Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/4B3CA2C2899711EBB37B0F7CC4F9AE02.roa
File: 4B3CA2C2899711EBB37B0F7CC4F9AE02.roa (raw, json)
Hash identifier: IEu6TzYpciA0hg1xnOZg094yEmTsgaALdkvBnR2VeYw=
Subject key identifier: F1:25:1D:0F:48:1A:80:91:6E:D1:33:46:F6:FA:8C:B1:B9:D6:2E:65
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0785
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/4B3CA2C2899711EBB37B0F7CC4F9AE02.roa
Signing time: Tue 24 Aug 2021 14:27:41 +0000
ROA not before: Tue 24 Aug 2021 14:27:41 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 137453
IP address blocks: 103.134.126.0/24 maxlen: 24
103.134.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Aug 24 14:27:41 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=612501dd-9897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:40:3b:86:22:42:c0:7f:66:5f:81:ec:08:
76:5f:b2:b5:f9:2c:8c:5b:a0:85:00:88:9f:c7:b4:
4e:7a:e4:1d:8c:7c:30:ab:33:43:06:c2:15:c6:15:
a5:1a:27:47:e6:81:5e:2d:0f:6b:96:18:ef:62:39:
c1:18:2e:84:ed:43:82:80:64:bb:d6:12:dd:18:0f:
e7:cb:8e:11:12:f7:8f:30:82:bd:4b:a2:19:43:0c:
30:03:57:b8:c3:f7:c6:c6:88:dc:1f:ab:35:91:1f:
04:4f:ff:06:20:2f:ce:b0:cd:ff:de:af:40:c2:ca:
be:11:e0:2f:94:94:50:d5:cc:f3:e8:95:23:3f:df:
0f:b6:82:37:4d:7e:46:f5:3f:cd:59:ff:1e:1a:e1:
cb:0b:07:c1:4e:ae:71:a9:f8:aa:c0:47:5f:05:29:
2a:02:14:c2:2d:89:d7:f2:ed:04:f3:00:ab:7d:79:
0d:81:72:a8:83:9a:bf:71:1a:e1:8e:b4:85:8a:b2:
cc:0c:14:91:c3:0d:6d:6f:af:22:44:30:e7:8d:ec:
e0:97:40:bb:d4:44:40:ef:f3:e1:1b:d3:9a:d6:43:
e2:44:02:56:ec:46:e3:61:6b:c4:cc:f7:ec:d4:c4:
d3:82:62:89:c3:d1:4f:ac:d4:92:20:f6:bc:0a:00:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:1D:0F:48:1A:80:91:6E:D1:33:46:F6:FA:8C:B1:B9:D6:2E:65
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/4B3CA2C2899711EBB37B0F7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.126.0/23
Signature Algorithm: sha256WithRSAEncryption
30:44:70:16:9e:dc:3c:a3:01:9d:63:54:df:f0:b8:5a:72:dc:
d4:69:20:95:86:fe:3a:f0:a6:0d:26:b4:e4:63:68:cb:db:4b:
dd:c5:b4:e8:44:38:d0:da:65:09:50:b2:03:93:da:a3:06:8b:
6e:83:f7:2c:34:93:54:c1:0a:71:74:8c:8c:c6:ac:3e:85:01:
ec:e8:d7:ae:a5:1d:25:2a:ab:bb:a8:67:5f:7a:45:66:62:58:
77:73:85:a3:76:5f:25:e8:6c:17:01:8e:a9:e2:de:36:02:20:
de:f9:09:cf:39:36:6a:50:18:b9:c8:90:81:9f:6a:64:ac:3c:
70:bb:88:7f:c0:5c:2a:71:73:0f:1f:2c:69:ca:77:bc:f7:96:
af:df:b5:99:3d:a2:08:db:ac:4c:dd:77:ee:bb:d8:26:ea:3e:
0d:ab:8e:e0:ce:d2:d4:08:bc:fe:df:5c:e7:22:74:13:46:9a:
5c:9a:bf:9e:d2:4a:5a:97:4d:9f:56:bf:16:e0:72:3b:50:bf:
75:47:b9:54:c2:87:04:95:fd:63:66:7b:28:e5:65:ff:29:7e:
e7:ac:7d:6b:1a:ce:65:d2:20:26:63:e2:ad:ef:ce:1d:5d:0e:
c7:c6:82:94:d1:09:5f:1a:c8:e5:c9:27:7a:12:e3:1b:8e:53:
38:0d:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org