Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B396F53451CC11EE9CAE2116C4F9AE02.roa
File: B396F53451CC11EE9CAE2116C4F9AE02.roa (raw, json)
Hash identifier: CyoTzXp+kZF+N5gzRLUGch95llqXJDQf7dN1X/66Pjw=
Subject key identifier: 2F:DA:A2:81:9F:A4:FF:77:0C:B9:AA:2A:09:EF:31:52:B3:3B:39:C5
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 05F0
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B396F53451CC11EE9CAE2116C4F9AE02.roa
Signing time: Fri 13 Oct 2023 15:25:59 +0000
ROA not before: Fri 13 Oct 2023 15:25:59 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 45382
IP address blocks: 103.110.104.0/24 maxlen: 24
103.110.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520 (0x5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Oct 13 15:25:59 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65296187-82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:22:3c:17:99:72:0d:fb:ba:e2:de:0e:c7:
60:1f:2d:d0:cb:1e:f6:df:96:49:1d:e5:a8:d2:01:
11:39:25:e0:2d:48:f2:96:fe:4a:c6:65:f7:90:67:
2b:0f:13:bf:51:8f:a8:86:6c:ae:86:95:29:39:3f:
05:9d:43:81:0b:ed:42:28:0b:44:2d:92:c7:e4:04:
85:5c:d5:c0:bd:c1:3a:13:3e:25:e7:4e:27:78:4f:
14:8b:7f:db:e6:c1:82:04:81:8d:59:38:a1:02:80:
0b:29:71:fc:59:22:76:f2:f7:e0:83:bc:a5:c8:dd:
ab:7f:54:b0:dc:a9:0a:40:2f:3d:a2:60:72:12:ca:
af:61:b7:74:b1:96:37:aa:0a:fc:52:72:05:7f:39:
b2:fa:d2:74:47:a0:c8:e0:6b:0d:b7:c3:3a:87:9c:
61:93:d4:27:94:d0:a9:61:60:fe:13:11:00:78:64:
15:7d:87:d6:cf:0a:ee:65:e6:1e:47:ca:2d:a3:fd:
29:bd:8e:ff:f8:f5:e8:54:6d:da:fa:41:d1:4d:9a:
28:3c:05:72:e2:6d:99:22:96:81:f3:0b:93:62:56:
24:77:07:05:17:5f:3c:75:d7:76:63:97:71:de:4d:
5d:7e:0a:42:d8:d3:b2:78:b2:b8:d1:8e:d2:6c:ad:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:A2:81:9F:A4:FF:77:0C:B9:AA:2A:09:EF:31:52:B3:3B:39:C5
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B396F53451CC11EE9CAE2116C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.104.0/24
103.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8e:ad:17:84:03:47:06:2e:34:2f:de:3b:bb:70:d4:f0:09:
ef:7f:f7:89:91:73:40:e5:79:67:fe:ff:1e:df:fa:fb:29:68:
5d:3a:aa:63:f6:98:f9:37:3d:5e:c3:77:48:7c:48:3a:bf:f1:
83:00:88:55:8c:b2:cf:d3:f0:3f:80:ca:7c:0d:9f:ab:85:3f:
75:66:8e:1a:33:53:e1:01:0f:1f:8e:84:24:02:16:64:54:3b:
e8:ca:26:d1:10:3c:6c:9c:85:84:b3:92:0e:56:db:13:61:84:
b8:eb:78:ef:0c:97:73:cf:9e:a9:bc:42:c3:eb:00:61:54:00:
c2:d5:35:41:30:29:d2:86:32:41:62:76:1d:63:29:b5:98:72:
83:8c:d4:22:fc:4d:35:5b:fe:a1:83:f5:2a:d3:a1:fe:b5:4d:
71:aa:11:2f:54:44:be:06:07:c7:95:00:53:b2:14:59:da:d5:
91:75:ac:cb:60:bd:6f:ec:9f:7a:77:d0:5b:24:78:5f:79:dd:
2f:4e:30:32:a3:a5:61:0d:be:71:39:50:3b:17:27:09:e1:d9:
b5:54:bd:a4:33:70:1b:ec:7d:f2:bb:1c:d5:5e:fd:6c:f3:8a:
d5:58:3a:7e:9d:6a:45:7b:7e:76:ac:5c:97:b9:c7:26:73:af:
42:08:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org