Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/710A91005D6B11ECAFD3D045C4F9AE02.roa
File: 710A91005D6B11ECAFD3D045C4F9AE02.roa (raw, json)
Hash identifier: mY+2iBMHe9ARabim7NTv7dfddHs3/bC8d7INiejyiWE=
Subject key identifier: 65:7F:9A:91:3C:6C:AA:0D:C8:C0:E0:E4:D0:AE:BA:06:12:88:2F:2A
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 0EF1
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/710A91005D6B11ECAFD3D045C4F9AE02.roa
Signing time: Wed 15 Dec 2021 05:54:18 +0000
ROA not before: Wed 15 Dec 2021 05:54:18 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 136557
IP address blocks: 103.130.68.0/24 maxlen: 24
2403:b4c0::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3825 (0xef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Dec 15 05:54:18 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61b9830a-d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:b1:31:a8:0c:63:dd:c5:7d:d5:eb:0a:90:
35:dc:c6:69:09:cc:5a:6a:c9:30:a4:93:86:b3:4e:
ea:0b:df:f9:6e:82:89:0c:62:89:74:e7:8b:af:d6:
e8:0c:81:e5:55:74:8b:45:3d:7b:b2:d8:23:43:f2:
44:80:8d:4a:0d:27:ab:10:0f:d9:8d:be:fe:58:08:
10:de:4b:eb:14:32:98:9f:9f:fa:5f:16:f7:a3:9d:
4c:97:a6:95:ad:96:90:d6:43:47:48:ba:08:87:cb:
e9:4c:55:16:77:ff:d7:a9:c9:36:a5:51:6a:2e:2b:
2a:83:7e:13:94:6f:0a:2d:81:28:40:c5:04:3e:56:
0b:1b:70:9e:9c:01:44:31:78:c3:8e:cc:63:90:ab:
f1:88:3a:23:18:8c:60:12:a0:9a:5d:ce:a1:41:af:
d0:71:de:6f:8e:fa:b0:78:aa:24:52:37:51:ce:5e:
01:1a:d8:bb:7e:86:f6:21:dd:4d:e5:86:1f:77:90:
3e:d1:24:16:ee:cd:b0:c1:f4:39:4d:31:cd:be:4e:
4b:30:fa:1f:41:b5:10:eb:df:e8:dd:f9:4d:35:79:
b9:d7:22:53:9e:ef:61:fd:55:6d:0d:cf:a8:1b:70:
6f:ed:79:1f:a1:60:47:5a:15:0e:35:38:dc:fe:e4:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:9A:91:3C:6C:AA:0D:C8:C0:E0:E4:D0:AE:BA:06:12:88:2F:2A
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/710A91005D6B11ECAFD3D045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.68.0/24
IPv6:
2403:b4c0::/36
Signature Algorithm: sha256WithRSAEncryption
01:8e:f8:91:66:b0:0d:30:4c:50:43:d5:01:63:ca:35:4d:da:
34:78:41:2c:21:bb:d8:46:ca:34:d0:c3:98:9b:30:65:50:65:
52:1f:0e:d7:6d:60:0c:48:55:d8:55:15:3e:31:34:76:78:c5:
ee:3f:a5:f2:15:86:37:fd:82:88:19:71:cf:cc:a2:7e:29:ce:
99:e1:7a:0f:5d:85:bb:bd:d3:57:b1:f6:16:55:f7:0e:9b:87:
e5:d0:cf:95:6f:7b:55:9b:9c:72:1a:2f:eb:d7:21:74:ad:87:
e0:ab:9b:7f:aa:e4:e6:bf:4a:1e:3d:6f:78:13:3a:5e:a7:ae:
9a:99:7a:bd:91:1a:14:3c:ce:09:74:d3:25:52:fe:fb:c2:6e:
e3:fb:8a:f3:9b:b4:1d:c3:5a:a6:15:e8:69:b9:1a:d1:2d:ca:
15:cd:12:e5:39:60:3e:14:78:9c:97:1d:72:92:19:93:6c:b7:
81:ab:29:a9:de:aa:8a:69:73:16:aa:33:2d:65:0b:3c:df:a2:
d1:b0:f8:0a:7e:cf:dc:14:48:23:c9:f5:4a:e3:cf:ae:83:f3:
50:80:51:99:77:59:08:cd:38:65:cb:2f:94:bc:50:4d:0e:02:
c9:d5:79:a4:4b:02:5d:9b:b3:4f:40:25:a8:8d:e2:b7:39:e4:
b0:6e:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org