Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/546A60C2BDD711EBA2F49016C4F9AE02.roa
File: 546A60C2BDD711EBA2F49016C4F9AE02.roa (raw, json)
Hash identifier: xF4PIyh2fgdPEfVbCg/8Qkn7t1o5xv5HcHETG/s1UO4=
Subject key identifier: 3E:63:E0:36:75:67:C2:CD:2D:A6:34:53:FB:16:A4:96:C2:D7:1D:5F
Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial: 03D9
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/546A60C2BDD711EBA2F49016C4F9AE02.roa
Signing time: Sat 02 Jul 2022 13:10:37 +0000
ROA not before: Sat 02 Jul 2022 13:10:37 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 133441
IP address blocks: 103.151.228.0/24 maxlen: 24
103.151.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Validity
Not Before: Jul 2 13:10:37 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62c043cd-3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:be:f6:71:50:92:e4:29:c5:db:2a:da:78:
cf:15:e3:6a:71:06:86:10:ab:1c:9f:03:99:7e:fc:
3e:d7:e6:92:2f:75:b5:e1:35:e6:52:3b:e9:5f:4d:
df:e0:e9:05:a7:8e:18:46:1f:35:fb:97:48:e0:f7:
68:d9:97:47:4c:8f:09:fd:30:f0:fb:35:be:88:1e:
44:b5:2a:2f:75:28:75:c2:77:ec:b3:f3:f4:9a:97:
b4:53:2d:33:9c:a2:64:89:87:29:a5:e1:fc:91:24:
a0:ae:5d:84:46:da:16:52:45:54:ee:d9:07:61:b4:
9c:5a:b5:70:94:38:eb:dc:1f:2a:0c:ad:17:77:dd:
f3:e9:bb:cc:3e:ca:02:8b:fb:b7:99:83:b3:2d:6a:
58:6a:46:b8:72:eb:70:2c:6f:74:32:eb:80:79:cc:
60:49:f7:4c:dc:b0:c0:7e:f4:4b:33:90:0f:ca:63:
91:3d:2a:1f:99:3e:16:de:b8:57:4e:45:66:25:7c:
bf:1b:7f:6b:ff:ae:eb:73:a5:3e:d5:f5:03:10:9e:
a4:78:81:c3:d8:03:da:e9:06:95:d9:c2:06:23:e8:
5d:83:ce:5f:29:5a:e8:4f:fa:52:32:c6:c8:55:09:
50:19:03:3d:94:db:4a:cd:13:aa:38:4f:15:7c:13:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:E0:36:75:67:C2:CD:2D:A6:34:53:FB:16:A4:96:C2:D7:1D:5F
X509v3 Authority Key Identifier:
keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/546A60C2BDD711EBA2F49016C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:82:51:d5:b7:37:f0:f4:63:30:f0:42:70:85:3a:5e:f1:87:
77:7c:b1:cc:a4:4b:c9:b8:20:9b:a5:24:f1:ae:78:9d:66:1d:
22:f8:49:4c:4d:08:7c:71:4a:46:fc:f0:f5:2d:b4:de:8d:8f:
80:7d:36:56:85:59:65:93:14:73:33:95:ea:10:f1:ae:93:3b:
d9:16:f9:ff:b4:85:42:f1:34:6c:81:b8:0a:35:68:5c:f9:0a:
7e:8b:e5:82:b1:13:f5:a8:45:02:a3:1d:ab:db:cd:aa:66:2b:
18:b8:6e:3f:ea:a6:55:92:3a:3d:b5:49:48:e5:34:45:3e:f9:
3f:31:53:b4:d9:19:d9:eb:9e:dd:a1:83:95:17:52:b9:d0:b8:
72:7f:78:b2:b2:24:b2:1b:b3:5d:9e:5d:65:33:70:65:82:eb:
47:37:87:32:73:61:6a:bf:02:22:cc:7a:2f:dd:4a:b6:42:14:
e5:b6:e8:aa:35:50:5b:a0:f2:13:f4:df:9b:62:51:15:14:08:
69:d1:ac:3a:43:75:5b:6a:07:e0:87:21:88:80:d6:6b:75:f2:
12:cd:3b:40:c9:fc:de:17:32:f6:74:fc:49:55:68:e4:e3:80:
67:e9:77:1d:42:02:77:70:bb:05:8c:9e:3d:2b:bb:a3:3c:03:
b6:f7:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org