Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
File: 69A7B940A99611EA92259418C4F9AE02.roa (raw, json)
Hash identifier: Nbn5OUeEgCChelaPzhMC4tzjd3/3P/R2gfgpPF4Pg50=
Subject key identifier: 9B:FB:02:3C:62:94:E8:11:12:9F:1F:79:CD:53:69:6B:E6:9E:3A:E3
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 067C
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
Signing time: Fri 21 May 2021 20:24:30 +0000
ROA not before: Fri 21 May 2021 20:24:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138954
IP address blocks: 103.137.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: May 21 20:24:30 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60a816fe-962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:e7:41:96:34:77:23:a3:bb:d1:80:e3:8a:
0c:fe:ba:70:64:5d:d1:cf:3f:46:06:8f:70:12:7b:
76:56:12:33:95:cb:32:69:c9:84:c4:f7:78:d6:58:
f1:0e:ea:cd:96:74:b1:46:f9:14:92:51:36:b0:e2:
c9:f0:7b:bd:c8:f2:c7:2a:aa:c3:b7:d7:f1:3d:b4:
5a:bd:19:ac:de:b3:21:7b:7e:60:51:dc:f6:e9:12:
d7:eb:d8:19:5a:f9:24:3e:c3:a2:b6:35:31:8b:87:
48:b1:d3:df:a5:b7:12:59:fd:01:99:e9:96:0b:6d:
ca:2b:64:f1:ae:4a:da:11:f5:94:db:ab:1e:f2:ba:
8d:4b:f1:96:5c:99:af:5a:52:b0:1e:75:d7:a2:c0:
c3:3a:26:e1:20:22:11:a0:c0:34:c7:a0:c5:0b:b3:
2b:00:7d:2c:f0:ed:be:f8:1d:89:52:29:48:fe:db:
a0:46:df:0b:46:1b:7a:f0:06:39:e2:ed:35:76:8a:
11:30:da:b6:9f:ec:b6:7b:44:8d:16:93:41:92:bb:
74:15:c1:a7:7a:d1:26:b0:da:3e:a9:9f:33:2e:e8:
70:4f:34:d6:ba:bd:70:84:e8:38:b6:fb:8d:fa:19:
91:55:9c:bd:0f:f0:82:fd:fe:91:69:0d:33:64:29:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:02:3C:62:94:E8:11:12:9F:1F:79:CD:53:69:6B:E6:9E:3A:E3
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/24
Signature Algorithm: sha256WithRSAEncryption
09:46:ae:aa:b9:66:2d:fb:32:9d:62:27:a3:fb:cd:10:00:6c:
49:9c:04:b5:8f:b5:45:61:c0:e2:f1:04:57:f9:36:ef:18:7d:
65:3c:2f:e5:1f:51:5b:f6:96:29:de:55:5f:6a:b7:07:0a:8d:
5d:8f:60:78:73:04:10:61:7a:a6:a1:a1:8c:ec:ae:a9:92:25:
d2:01:b2:21:1a:23:ae:5b:35:90:d1:6e:40:fc:1f:33:22:a6:
65:54:2b:12:b0:e0:f5:14:50:33:8a:bd:34:c1:ac:6d:fa:06:
f8:20:c2:7c:b2:af:1e:88:80:a6:f8:2a:10:6f:04:af:c6:49:
0b:e4:04:3d:45:4a:43:15:5f:a0:87:ef:80:d2:28:8a:9e:cf:
cd:59:d1:2d:62:4e:c6:fa:89:db:be:0f:46:75:3e:ac:b4:77:
bd:fd:6a:27:be:16:ef:4c:87:98:9f:8d:22:6d:e6:f6:d8:26:
f6:77:03:e4:29:cd:e3:87:26:f9:e3:2b:e8:8a:cd:04:c3:fb:
22:9f:de:c2:0b:67:1e:26:1a:52:30:a5:c4:1f:01:ca:c4:27:
c3:fc:e6:47:e6:81:64:5e:5c:df:1e:2c:94:aa:b1:f7:91:f3:
8e:18:f3:c9:4c:5d:6b:e8:96:ea:09:f7:33:6d:61:a9:dc:60:
9a:7e:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org