Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/30AB4A7641ED11EC9B02377AC4F9AE02.roa
File: 30AB4A7641ED11EC9B02377AC4F9AE02.roa (raw, json)
Hash identifier: iSUXwLLWmqKl0ElTFQWKTgS6diIsmez2hswE6HqoAvk=
Subject key identifier: DC:F8:6D:7F:E3:13:C2:29:0A:96:34:08:F1:B4:C9:9D:4E:06:CC:7C
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 0138
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/30AB4A7641ED11EC9B02377AC4F9AE02.roa
Signing time: Mon 10 Jan 2022 15:22:00 +0000
ROA not before: Mon 10 Jan 2022 15:22:00 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 132502
IP address blocks: 103.31.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Jan 10 15:22:00 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61dc4f18-bc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:b9:c1:ba:7e:b7:7e:a2:e6:5b:d4:79:0a:
d1:f9:f7:36:93:6a:53:f0:2a:ee:58:c7:66:9d:d8:
97:40:e2:c9:e3:21:a8:18:9b:18:2e:50:14:a8:62:
0e:a7:56:d5:44:0d:ef:58:09:cf:a1:d1:28:72:5c:
70:af:09:af:76:65:1a:f1:29:13:53:04:a5:13:be:
b0:af:1e:08:a7:87:ed:c6:95:cc:07:af:e9:00:96:
a2:86:8e:6d:df:66:1d:dd:fd:69:83:03:09:ce:62:
a6:7c:b6:17:bb:c4:30:98:2b:8a:78:78:4f:d6:c7:
1d:25:e6:2b:e1:94:ac:69:d3:9b:30:b5:ef:57:51:
a2:4f:dd:cd:e2:84:e7:2a:c1:2a:9b:cd:7f:86:a0:
5f:ef:1d:a2:1a:fc:81:c7:9d:07:4c:dc:c3:4b:08:
33:da:e7:b8:7a:03:b0:39:ad:01:72:fa:3a:d2:8d:
ad:83:32:a1:86:2b:a7:f3:c4:1d:1c:2d:17:0b:4d:
a1:39:2b:ff:29:6c:0a:c8:88:19:4f:cc:b1:9b:54:
06:fb:52:3e:e1:03:f6:18:ec:d3:5b:db:94:36:3a:
b6:59:af:eb:43:1a:78:2a:1a:28:a0:1c:84:00:d5:
1b:2a:8d:f8:dd:26:be:52:89:9e:6d:61:e7:14:ae:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:6D:7F:E3:13:C2:29:0A:96:34:08:F1:B4:C9:9D:4E:06:CC:7C
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/30AB4A7641ED11EC9B02377AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.211.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c9:6a:3f:26:87:4a:f1:91:4a:b3:03:b9:2b:84:bf:e7:b2:
d5:6b:27:ac:9f:6f:e1:88:b3:24:77:80:34:b5:83:00:04:c6:
d8:a3:ca:08:4d:89:b1:ab:21:56:99:1b:cb:5b:cf:17:ed:d9:
f7:aa:cb:5d:5a:16:00:65:a4:fb:ad:1d:00:b8:59:d9:dd:f1:
03:c2:9c:07:c4:dd:df:37:cf:9d:49:8c:f1:5e:1e:31:8e:ce:
aa:ab:e5:73:0e:d1:cc:7c:72:4e:63:43:63:79:06:84:66:f6:
d6:0f:b3:89:05:a1:d0:d7:72:25:2f:3e:71:b5:62:29:c5:77:
78:95:75:e7:e9:a3:40:8c:12:bd:74:52:cb:73:d4:25:8e:d1:
dd:b7:27:9e:0d:d0:fd:7b:2c:44:5f:c7:b5:8f:a3:57:28:1d:
87:8b:93:f2:43:c4:40:ee:0d:c6:ab:0d:93:a3:db:c9:d4:f4:
19:eb:6f:71:4d:8b:38:c3:f2:30:ae:4e:61:71:61:94:cc:33:
21:19:9a:15:03:d7:30:6b:2c:ee:3c:9b:39:15:74:42:5f:09:
33:2a:0d:d9:e1:2e:a3:7b:46:8e:3e:32:7a:1a:53:ef:8b:8a:
85:a9:40:56:17:d1:f4:91:aa:44:a1:4b:b3:ef:e7:1a:4b:12:
83:02:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org