Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/940DB79EA8C111EC82C6CD3AC4F9AE02.roa
File: 940DB79EA8C111EC82C6CD3AC4F9AE02.roa (raw, json)
Hash identifier: tfO7pJMfNY35Oio9eu/Tkbfz7JvfWC2cBgOfSNIU5oA=
Subject key identifier: C3:9B:70:39:A3:12:12:3A:38:1F:F9:FD:E1:D5:6B:DD:FA:3D:E1:92
Certificate issuer: /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Certificate serial: 0413
Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/940DB79EA8C111EC82C6CD3AC4F9AE02.roa
Signing time: Mon 21 Mar 2022 02:49:51 +0000
ROA not before: Mon 21 Mar 2022 02:49:51 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 7545
IP address blocks: 103.145.116.0/24 maxlen: 24
103.145.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Validity
Not Before: Mar 21 02:49:51 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=6237e7cf-9b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:d8:34:da:81:84:00:a7:4b:1d:b9:f6:bc:
26:32:d6:8a:c7:bc:98:bd:1e:91:ea:04:4a:02:59:
a7:e8:f2:48:95:5c:81:b3:fb:54:54:5b:dc:15:76:
63:69:c9:85:e1:1a:d7:f1:4d:90:35:b5:0f:e5:1c:
ad:c3:0f:ed:78:ed:60:a5:a2:5f:b1:df:d9:f2:98:
4d:3a:b7:7a:2d:d2:4d:2e:c5:0d:b2:87:f4:45:5a:
7a:99:a8:63:fb:6c:e0:a8:4a:74:2f:86:c4:63:0c:
e3:e0:9c:f0:00:90:62:1c:6f:ea:ce:5f:c5:19:3a:
25:7f:71:7a:e2:c8:9a:57:26:dc:41:44:20:fb:aa:
21:f7:31:09:35:47:e9:b5:02:35:e4:05:28:1e:17:
0a:68:c1:c3:f4:27:e8:9a:63:1a:0e:87:10:be:d6:
5c:36:3a:1f:55:17:34:a4:43:5e:b7:7b:19:3b:0c:
a7:a6:2b:39:e3:e5:19:28:64:b8:cf:31:97:28:e7:
b2:c5:81:12:0a:d1:ba:97:53:28:f1:ed:07:f6:86:
5e:2a:8e:33:07:bb:d2:cc:70:08:49:24:10:dc:11:
ea:27:0e:a6:d3:d3:5a:c0:d9:20:33:d2:10:e6:c0:
02:e1:1f:af:ac:0b:b2:4c:80:d4:b5:b6:1d:b0:3b:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:70:39:A3:12:12:3A:38:1F:F9:FD:E1:D5:6B:DD:FA:3D:E1:92
X509v3 Authority Key Identifier:
keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/940DB79EA8C111EC82C6CD3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.116.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:fb:2d:73:31:26:e5:be:43:f0:45:c8:59:73:3a:7d:6a:1c:
17:a3:e2:c5:4b:af:1a:32:e9:1e:7e:ba:41:a5:ed:21:7e:db:
64:50:be:3a:58:0d:e4:20:d9:8a:71:79:33:57:0c:4f:ed:63:
a0:62:11:50:41:99:ee:12:51:4d:48:42:a9:5b:da:f6:64:b2:
f5:7c:b0:6d:dd:5d:4d:0a:58:e0:f7:54:c6:c0:04:8f:33:d3:
db:8b:76:8f:b9:1d:8e:75:d1:e2:3a:8a:d6:b5:b8:b4:0f:1d:
05:48:74:52:ad:3f:8d:59:50:1e:52:54:52:d7:69:59:b6:6d:
c0:0d:15:84:76:1b:5b:86:23:91:f0:97:34:0d:be:fb:81:05:
a3:ea:ec:5c:7d:65:57:00:d7:ed:c2:6e:22:70:d2:59:81:52:
b1:33:90:b8:6b:04:90:a2:68:d9:81:6b:f8:b4:9d:97:18:e4:
64:84:ae:8e:0c:ff:d3:67:82:91:91:dd:e9:fa:4a:3c:d3:82:
be:3b:44:e3:cb:b6:ca:8f:d4:f3:9f:9f:da:ba:aa:f5:f3:63:
d9:ab:0f:01:59:21:de:90:09:9d:07:c1:65:8a:f8:2d:bd:70:
76:99:3a:08:b6:a8:25:0b:3e:2c:ca:81:8d:d9:27:7b:5f:61:
8f:cb:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org