Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/D7960EBE470F11EA9D35F650C4F9AE02.roa
File: D7960EBE470F11EA9D35F650C4F9AE02.roa (raw, json)
Hash identifier: nq4NXBVToWiK3vb68odkcjniE6xlWCVz6/oFknDbL0U=
Subject key identifier: E8:19:75:3A:5A:1F:1C:1F:36:D3:BF:8B:B2:30:A0:F7:C2:98:2E:78
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 097C
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/D7960EBE470F11EA9D35F650C4F9AE02.roa
Signing time: Tue 14 Mar 2023 21:08:09 +0000
ROA not before: Tue 14 Mar 2023 21:08:09 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 138623
IP address blocks: 103.134.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Mar 14 21:08:09 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6410e239-d3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:bd:f3:56:2f:57:25:b1:f1:72:0d:b0:7c:
1a:e0:4b:94:23:c4:a9:79:59:58:11:21:66:b1:8d:
11:3f:44:9a:3e:14:1f:1b:9b:30:2a:33:dd:67:5b:
60:b0:ac:c4:ad:cb:e1:1f:fd:b0:dd:67:89:7a:e0:
87:5a:be:93:6d:ca:22:64:a8:26:7c:03:87:6c:0c:
a1:c9:00:a4:db:c2:f9:54:e3:a3:bd:e2:85:e7:f1:
c8:62:6d:80:64:46:f0:d0:89:83:47:d9:af:f1:26:
63:d0:a9:89:4a:a8:2f:4c:e4:b8:fc:5e:63:94:bd:
14:a0:72:46:7b:8e:93:f4:9c:ee:fa:4d:3c:f2:81:
04:3b:16:e0:68:f7:9d:6b:a0:2c:1f:df:9f:85:d2:
01:cb:a0:94:65:95:07:c4:e8:03:cf:47:d0:69:63:
12:78:f5:5e:c6:8f:40:31:c1:75:fd:0b:83:bb:71:
bb:b7:ff:e2:f8:1b:9a:b5:95:cb:14:6d:a3:db:be:
83:45:40:1e:09:a5:5c:ef:6b:a9:32:33:e9:60:da:
8f:63:56:1d:0f:3e:7c:15:b2:2c:52:f9:be:ac:f8:
79:66:f4:2d:14:34:2a:bd:23:d4:32:04:be:4c:7c:
66:c1:64:fa:aa:18:a4:e9:cf:30:15:e2:69:6d:77:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:75:3A:5A:1F:1C:1F:36:D3:BF:8B:B2:30:A0:F7:C2:98:2E:78
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/D7960EBE470F11EA9D35F650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:25:47:97:8f:8d:96:3b:a8:23:66:fa:07:b1:25:16:c8:61:
9a:42:6f:d4:79:31:bc:a0:25:65:5a:db:63:95:66:7c:25:66:
0e:47:7b:7d:7d:32:be:c7:7b:75:ef:b3:aa:35:01:a3:7b:48:
a4:7e:53:eb:46:b0:aa:98:de:fa:9b:45:c0:cb:d4:47:b9:99:
90:bd:b2:20:8d:b5:9d:7a:b1:f7:f0:3d:39:c5:04:b7:e5:36:
ee:9e:68:8e:cd:78:1d:f8:be:44:6a:89:a7:fe:dc:57:44:3c:
15:b9:23:ad:c7:55:10:08:99:23:53:95:7c:32:aa:1d:0e:d3:
a6:9b:57:83:03:b7:49:c7:8d:b4:ff:2a:09:92:0c:ec:81:24:
72:25:e8:a6:26:18:d6:20:25:6a:9d:0e:99:9c:70:ce:c4:b7:
91:ef:b1:33:29:79:67:fa:ce:b0:a1:1f:51:53:54:f0:73:1b:
43:bc:59:0e:16:72:0b:28:af:74:31:a3:92:13:27:d2:76:03:
df:59:c1:ab:36:07:08:5f:2c:b1:92:b7:2d:f3:f3:f7:dd:25:
fd:68:95:1a:9d:14:2a:11:4d:9c:8b:5e:3d:9d:26:95:a2:4b:
80:ec:7c:09:4d:d6:94:6f:ac:d9:0e:4c:af:20:a7:4b:87:4b:
94:0b:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org