b:31:e0:95:8e:bf:27:
d7:b6:40:33:a3:13:6d:e2:60:fc:d6:eb:ed:2e:20:7d:90:e2:
0e:8f:a7:14:11:57:52:2e:d9:15:17:81:bc:e6:77:84:59:26:
83:db:67:1e:ac:e1:06:b2:31:c2:93:21:4c:5f:25:1d:8c:9d:
eb:90:86:ea:40:41:e6:55:47:28:4e:15:22:3c:e5:a1:a1:c0:
0a:f0:44:7d:84:7c:0d:10:00:2e:15:82:01:89:4a:80:e8:92:
60:15:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org