Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
File: 8B44055EED5011ECB1C96925C4F9AE02.roa (raw, json)
Hash identifier: w0Hu3TEVtlh4Xh/2otenU4qcQmyI4Iu/ktSJceRbDeI=
Subject key identifier: 5B:EB:2E:4C:0A:A4:52:E7:51:51:2B:3B:D5:3A:05:D3:8E:E2:F3:0D
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 04
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
Signing time: Thu 16 Jun 2022 09:11:46 +0000
ROA not before: Thu 16 Jun 2022 09:11:46 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 208171
IP address blocks: 103.189.190.0/24 maxlen: 24
103.189.191.0/24 maxlen: 24
2001:df0:d840::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Jun 16 09:11:46 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62aaf3d1-f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:63:a1:2e:7c:14:a9:6e:ef:cd:7d:c0:80:
71:53:df:2e:a5:40:99:10:03:d4:eb:d0:5f:df:78:
bd:72:f5:5e:51:16:dc:2c:3b:41:7a:9b:4a:c4:fc:
5b:64:06:dc:c8:d5:10:e1:8c:43:dd:33:9d:cb:b6:
ce:00:9b:e4:63:e9:be:f5:22:2e:20:b2:25:68:ef:
57:5e:fd:f2:6a:b8:7b:a8:58:13:24:ff:34:c5:4e:
b7:8d:6c:d0:46:aa:5d:02:9b:f1:b4:f1:c6:4d:93:
71:bc:45:74:bb:d4:55:8d:48:c6:0a:6f:d8:16:1e:
e0:c3:24:9f:27:61:fc:41:0c:8b:7d:12:dd:32:06:
9a:ba:18:f5:3d:6e:0c:d2:c2:29:36:51:31:5e:56:
64:21:42:7b:6e:cb:ab:0b:aa:41:19:18:b0:44:29:
64:b1:0a:bb:06:58:c2:53:43:56:41:22:f2:56:01:
31:0f:9c:3b:3c:34:3f:7f:dc:1c:5c:43:30:9d:4f:
8a:df:2c:90:0d:ca:6e:3d:2b:2d:92:79:1c:3c:2d:
06:14:7a:fd:af:9d:e8:da:c9:51:bd:36:a3:9c:88:
7e:94:c7:13:8a:90:70:2a:cf:58:7a:20:d7:50:18:
4b:6e:db:9f:8b:7a:1a:63:e7:32:9c:94:8e:8f:1c:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:2E:4C:0A:A4:52:E7:51:51:2B:3B:D5:3A:05:D3:8E:E2:F3:0D
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.190.0/23
IPv6:
2001:df0:d840::/48
Signature Algorithm: sha256WithRSAEncryption
96:7f:34:1d:3b:4a:67:5a:db:c0:d2:cd:32:fb:26:2c:01:94:
55:14:72:ee:64:63:da:c9:ca:e5:44:d0:69:88:56:62:94:3c:
d2:65:23:81:94:29:d6:67:ba:b2:7e:d0:4a:b3:d8:d1:68:0d:
fa:48:62:90:4f:69:24:84:d8:63:14:ba:49:94:54:50:87:4e:
48:4b:63:d7:c9:0d:03:ac:60:23:ea:c8:64:31:e7:e8:e5:5d:
1d:bc:9b:8d:49:07:90:a1:a2:27:2c:03:97:df:e3:72:18:b5:
57:23:5b:03:98:86:98:31:ce:32:d2:81:b6:5a:96:90:9d:ec:
05:74:9f:a7:95:72:5a:ba:bc:59:83:e8:07:60:82:de:19:9d:
89:22:f1:e6:94:7d:7d:67:96:dc:df:ee:ff:56:6e:8a:9b:d9:
52:8f:89:fa:5e:1b:86:ac:81:da:7a:99:45:5e:7c:2c:aa:ac:
91:ea:e1:9b:9e:0f:4f:94:d0:50:af:83:a9:0a:97:1f:03:99:
ed:b4:d2:af:c2:04:b1:8d:b3:00:1d:0f:73:c2:83:c5:56:b9:
ac:b7:a3:1f:05:bf:32:3b:fc:98:e0:96:cd:1b:0f:87:58:38:
51:ef:a2:c3:c2:a2:c6:22:32:49:a7:17:22:fc:0d:fb:5d:5e:
41:9b:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org