Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/E3198CB0BAB011EA9F412A3FC4F9AE02.roa
File: E3198CB0BAB011EA9F412A3FC4F9AE02.roa (raw, json)
Hash identifier: akgrpOneGZ65JXHOfmJt+brEm7j+0/ErgFICq7N34xU=
Subject key identifier: FB:87:15:9F:3D:2E:B8:1D:E2:6D:0B:FF:98:E2:A5:91:CC:4C:56:AB
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 040E
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/E3198CB0BAB011EA9F412A3FC4F9AE02.roa
Signing time: Mon 01 Nov 2021 11:28:35 +0000
ROA not before: Mon 01 Nov 2021 11:28:35 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 132827
IP address blocks: 43.248.216.0/22 maxlen: 22
103.6.240.0/22 maxlen: 22
103.15.116.0/22 maxlen: 22
103.144.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Nov 1 11:28:35 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=617fcf62-e53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:9f:62:e1:57:4e:ce:02:e4:96:1e:32:a1:
e6:be:4e:7b:0e:af:b1:21:c6:06:7c:ec:17:8d:66:
51:81:33:19:b7:29:76:26:e0:0e:78:34:0f:e0:39:
1e:d8:07:7d:d4:9e:42:f9:1e:1f:71:8a:00:c6:2c:
c3:37:40:2f:39:ff:e1:97:bb:b0:b7:ca:0b:31:d7:
37:ba:e2:45:78:11:25:18:ba:d6:6c:ee:ea:6a:6a:
47:df:80:1d:d0:f9:6d:2f:d1:65:1c:92:51:6a:75:
f0:34:ae:10:32:1d:4c:f2:a6:6d:2e:c3:ac:ca:7b:
53:17:be:7a:0d:fa:2d:0c:60:f8:a6:15:14:bb:f4:
95:b3:50:a2:8d:54:77:d1:63:96:11:74:28:06:78:
b6:25:f3:49:81:d7:f7:26:4c:1d:72:6f:9a:a7:c1:
9d:70:52:85:03:3b:68:94:3d:03:36:13:dc:0c:e3:
b1:1b:4d:4f:ab:48:9c:78:45:94:88:0e:76:fe:e5:
4b:83:88:48:98:70:f9:e9:1a:b6:aa:3d:5a:94:10:
48:66:b1:18:78:53:18:ce:f2:db:d9:89:bd:4c:93:
20:d1:c2:51:fd:5b:c6:bc:6f:7c:02:0b:52:a4:8c:
2c:8e:d2:36:8b:53:18:04:88:d3:97:1c:ac:e5:44:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:15:9F:3D:2E:B8:1D:E2:6D:0B:FF:98:E2:A5:91:CC:4C:56:AB
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/E3198CB0BAB011EA9F412A3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.216.0/22
103.6.240.0/22
103.15.116.0/22
103.144.202.0/23
Signature Algorithm: sha256WithRSAEncryption
40:27:07:07:f6:6a:49:59:4f:62:fa:57:6f:4f:ba:00:ec:97:
6f:89:d6:5b:89:b6:2f:70:71:22:27:c3:9f:b3:1d:97:6d:f2:
60:a4:60:69:ed:f4:7a:bd:9f:85:cb:0a:28:f7:92:d1:4c:ff:
81:6f:70:62:83:16:3b:3e:2f:78:8d:d1:52:4d:14:8e:11:bc:
f2:f4:c8:b9:c4:36:ce:d2:a4:9c:4c:51:9e:7a:68:72:9a:dc:
27:a4:14:67:a7:f4:3f:d9:ec:ea:8a:ca:4b:e4:ab:53:5c:84:
9c:40:52:bb:9d:a6:73:7b:fd:74:2e:48:a0:69:17:9a:f3:09:
25:4c:69:21:ba:a7:b7:67:d5:cb:7f:24:52:7c:cf:50:83:67:
f3:1e:21:79:3d:f0:cd:5e:90:f8:17:93:b7:17:ff:40:1f:0f:
c5:49:2a:b3:99:8b:65:fc:26:76:a7:ee:9f:98:b6:3e:94:23:
94:5b:b3:54:55:e5:5d:cc:f0:cb:05:0c:37:45:53:82:6d:c9:
f5:d0:16:01:cc:08:9d:8a:a7:9e:5d:95:0f:a2:9c:03:b6:49:
42:90:dd:21:fb:bf:33:2a:a2:c4:61:f1:53:3d:eb:4b:d7:0e:
e2:55:67:8c:fa:79:3f:99:9c:69:82:33:7a:f9:46:e6:09:60:
ba:cf:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org