Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
File: A75E10CEA0F011ECBAB8E063C4F9AE02.roa (raw, json)
Hash identifier: 59h7MfrYb5Fk63ORwTNL4sPUFESsY6c3KYFEfE8Siss=
Subject key identifier: CF:74:D3:7A:FF:B9:75:8B:3D:0B:03:F0:D4:2B:D6:46:D1:2D:86:20
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0905
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
Signing time: Fri 11 Mar 2022 04:06:40 +0000
ROA not before: Fri 11 Mar 2022 04:06:40 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 59239
IP address blocks: 103.135.138.0/24 maxlen: 24
103.135.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Mar 11 04:06:40 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=622acad0-17f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:7a:47:87:de:7c:00:d3:0b:b4:29:ce:a5:
8c:c0:a5:cd:69:52:73:4a:a9:8c:99:74:0b:71:3e:
21:50:29:3a:2f:17:46:8b:04:9a:c9:00:d0:a3:35:
cc:9c:6e:73:4b:87:1d:cd:12:9d:6f:66:28:44:1f:
e1:ab:1e:db:2f:4e:17:62:d5:d6:c1:88:82:22:e8:
ac:d0:6f:3c:5a:92:81:be:21:de:ce:b4:21:15:fd:
40:b1:e3:30:fc:33:4d:8e:95:5a:cf:e5:04:2e:ea:
b6:8d:98:9b:81:9d:d7:11:a3:78:76:6e:ca:cb:44:
a1:8b:e6:59:8a:1c:e5:3a:07:9b:8f:22:27:ff:7e:
dc:75:7b:d9:42:8e:b7:3a:21:a0:8d:57:cf:0d:e3:
85:e0:07:48:88:1d:a3:80:08:4f:8a:4b:7b:18:7a:
eb:34:4d:1b:96:84:6d:cf:1d:0b:13:55:2e:f8:6b:
79:09:d4:07:22:67:fc:95:04:b5:79:ef:36:33:09:
52:bc:fa:48:2d:e9:f5:93:80:1b:f7:27:4b:01:9a:
d6:e5:48:43:6a:ad:2f:f6:a1:76:61:ef:60:1c:40:
4d:da:f0:a8:3b:9d:1e:08:84:4f:d0:ae:8d:74:30:
4f:d9:3d:0d:3c:08:c1:a1:55:ca:b2:15:9a:b4:15:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:D3:7A:FF:B9:75:8B:3D:0B:03:F0:D4:2B:D6:46:D1:2D:86:20
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
54:9a:e2:10:ad:fb:d8:af:6f:80:a4:26:7b:4d:42:0c:bb:72:
d0:58:65:21:24:9e:61:20:92:af:ef:be:a0:d9:7a:9d:3e:e1:
32:27:2c:a4:01:a0:34:0c:f9:6c:3f:30:5c:b1:47:09:ce:dd:
ca:18:4d:ac:66:ef:2c:b1:90:c3:08:ec:44:65:cb:e7:22:36:
18:da:aa:82:f9:3f:66:57:84:94:93:75:61:2b:b4:a2:3f:de:
46:47:23:c1:13:9a:b0:62:20:65:5c:ca:c1:81:02:8c:1b:96:
ec:a4:01:96:cb:e5:c5:5a:12:5d:28:58:ee:f0:4d:c5:d3:43:
70:9c:e1:32:a3:48:fc:f1:28:b3:81:ae:5a:7b:db:74:2c:f2:
c4:81:f4:7d:4b:42:02:3b:3a:e0:de:d5:7f:63:07:d6:e1:97:
1e:eb:9a:6e:b6:63:c5:74:88:92:21:fa:bb:0e:7d:9e:59:8c:
24:9d:01:2b:74:b4:61:68:bf:63:38:3a:d6:2a:68:a1:4a:09:
bd:44:d5:00:e3:e4:80:cc:ae:76:5b:d0:cf:9e:56:e5:fe:ab:
57:ed:c2:45:97:ff:18:9b:d3:fe:a1:13:65:31:7e:4a:02:b4:
de:b6:3a:0f:e6:01:bd:ee:f6:b1:a8:38:67:87:a3:35:47:32:
83:fa:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org