Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/8B306948C09711ED99792942C4F9AE02.roa
File: 8B306948C09711ED99792942C4F9AE02.roa (raw, json)
Hash identifier: z7R/G0Wd9ZsbwMHNQkU1g7Ud37VtxeHxuuu4n8EQZ0I=
Subject key identifier: 0F:FC:F6:D3:A1:36:1D:AC:B2:60:A2:D6:A6:55:5E:F9:9A:F5:09:FB
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 012C
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/8B306948C09711ED99792942C4F9AE02.roa
Signing time: Sun 12 Mar 2023 11:34:26 +0000
ROA not before: Sun 12 Mar 2023 11:34:26 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 150683
IP address blocks: 103.189.68.0/24 maxlen: 24
103.189.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Mar 12 11:34:26 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=640db8c2-18ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:2c:5e:35:c7:af:f0:c1:11:32:92:8a:46:
b7:5a:d9:39:0a:58:61:bd:e1:16:23:d5:0c:53:bd:
ea:02:78:bc:fd:c2:30:48:1e:37:79:d3:ac:84:f6:
1a:b8:2c:e8:51:8d:bd:57:b3:0a:f7:60:6d:2a:3a:
73:c1:8a:4a:e3:86:a4:07:40:a3:e5:43:2c:1e:77:
8d:39:c8:4e:4f:32:24:6c:71:63:f5:7d:7a:57:45:
2a:b2:e3:d8:22:1c:57:4f:88:d2:19:2e:27:09:ba:
a5:03:34:74:a7:54:69:a6:10:01:87:04:23:ea:16:
e2:b8:59:1e:2e:3d:82:9f:4c:18:dd:4e:59:20:2c:
76:f0:31:49:84:d3:45:d3:db:05:72:87:81:f6:3e:
b5:6f:05:33:f7:96:0f:90:6f:45:17:bd:26:6c:a1:
ce:9a:9d:a9:ba:de:e3:51:67:fb:f2:24:8a:1d:9c:
29:0b:7a:00:27:94:03:e9:e8:2d:ac:d9:63:41:98:
6f:36:fd:45:4f:b2:74:c6:27:62:51:52:b5:47:cc:
0a:3d:9e:7f:36:00:31:f7:2b:7a:60:ce:ae:4a:e0:
36:15:fd:01:bd:87:61:bf:30:9f:f7:ec:ba:b0:4d:
d8:fe:9e:e7:25:93:7d:91:e3:21:7a:49:ec:18:d4:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FC:F6:D3:A1:36:1D:AC:B2:60:A2:D6:A6:55:5E:F9:9A:F5:09:FB
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/8B306948C09711ED99792942C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.68.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c8:c3:e9:28:42:bc:2a:1a:57:5a:95:24:40:ea:51:b9:f2:
72:94:27:97:19:f1:d6:d1:e0:bc:b8:ed:05:49:9a:39:cd:ec:
ee:49:35:86:54:60:d3:6e:04:b5:d9:18:e6:b1:f8:a1:d6:c2:
f5:79:18:2a:dc:53:73:49:e3:2e:85:c7:c2:97:f2:e1:75:67:
8f:3f:92:ea:b5:8e:bc:e5:fe:8d:39:0c:dc:a6:9a:f9:01:1a:
07:49:c4:81:64:3b:5c:4e:4f:80:55:65:e1:9e:79:b5:37:c4:
cf:a2:7c:7e:d8:02:d5:11:cc:09:0a:44:59:ea:7a:05:99:48:
9b:34:82:bb:8b:b7:f3:af:be:ab:86:89:b2:49:98:d9:69:59:
9f:c0:7d:7a:27:4c:0a:67:b5:53:28:05:16:47:d8:46:93:9c:
4d:1d:4c:11:72:3a:9c:fb:ed:7d:8e:8c:a0:63:2f:02:b5:5e:
7c:34:68:d8:c6:5a:2d:09:99:d3:b2:3b:b9:9e:2e:f1:7c:ac:
8f:7b:1d:69:a9:4f:e3:23:c3:59:2a:84:ee:87:f6:28:0f:5b:
e6:26:5f:62:21:b5:70:71:05:e6:f2:a2:ea:3b:50:51:45:28:
a3:3d:a8:ae:58:5c:5c:dd:3b:19:76:d5:f2:4d:56:6b:c2:ec:
e9:29:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org