Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/1450506A554C11ED90AB290BC4F9AE02.roa
File: 1450506A554C11ED90AB290BC4F9AE02.roa (raw, json)
Hash identifier: hfYKknPk7675Zfz8qkf7sz0scvjGwHNKtBU+s6vtfP4=
Subject key identifier: D2:A6:11:60:C0:67:FE:72:24:FC:C9:B5:F1:88:2E:F2:09:60:FA:8E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 05
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/1450506A554C11ED90AB290BC4F9AE02.roa
Signing time: Wed 26 Oct 2022 16:34:37 +0000
ROA not before: Wed 26 Oct 2022 16:34:37 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150311
IP address blocks: 103.250.28.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Oct 26 16:34:37 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6359619c-ea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:48:ad:5d:ef:b6:7a:46:2f:f2:8a:ba:2f:
3b:18:74:47:24:db:2b:81:c4:4f:98:aa:94:37:3b:
eb:9a:d5:84:58:c7:d4:39:5b:94:a2:57:97:d3:80:
a0:4e:62:09:dc:de:09:c6:d0:6e:b3:36:4e:69:42:
84:91:c2:d8:bf:11:55:5a:18:b1:01:06:d6:f3:10:
bb:bc:cc:ff:af:ff:02:96:0e:3c:51:c5:68:f9:72:
16:5c:89:d7:9a:4d:f4:ac:e9:ec:5b:fc:c3:57:fc:
0e:4c:73:bf:15:7f:51:61:f3:97:0f:3e:54:69:8c:
66:12:26:7c:52:f2:c7:d2:a2:07:91:cb:3f:64:4b:
f6:35:5a:28:d1:fd:d2:47:9a:02:06:80:66:0a:a4:
a7:91:25:47:7f:13:e9:84:79:ea:53:90:09:55:d7:
83:c7:df:57:78:15:7a:85:e2:f6:de:4d:80:9f:3c:
d5:49:d4:0a:09:9d:6a:ad:b4:f8:d4:23:4a:c4:a9:
4f:d8:18:0a:48:40:4e:83:79:1c:b6:f2:64:96:ed:
55:73:42:cf:a7:18:0a:bb:04:de:94:5f:c4:c5:51:
07:5d:71:5b:64:b2:f5:e1:1f:2d:9f:4a:61:ee:6f:
9b:fd:91:19:1e:eb:50:1f:66:73:0b:02:7a:d8:10:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:11:60:C0:67:FE:72:24:FC:C9:B5:F1:88:2E:F2:09:60:FA:8E
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/1450506A554C11ED90AB290BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.28.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:94:cd:40:5b:0a:30:8a:fd:ad:5b:6f:75:48:30:41:48:a2:
b7:02:f2:11:1a:f2:15:c5:04:89:52:f0:5c:aa:a6:75:55:aa:
05:16:2a:15:21:36:4e:6c:b8:34:c9:bc:1b:b7:83:db:9f:50:
6f:01:70:5f:8a:96:d6:0b:76:7d:99:51:56:6a:12:c1:37:dc:
ba:8e:cb:3b:dd:d9:32:f4:1c:9c:8a:d9:83:5d:7a:de:d6:26:
ed:1e:11:42:c1:3b:ef:8b:76:c4:0f:e5:a0:54:96:6f:d8:60:
40:2e:06:bc:5c:ca:31:24:fa:4a:64:e5:67:fb:a7:c8:8d:e4:
f7:af:07:be:c0:44:d1:f2:b9:66:ef:d9:47:b8:a5:e0:16:dc:
da:a3:7e:f4:f9:78:d0:cb:ba:6a:a6:1e:d0:bd:f2:6f:4b:b4:
da:a7:89:9d:9e:79:ec:2b:ae:84:ec:c5:b0:7c:a1:0b:bb:e9:
97:2a:7f:32:7e:b4:0f:7c:a9:33:cd:80:48:15:2e:d4:17:8c:
06:2d:3c:b0:69:5d:04:77:3f:6b:02:a3:89:c1:e0:4a:bc:bf:
26:68:5a:cf:63:de:0c:b8:24:45:f7:ea:48:22:2a:ce:bb:b2:
ca:dc:af:d3:7d:13:45:01:3e:d2:64:78:fd:23:37:81:cf:01:
9a:e4:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org