Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/1463A63CE9F511EC8229670AC4F9AE02.roa
File: 1463A63CE9F511EC8229670AC4F9AE02.roa (raw, json)
Hash identifier: KokCRlLUZzD4U7/B7CxcmMOa1Y56XXBjzCKUdo3VzxQ=
Subject key identifier: 53:0F:E0:56:5E:B6:08:32:80:7D:B7:70:04:08:56:2D:56:A4:58:E5
Certificate issuer: /CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
Certificate serial: 02
Authority key identifier: 56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/1463A63CE9F511EC8229670AC4F9AE02.roa
Signing time: Sun 12 Jun 2022 02:12:16 +0000
ROA not before: Sun 12 Jun 2022 02:12:16 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 132721
IP address blocks: 103.93.46.0/24 maxlen: 24
103.98.112.0/24 maxlen: 24
103.98.114.0/24 maxlen: 24
103.98.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
Validity
Not Before: Jun 12 02:12:16 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62a54b80-88f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:37:00:1c:94:2f:f0:77:7a:05:ff:56:e3:
51:28:d9:a4:cb:92:a8:cb:c6:bc:1e:dc:53:cc:56:
1d:c4:19:c1:db:61:8f:91:6d:9e:19:e7:8a:36:a5:
1a:57:bf:22:6d:8c:76:a7:d3:b8:ea:e7:9d:2a:e2:
94:95:a5:77:11:03:11:4e:ae:9f:d3:00:de:b9:c9:
43:99:56:0f:ef:61:bf:0b:98:39:dc:8a:ec:4a:09:
5f:f5:46:5e:8a:b2:44:99:46:69:17:e9:20:2c:5b:
08:4e:40:32:2e:1a:70:32:a5:9e:36:1d:19:06:80:
62:26:d1:94:aa:d4:81:d3:1b:76:2a:bf:97:4c:b6:
27:88:d8:a7:5f:65:34:a4:1b:6b:58:7c:d7:d0:d9:
93:fa:bd:f5:40:dc:26:93:01:ff:02:55:59:df:83:
45:9e:19:55:ee:c5:51:fa:84:73:f7:e3:6a:4c:8a:
21:97:0e:bf:44:25:9f:a8:7d:06:c7:c8:c4:da:5d:
71:c7:d5:8f:b5:20:75:db:8f:9c:a8:8a:58:4e:93:
78:f0:41:53:14:37:68:5d:f4:96:74:44:d9:82:67:
e5:99:2f:ae:32:e6:1b:f4:40:dc:32:15:18:7d:9c:
42:c9:06:c3:2d:95:4d:7b:b6:0d:55:52:00:ee:e8:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:E0:56:5E:B6:08:32:80:7D:B7:70:04:08:56:2D:56:A4:58:E5
X509v3 Authority Key Identifier:
keyid:56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/1463A63CE9F511EC8229670AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.46.0/24
103.98.112.0/24
103.98.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:0c:7a:7a:0a:14:57:bc:10:c1:37:5c:1b:8d:24:88:7d:05:
75:9c:37:36:d0:45:9d:8e:0b:bc:9e:46:f2:29:40:7e:eb:70:
ca:c3:6a:e8:ef:9e:75:62:e2:87:60:50:92:7d:d8:31:e9:1b:
cf:00:bf:d6:14:98:9e:9e:69:96:78:70:0f:87:d4:3d:50:99:
7d:c1:15:b0:96:ca:64:c1:4f:55:3d:99:f2:5a:61:8b:e9:26:
60:39:c1:a9:db:81:1e:3f:30:e3:d9:4a:73:74:15:ce:4b:0c:
33:7f:65:03:5c:37:eb:1e:77:e6:22:99:3f:3a:9c:b7:97:c7:
33:a9:4c:71:f0:4a:c9:34:12:b2:45:c3:73:5b:ec:91:40:b2:
df:dd:6e:b3:30:5a:f5:c3:06:d9:64:5b:f8:ea:42:76:cf:fc:
7a:c2:fc:2b:d5:be:76:a5:6a:0e:6e:d9:32:54:10:c4:62:6c:
cd:34:b4:16:1e:b6:b8:46:46:d0:e3:5b:6a:e4:1c:c2:09:39:
e3:16:a2:09:b9:92:9f:b3:f4:62:84:3d:b8:05:63:81:47:b0:
e5:a4:45:6b:cc:05:a3:1f:2a:c7:0c:d6:25:0e:59:10:c2:25:
16:8c:5a:ba:89:1a:eb:67:6b:17:b1:dd:0c:57:17:86:e8:68:
7c:37:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org