Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/D528AA541E0A11EDA6D07579C4F9AE02.roa
File: D528AA541E0A11EDA6D07579C4F9AE02.roa (raw, json)
Hash identifier: 2cI6WkdsymI/UoeRO1VHrUokMvuGGIYcoh5aeotCi3E=
Subject key identifier: 3A:8C:48:DC:5F:94:2E:75:C5:FC:9B:E0:92:AA:28:03:5E:2C:0C:1C
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 081E
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/D528AA541E0A11EDA6D07579C4F9AE02.roa
Signing time: Wed 17 Aug 2022 08:58:59 +0000
ROA not before: Wed 17 Aug 2022 08:58:59 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 135654
IP address blocks: 103.149.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Aug 17 08:58:59 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62fcadd3-a5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:1f:af:f4:ed:61:0d:90:c2:f2:2c:d3:52:
e2:18:4e:0b:5f:6b:64:7f:17:2b:44:f8:79:a5:d1:
68:ee:55:4c:56:cf:89:d7:a7:0c:6a:bb:ad:ab:1d:
b1:6b:61:d9:c2:bb:de:98:24:d7:e3:3f:b7:b0:e6:
09:75:4b:69:bb:fb:ed:e1:10:15:02:6a:64:4d:54:
a8:ee:8b:33:76:31:7d:fb:e2:b3:7e:2a:e6:cd:11:
f3:f7:cf:f6:7f:e6:1d:58:95:f4:56:6a:eb:5c:7e:
b4:14:2f:49:29:e8:61:3b:7a:97:ff:ed:8f:e1:ec:
0a:59:85:fc:ce:27:27:f4:3e:15:54:67:b3:99:2b:
03:5a:74:31:f7:f5:72:65:d6:5b:11:38:8b:e7:7a:
cb:9c:07:cb:a4:63:59:17:c8:61:54:3c:3f:cb:87:
bc:92:92:4c:2c:8c:91:ba:bd:9c:64:32:45:40:27:
95:6a:95:3d:9f:d6:10:ec:47:13:5f:9d:4b:02:14:
18:b0:1a:ca:65:48:23:2c:3c:59:98:50:26:1b:7d:
51:6e:24:07:52:0f:2a:a0:1f:9b:dc:10:72:75:67:
32:2e:12:16:d8:da:5d:be:60:7a:0c:b2:0e:54:4d:
13:ed:34:e3:99:89:c8:58:63:98:60:f5:81:3a:74:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:48:DC:5F:94:2E:75:C5:FC:9B:E0:92:AA:28:03:5E:2C:0C:1C
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/D528AA541E0A11EDA6D07579C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:24:04:43:56:f1:6c:05:b4:07:12:b0:ad:58:34:aa:0f:39:
d1:9e:a2:26:3d:8c:92:92:5b:74:14:21:92:99:00:0f:51:24:
b0:ff:f6:3e:e2:59:e6:f2:ad:f1:d3:1e:b4:dd:97:ab:33:ff:
10:90:21:0b:3b:a1:9a:a9:86:41:84:4a:4b:f1:51:ba:1d:e4:
c6:ed:53:81:1f:54:55:83:94:35:99:bd:ec:97:fe:e2:ed:67:
86:53:3e:6d:ca:68:ce:ad:e1:74:76:de:6c:7e:2f:5b:25:55:
53:23:e2:2b:df:15:9c:e4:07:dd:05:c5:e0:82:fa:cd:df:cb:
67:ee:de:89:4a:b7:e3:49:3a:3c:69:db:a3:7c:a9:c2:63:ca:
b4:ea:f4:bd:a8:b1:de:ec:9e:d8:91:27:27:f1:65:41:bf:d3:
0f:30:36:ec:7a:97:5f:24:74:8d:ba:35:b9:a3:bf:2f:d1:fb:
96:65:92:06:59:72:c9:15:c0:44:86:c5:6b:19:9c:a5:a8:d7:
39:fa:7f:e8:75:0f:da:13:e7:00:41:f9:a8:f5:d4:23:3f:61:
9a:94:20:0c:6e:7b:47:5e:88:ca:7f:ec:96:3a:25:ac:95:66:
eb:33:8d:7f:d8:21:b8:e3:d8:ff:f9:47:e2:94:f3:86:14:6b:
05:38:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org