Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A6DAC264A0F011ECBAB8E063C4F9AE02.roa
File: A6DAC264A0F011ECBAB8E063C4F9AE02.roa (raw, json)
Hash identifier: YX43sQipbHDPu6+FE65MAIZqpm2qdEJK9bF9LCfo420=
Subject key identifier: 9A:D5:D3:24:64:FB:2D:B8:8E:23:43:CE:A4:6E:7E:0A:BE:B2:EB:03
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0904
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A6DAC264A0F011ECBAB8E063C4F9AE02.roa
Signing time: Fri 11 Mar 2022 04:06:39 +0000
ROA not before: Fri 11 Mar 2022 04:06:39 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 134806
IP address blocks: 103.135.138.0/24 maxlen: 24
103.135.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Mar 11 04:06:39 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=622acacf-f70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:00:1f:4c:3e:f4:ba:80:fd:f4:67:fe:7d:89:
94:68:0d:2a:f6:46:ca:71:22:89:d1:19:3c:86:ac:
45:51:ff:c1:a0:12:b6:d7:8e:d5:9f:1e:b8:37:64:
af:51:18:41:41:83:be:f2:74:d0:ed:f5:c5:05:03:
ed:92:52:3a:4f:bf:7d:a7:46:99:b3:fe:e3:b6:ed:
7c:e2:a6:45:62:d3:40:6e:2e:9c:c1:fc:69:11:2f:
89:9e:80:2e:a1:f0:8e:01:cf:d3:34:c7:b9:37:4f:
1a:6b:e2:74:37:17:20:cf:69:9a:5e:1c:ac:6f:55:
ac:a7:2d:3e:a6:85:53:28:5c:59:ef:2f:26:28:00:
67:c7:d9:51:7e:37:fb:53:c8:af:ab:7f:58:43:b1:
a9:1f:b4:2a:c5:18:e9:1d:b3:c9:f5:19:2a:47:1c:
fc:30:ca:f1:02:83:54:21:78:09:c2:a1:4a:dd:3b:
74:d1:4d:13:0d:92:e1:43:a7:7b:4f:03:50:90:91:
a6:65:86:a0:70:46:c4:9e:72:d9:90:a4:95:38:4c:
41:2c:d5:97:c6:b0:be:41:14:90:6f:6a:85:bf:2f:
97:14:a4:2d:81:f0:03:fe:a2:78:4f:5a:df:a6:3a:
e1:76:76:ba:07:28:21:49:8f:9c:61:f9:10:ef:82:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:D3:24:64:FB:2D:B8:8E:23:43:CE:A4:6E:7E:0A:BE:B2:EB:03
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A6DAC264A0F011ECBAB8E063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:bf:ae:07:ee:ea:07:75:d9:ae:a7:93:1f:89:5f:b7:48:1d:
6b:e1:02:16:83:3e:26:ee:34:f7:4f:cf:28:99:b9:f5:dd:d0:
95:6b:0f:7a:86:8b:e5:b5:b0:8d:e9:b6:9d:1f:08:4f:a8:6d:
e4:d3:57:08:a2:02:80:a1:d7:09:89:16:34:3e:01:4e:40:47:
6c:58:e0:d9:78:f8:dc:d6:83:b0:66:29:67:30:78:03:95:35:
83:35:a3:5b:19:3d:f0:10:49:65:ed:2b:88:86:b6:14:7b:25:
d7:02:4c:13:6e:c8:56:e3:d0:b7:65:a1:3c:4c:53:8e:75:7c:
b0:6b:a4:74:92:6e:02:b8:2c:0f:dd:50:8f:ec:88:00:10:70:
e3:b8:bb:67:55:69:e7:ff:6d:3c:a4:67:d1:05:b3:43:5a:30:
fd:00:01:c5:aa:e7:fe:fc:d9:3c:7a:2a:9c:29:89:e8:47:20:
1e:df:06:23:79:45:fe:43:cd:52:84:88:fb:da:52:95:76:f5:
d1:a5:f8:4a:bb:2e:81:56:0c:8f:53:83:d1:28:c8:91:6f:dd:
9b:08:7d:2a:3a:e0:6c:69:63:d9:91:c0:61:db:70:69:61:03:
5e:7c:7d:e5:cd:5c:31:69:1f:b1:72:25:55:54:8e:ea:96:70:
a6:4b:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org