Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
File: C1618BFA617111EBBC678459C4F9AE02.roa (raw, json)
Hash identifier: YF7SljG7oFnybnS2JMsPY2+2aM9T1cwOvPPrZFaYFOs=
Subject key identifier: 27:94:A3:61:0B:50:0C:49:5F:3E:42:7F:8B:E5:DF:88:B3:40:83:A4
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0872
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
Signing time: Mon 26 Jul 2021 07:36:57 +0000
ROA not before: Mon 26 Jul 2021 07:36:57 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 140900
IP address blocks: 103.116.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Jul 26 07:36:57 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=60fe6619-9cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:98:90:6b:7a:a1:15:b7:64:9b:c1:39:0c:
70:90:7b:6d:8d:a3:fd:48:14:03:8d:f2:ff:a6:3f:
f9:4d:f0:cb:82:02:0a:3f:8e:f5:e7:c1:dc:e6:57:
f1:68:95:68:56:80:d7:49:79:b8:00:fa:73:0e:34:
d3:3f:bb:8c:b2:c0:7c:a0:0e:67:b2:d2:c5:b6:41:
7b:ad:31:3f:ec:b1:a0:f2:23:bc:b2:2b:88:39:fb:
7e:7d:bd:18:7f:43:17:e2:20:1a:5f:23:89:db:ec:
58:a3:ec:06:09:f1:19:40:40:34:fd:83:a7:45:46:
3d:af:f8:7a:f8:be:6a:f3:cc:d8:14:df:84:c3:c7:
b4:76:5f:1e:33:f2:1c:92:3d:55:fe:8c:39:a5:4b:
91:93:59:5d:94:58:25:b4:5b:c7:01:6f:e1:1d:de:
44:b2:2f:74:7a:34:3d:7a:5f:15:1f:5c:54:e3:be:
3f:c4:81:6f:1d:8e:9f:f5:d2:ba:c1:f7:36:36:2f:
0c:aa:4f:63:97:86:97:50:83:af:ca:78:7c:d8:be:
8d:75:e2:80:0a:f0:8d:1c:08:9e:08:01:65:82:fb:
8d:c6:b9:c7:2b:98:e6:5b:9e:1d:3e:3d:fa:3b:ba:
27:bf:9b:64:8f:0d:36:4b:50:d3:54:b7:6b:3c:07:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:A3:61:0B:50:0C:49:5F:3E:42:7F:8B:E5:DF:88:B3:40:83:A4
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1e:dd:30:25:1f:68:12:73:0a:e1:12:da:7c:3a:14:cf:87:
6d:43:01:4d:0e:51:45:f0:05:52:f5:d3:5e:4c:43:68:75:fc:
aa:39:a9:2a:a7:2a:d2:fa:d7:cd:96:3f:42:1c:9b:7d:3f:d1:
75:44:42:3b:1c:95:31:a1:46:69:92:65:2b:50:dc:b1:f5:ed:
63:77:07:0e:b1:bc:dd:7b:5f:51:fb:f3:12:65:c3:e0:75:80:
22:c6:43:ae:3a:60:82:17:f6:df:ac:8f:37:be:f9:e7:ce:4b:
95:11:7d:0d:0f:48:70:18:37:2e:bf:7c:60:9e:7a:71:06:e9:
72:b3:1a:2f:64:0c:1a:a9:a8:e6:98:e4:d6:6a:6e:e8:41:77:
8d:31:40:ea:66:55:7a:99:6a:54:cf:fc:9b:20:4a:4f:f2:a6:
bc:5e:53:42:4d:6c:fa:79:6a:b1:75:98:e5:f1:52:52:f0:4f:
24:cf:c7:3c:69:17:f8:89:aa:e6:2d:1f:d9:ae:b3:f1:45:01:
3b:2a:d3:e7:ac:3c:58:d6:bb:1c:c4:8f:ef:07:8c:2d:2b:b8:
21:7a:e0:70:4e:77:a6:3e:e1:8e:e4:53:58:aa:7d:2d:6d:dc:
28:b4:74:86:97:d9:7e:15:64:ed:23:03:9a:57:b8:0b:19:64:
4b:92:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org