Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/48706BA2F0EC11EB9D0B176AC4F9AE02.roa
File: 48706BA2F0EC11EB9D0B176AC4F9AE02.roa (raw, json)
Hash identifier: z65BJRvfK38JUrXYJ2RpxE2EDvB/h4yLjU+k7donBUs=
Subject key identifier: F7:20:1B:87:7D:FB:92:83:8B:CA:F9:5D:E2:39:6B:8B:63:24:72:8C
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 291A
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/48706BA2F0EC11EB9D0B176AC4F9AE02.roa
Signing time: Tue 07 Jun 2022 04:22:30 +0000
ROA not before: Tue 07 Jun 2022 04:22:30 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 56171
IP address blocks: 14.1.62.0/24 maxlen: 24
103.13.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10522 (0x291a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jun 7 04:22:30 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=629ed286-1541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:a2:05:07:8c:32:c5:61:72:6b:59:08:d8:
b1:80:20:c6:94:36:0f:33:cd:01:ab:f4:2d:5a:fe:
6d:01:07:99:49:26:29:fa:26:90:1e:67:02:72:fd:
0b:18:6e:53:b2:c0:3e:4c:6f:e2:2d:ed:64:65:56:
80:b9:d6:8e:c1:1b:bc:26:cb:53:c7:97:b4:90:b8:
d5:33:13:5e:82:3a:2c:b8:e4:6b:29:0b:76:01:db:
68:a8:78:2b:11:69:d6:5e:c3:56:25:f6:69:d8:52:
64:26:96:95:6a:79:aa:f5:8c:c0:39:6e:77:c4:30:
da:73:82:6b:69:2b:72:f8:ac:77:23:5a:14:60:62:
aa:8a:b9:8b:ea:55:18:ff:a5:cd:99:84:64:a0:5e:
60:f2:f1:63:12:9c:8e:5e:82:2f:b0:ea:fc:f1:1f:
f6:cc:3b:d4:e7:4d:06:2a:b8:65:64:31:65:1c:e2:
6d:ad:d0:2a:b5:e6:73:25:62:58:c0:18:b8:35:41:
56:79:a4:a1:e2:5b:44:47:94:09:ce:5c:c5:6d:31:
a6:5c:30:a3:34:f2:06:46:f5:a8:f0:c9:90:09:51:
ca:ee:ed:0d:10:bb:69:a9:e5:fd:45:10:52:10:8f:
f0:53:12:02:1b:5e:7f:e3:c4:2d:dc:f6:ce:66:ef:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:1B:87:7D:FB:92:83:8B:CA:F9:5D:E2:39:6B:8B:63:24:72:8C
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/48706BA2F0EC11EB9D0B176AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.62.0/24
103.13.119.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:f2:24:55:98:84:dd:7f:d9:73:b4:1e:96:ec:21:45:b0:
6f:16:9b:81:3d:68:85:c4:ac:4c:a5:fb:f0:42:47:9e:65:7e:
3b:2a:9e:03:78:b0:c5:5b:5a:2e:b6:57:38:76:60:de:5f:25:
1c:18:4a:04:a9:f9:18:ea:67:1c:b3:6e:5b:eb:86:57:8a:5a:
7c:d4:25:7c:39:98:09:6c:a3:0b:5f:9b:99:fd:5f:18:07:79:
d9:5e:b5:e1:02:35:b3:00:17:36:24:44:8c:a9:f4:c2:ea:1c:
43:dd:14:d9:24:e7:42:74:27:61:9a:93:a0:95:c0:a0:48:6e:
1d:80:03:d5:3a:de:89:b4:17:34:71:ad:a6:da:c8:3d:7d:cc:
1e:29:58:ae:5d:43:98:a7:f3:35:58:e7:1a:35:4e:30:36:ec:
fd:5a:4a:33:97:53:ec:ed:1b:5e:4f:25:77:54:4c:c8:80:ca:
a8:fd:e3:1c:b6:74:6e:85:32:62:fa:11:bd:47:36:bd:0a:6e:
37:d1:a6:25:d6:57:2e:ed:26:90:91:0d:30:f7:1c:d7:d9:33:
53:30:fd:4f:9b:25:1e:40:7a:76:23:14:4b:c7:ab:b2:e8:56:
73:57:8c:d4:ff:8f:ab:9c:26:e0:9d:7a:ad:af:f7:00:7a:a7:
74:c9:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org