Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/E2D5EFB2F67711E99D891024C4F9AE02.roa
File: E2D5EFB2F67711E99D891024C4F9AE02.roa (raw, json)
Hash identifier: pbpfpFzY8bzVPvknerD+ykfERkS065z55u9zEz0cxwY=
Subject key identifier: D0:EB:3B:AB:AE:AB:E6:7A:BE:A3:BE:F8:BD:87:27:96:E8:E3:34:CE
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0620
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/E2D5EFB2F67711E99D891024C4F9AE02.roa
Signing time: Thu 04 Mar 2021 19:54:18 +0000
ROA not before: Thu 04 Mar 2021 19:54:18 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 138612
IP address blocks: 103.134.124.0/24 maxlen: 24
103.134.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Mar 4 19:54:18 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=60413aea-c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:0e:00:2e:34:05:52:c1:2c:d6:a6:43:d5:
5d:b8:69:f5:37:93:e2:d0:94:d5:e0:24:76:97:3e:
5d:52:99:f4:04:36:de:59:9b:8d:5b:ab:f5:36:84:
dc:ac:80:94:56:44:d9:66:bf:a2:e9:93:72:e4:3a:
1c:de:ea:ca:ba:b1:04:75:05:79:1a:8b:63:08:b2:
e7:9f:19:67:3a:5b:5d:3f:f2:63:47:b6:d6:39:90:
f6:eb:51:97:1d:4d:b8:55:e7:49:58:c4:95:06:75:
93:0e:13:6d:88:c1:63:e3:20:2a:11:c3:9c:69:50:
7c:40:ab:0c:7d:66:c6:cf:58:95:51:71:ff:80:c6:
55:a0:f7:52:23:3d:e6:ec:76:61:f4:ae:1b:2e:59:
11:29:b7:f6:a5:37:96:49:28:6b:9c:8d:57:87:77:
f9:25:a3:c9:4b:83:5e:80:f9:8e:06:47:60:bd:28:
2c:cf:cf:10:22:7a:b2:2e:c8:24:8b:b3:4c:5a:dd:
cf:83:5e:37:ae:00:2a:94:e1:61:ef:09:d3:bf:55:
fa:60:39:bf:bc:67:dc:48:5a:52:28:7f:d2:db:69:
45:64:4f:20:49:75:cb:c4:44:00:e5:30:cb:e5:0d:
a1:0a:b4:09:96:0f:1f:72:2f:aa:d5:b6:5b:08:65:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:3B:AB:AE:AB:E6:7A:BE:A3:BE:F8:BD:87:27:96:E8:E3:34:CE
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/E2D5EFB2F67711E99D891024C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:6d:4c:ae:07:8e:76:cf:97:75:24:a5:fc:be:ff:82:3a:2c:
96:cc:54:66:ca:36:e9:dd:6d:b6:42:8f:1e:42:d9:a7:91:b1:
fa:de:02:17:d8:fe:86:87:b4:02:31:0c:e8:ce:8a:50:dc:81:
00:d8:5e:38:6a:46:e5:1e:8f:b5:24:cf:c4:c0:2d:7e:f6:1d:
34:c1:4c:53:18:1e:13:0f:a8:2a:c9:8c:9e:72:3d:89:4e:7c:
90:1e:45:9f:4e:43:01:b5:dc:06:80:48:96:3b:38:38:f9:20:
c4:4a:0b:8f:36:4a:12:3c:55:a5:19:3a:d3:6a:e3:15:fd:84:
8b:c8:dc:4d:e1:6f:48:41:ca:44:27:b4:62:1d:6c:bc:97:38:
50:73:1a:22:f9:5f:fc:85:bf:13:66:25:88:7d:f7:a6:65:28:
cb:ac:75:02:7c:66:84:13:2b:e3:96:03:57:13:f9:81:a6:de:
29:7e:f0:43:b1:66:8b:27:80:bf:fd:59:ee:fe:fa:41:58:a8:
92:07:08:b2:bb:f2:d7:06:bc:c3:a3:49:27:6a:2f:e8:45:b5:
53:1c:65:ba:52:37:14:41:e0:cf:42:16:b6:c8:65:98:33:b7:
99:c2:bf:c4:c7:79:a4:84:a3:9f:70:01:6c:33:d8:74:e4:52:
81:ea:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org