Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/45C17C80CBBA11ECBC60D142C4F9AE02.roa
File: 45C17C80CBBA11ECBC60D142C4F9AE02.roa (raw, json)
Hash identifier: 3Ovic3HmR8VSTLK82vAB/WwWPoSURIJ8gtoMxeqGfzU=
Subject key identifier: D2:95:10:74:BE:50:C4:EB:9A:5E:94:66:2F:1A:CE:9B:0F:C9:C6:EA
Certificate issuer: /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial: 2D
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/45C17C80CBBA11ECBC60D142C4F9AE02.roa
Signing time: Wed 04 May 2022 14:55:44 +0000
ROA not before: Wed 04 May 2022 14:55:44 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 133929
IP address blocks: 103.141.224.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Validity
Not Before: May 4 14:55:44 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=627293ef-3fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:01:2b:9b:68:73:d1:2d:af:b1:68:18:d1:
98:80:2b:27:6f:87:6d:50:6b:cf:90:6b:83:68:d2:
6d:07:5a:89:7c:a6:b7:13:65:17:ac:27:6f:ae:ea:
31:97:9d:39:fc:b8:7c:3b:9e:8b:cb:12:5d:6d:64:
8e:21:42:f3:09:c8:d5:3f:36:7d:13:28:88:3e:94:
30:2f:5c:e8:89:0a:7d:9a:40:8b:44:03:e2:07:5b:
91:f6:62:6c:1d:80:0a:b4:24:e6:1a:ae:98:ce:26:
1a:78:b0:7d:3e:9b:e5:2c:71:dd:3b:42:f4:f3:3c:
e1:fb:1b:16:c0:b0:82:fd:1d:ff:24:39:f8:18:d9:
9c:51:95:4e:99:9e:11:c1:63:fb:3f:38:6a:63:f5:
3b:09:10:1e:56:72:8a:12:ba:64:38:13:a4:35:c6:
5a:22:a5:1a:33:47:51:9f:48:29:49:15:cc:fb:8b:
e0:50:ed:5b:2b:7d:c7:4b:c1:8d:59:e9:73:46:fe:
8d:36:8a:0c:cf:01:27:6f:46:f8:28:00:1e:4d:83:
cf:4a:4f:d8:52:14:f7:de:43:93:d1:3d:b8:79:04:
c8:a0:46:e7:c8:ba:ad:2a:c0:3a:71:d5:00:a0:e9:
91:63:c9:61:4b:7a:8e:b7:54:75:c2:51:25:cf:2f:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:10:74:BE:50:C4:EB:9A:5E:94:66:2F:1A:CE:9B:0F:C9:C6:EA
X509v3 Authority Key Identifier:
keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/45C17C80CBBA11ECBC60D142C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.224.0/23
Signature Algorithm: sha256WithRSAEncryption
16:a5:35:c4:6a:86:e6:6c:67:dd:50:b0:0b:32:f2:56:95:ca:
e5:84:4f:c5:0b:1d:30:e0:0d:bc:44:35:37:b8:bb:d4:dd:f7:
4c:c1:fe:6d:d4:d1:68:43:22:50:52:f5:0e:f4:fb:01:ae:b3:
64:f6:15:c1:ff:99:f5:b0:40:b5:de:27:a7:50:4c:aa:75:c4:
d0:f3:ec:4d:73:3c:d6:06:59:6b:4a:f3:b8:de:1d:23:23:d8:
65:48:d6:be:31:1d:4c:45:bd:70:b2:40:9a:53:9a:d4:34:32:
2b:fc:69:2f:32:bf:d3:40:de:ee:fb:bd:1a:c9:a2:67:a8:cd:
ec:1f:cb:2d:8d:be:6f:f1:03:65:a7:93:51:9a:d7:9a:ce:ae:
f5:b3:fa:74:64:85:d7:15:99:78:ef:6a:be:9c:6b:fe:11:51:
83:f7:f0:71:df:6b:df:c3:4e:24:57:bd:c5:c5:8b:88:ea:e7:
fe:94:db:ad:5f:e1:96:60:57:12:d1:13:1e:3f:ba:ce:13:94:
27:f0:53:7e:f8:8b:be:38:95:99:27:ba:56:11:88:fe:65:ec:
60:1b:b6:10:55:95:f0:e5:c8:d0:9b:f0:8e:06:6d:a7:f4:c0:
a2:e8:e6:28:a0:c4:ea:fe:25:bf:41:3e:be:08:6f:2a:19:46:
fd:75:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org