Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
File: 062C47862F5F11ED85BCA15BC4F9AE02.roa (raw, json)
Hash identifier: UV/k4KwFLJG3yKQPMesVtUqus6giRrgR3skPvYntfgo=
Subject key identifier: 48:98:AF:F4:14:A6:AA:82:FA:23:2B:F6:B8:68:BA:76:8C:88:73:47
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 120D
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
Signing time: Thu 20 Oct 2022 15:04:41 +0000
ROA not before: Thu 20 Oct 2022 15:04:41 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 139734
IP address blocks: 103.116.244.0/22 maxlen: 22
103.116.244.0/24 maxlen: 24
103.116.245.0/24 maxlen: 24
103.116.246.0/24 maxlen: 24
103.116.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4621 (0x120d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Oct 20 15:04:41 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=63516389-81fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:8c:3f:b4:00:82:c9:d4:6f:de:8e:58:fa:
03:6c:38:ab:c8:26:58:8b:6f:d3:c1:d0:c5:b5:74:
3c:cd:17:63:a7:3f:d3:cb:2d:4a:0f:71:eb:93:2d:
c4:da:57:0c:67:7c:f4:6e:69:0c:a4:25:af:88:36:
fd:23:3c:29:10:62:bd:93:bd:ee:93:c2:64:ce:8a:
68:ff:22:84:55:2c:a1:09:2e:59:64:d1:64:39:4e:
a7:98:55:31:bf:0a:70:bc:06:cb:67:5a:55:03:99:
a3:e7:6e:31:b1:54:24:e1:37:fc:b5:8d:20:24:33:
61:37:eb:47:ee:8a:39:eb:19:86:f7:64:6c:58:40:
aa:f4:77:a5:63:18:e2:8a:fc:e4:2f:35:91:ad:17:
50:2c:37:b4:33:e3:e9:fd:44:02:0d:d5:c9:b2:43:
16:c8:48:c9:72:95:c6:54:59:ba:a4:b3:db:4c:4b:
4e:9c:2e:5f:85:b1:12:c6:ea:98:fd:74:94:48:20:
a1:b4:39:00:0a:ea:e4:e3:61:7c:8d:21:97:cd:ae:
c9:09:dd:37:c8:7c:28:41:3d:95:b5:b3:30:8a:8b:
ba:6a:bd:a7:d4:50:d4:fc:10:72:de:8a:02:fa:78:
74:74:1c:0b:4c:21:15:29:38:9b:3b:ca:45:d5:b9:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:98:AF:F4:14:A6:AA:82:FA:23:2B:F6:B8:68:BA:76:8C:88:73:47
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.244.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c1:ff:24:3d:da:d3:f3:f3:45:55:54:a2:41:8c:ba:14:83:
e3:6b:ec:9f:76:25:cf:8a:05:4a:13:e1:fb:c4:02:03:f3:1f:
21:09:eb:83:88:d7:93:4e:ed:a9:0f:45:1a:5f:fc:c8:a4:9a:
36:46:7f:68:77:f4:72:44:33:7e:13:1d:9b:4d:57:ba:d4:6a:
ad:2d:f5:61:f0:48:a5:7d:ab:eb:e2:7c:3e:0b:93:b4:c9:8b:
06:f9:a5:4d:19:77:65:f0:1b:93:e6:4d:85:41:67:c3:78:90:
a7:b6:9f:ce:45:82:5c:00:29:19:32:1b:97:87:8b:dd:76:fa:
c0:2a:d4:39:1a:8f:31:71:8a:b8:6b:05:0a:21:d6:72:ac:39:
e2:ef:01:6c:a3:cd:79:e2:ac:06:db:ff:d4:5b:ab:52:1e:e7:
d9:4f:26:d0:42:20:7f:8d:37:c2:f1:e1:b6:9a:f4:29:5b:61:
3b:66:8e:9b:d7:dc:d5:88:bf:e3:a9:6c:ba:72:83:01:f0:50:
ff:4c:24:42:67:af:ac:e3:73:41:a1:be:1b:e8:a6:9f:0b:24:
45:5b:c0:64:d8:b6:5e:2e:ed:94:a7:fb:ec:63:e5:1e:8e:94:
a7:79:3a:1e:d8:9b:41:ef:eb:37:e8:a4:0e:a9:8b:8d:9a:7b:
b6:ba:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org