Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
File: 40A986CC236A11ED8018D62BC4F9AE02.roa (raw, json)
Hash identifier: g5HyykGrOCnkCM7sev2DYLoYcKQu3BxV+VrReG7JixU=
Subject key identifier: D7:07:36:9F:AB:A2:2D:ED:33:23:D5:CF:35:AE:67:3A:A9:B9:9E:27
Certificate issuer: /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Certificate serial: 7E
Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
Signing time: Fri 23 Dec 2022 06:04:45 +0000
ROA not before: Fri 23 Dec 2022 06:04:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 133441
IP address blocks: 103.144.148.0/24 maxlen: 24
103.144.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Validity
Not Before: Dec 23 06:04:45 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a544fd-202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:08:25:b1:bb:43:14:26:ac:3c:4d:1b:f7:
93:f8:bd:6e:4b:f9:f1:c0:7a:12:e6:8c:8b:e6:74:
e9:20:8a:3c:8e:b6:34:40:80:3d:da:4c:38:78:7a:
15:84:8e:f8:d1:51:ae:26:ad:43:73:34:d5:78:36:
89:4d:7e:b2:1f:3e:93:96:33:29:69:b6:99:1d:2a:
1f:58:02:71:16:7a:f5:e4:71:fa:62:28:49:53:34:
fe:dd:aa:c6:50:c5:a4:51:25:95:65:48:1f:26:e3:
ee:bb:60:02:87:80:a2:c9:3c:68:80:6f:5d:38:63:
b3:65:22:16:4f:30:dc:16:6c:39:ee:f6:e6:ce:04:
c8:68:f9:f0:02:44:1f:52:d4:d3:07:e3:c5:10:57:
23:41:e7:d7:86:a2:bd:0f:dc:15:d4:c1:75:a8:38:
91:04:cd:9d:33:7f:7e:d2:83:f6:7e:1e:e6:67:ed:
36:7b:17:b8:94:d4:37:fc:82:63:81:34:9b:a4:f3:
c8:14:93:e4:4e:29:b4:f1:c8:40:28:2f:f6:7e:9a:
93:f2:10:d6:be:c2:c4:9c:93:65:ca:e5:14:52:15:
f7:e5:e8:cc:76:23:a1:94:ca:b1:5f:f7:d9:4b:0c:
19:ca:57:1c:8d:d2:1d:4c:a5:9a:8a:78:de:44:93:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:36:9F:AB:A2:2D:ED:33:23:D5:CF:35:AE:67:3A:A9:B9:9E:27
X509v3 Authority Key Identifier:
keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.148.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:3f:e6:56:76:fb:ac:60:70:72:8e:b2:1d:98:ab:a4:a6:71:
cb:78:60:34:1e:f8:cb:eb:55:7c:c2:5d:4a:9d:a9:a2:9f:ca:
da:19:2c:b9:bd:94:5e:38:90:8f:f1:8e:cd:e2:37:a3:7e:f4:
4c:3b:e8:75:27:5c:78:ac:db:4b:de:fc:31:79:12:4c:ad:32:
cc:6f:a5:02:a6:71:0a:82:df:20:6b:d6:95:0d:e9:f8:73:06:
7b:7a:cc:4d:a4:62:5c:6b:01:84:8a:3d:7a:a9:be:e5:c5:22:
b7:1c:b0:d9:6d:31:b2:f4:a2:73:3d:57:50:cf:f0:53:3d:f9:
e6:35:21:0a:f0:e8:76:61:7e:a5:9a:39:f6:94:6c:93:ef:66:
40:df:56:80:86:1a:7b:14:8b:40:2e:10:a1:2f:1f:1c:d6:68:
ae:70:1f:0f:f2:74:65:db:70:68:ec:89:29:da:76:71:ba:19:
01:0a:9b:fc:2c:f3:e4:98:ff:90:42:69:4f:d3:de:c2:49:39:
ca:d1:c6:95:87:40:4d:7c:e9:45:d2:8c:7e:43:f4:45:c1:e3:
a2:3a:50:ee:1f:1c:2b:6c:fa:82:86:8d:3b:7f:c7:b0:3c:6a:
7e:0b:84:62:e3:0d:84:94:45:e7:34:8d:01:e0:77:f9:b6:93:
ed:5f:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org