Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8D7F675228BB11EABB9C1E37C4F9AE02.roa
File: 8D7F675228BB11EABB9C1E37C4F9AE02.roa (raw, json)
Hash identifier: 5hroeUuFmijlVSRW8R2P5R+/PTIFRdFOKKFTlCMEOzg=
Subject key identifier: EA:78:93:ED:E3:67:4D:F8:C7:D5:72:77:76:63:4F:C8:D9:A3:E6:D0
Certificate issuer: /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial: 0723
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8D7F675228BB11EABB9C1E37C4F9AE02.roa
Signing time: Mon 22 Nov 2021 21:06:23 +0000
ROA not before: Mon 22 Nov 2021 21:06:23 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 139632
IP address blocks: 103.142.184.0/23 maxlen: 23
103.142.184.0/24 maxlen: 24
103.142.185.0/24 maxlen: 24
2001:df1:4e80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Validity
Not Before: Nov 22 21:06:23 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=619c064e-b111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:14:d4:9f:77:02:3b:50:72:73:d4:11:a4:
00:df:f1:b9:5a:62:00:25:da:e2:33:a4:ca:04:ce:
64:60:2f:59:a8:71:da:ea:89:af:24:d1:99:c3:6c:
44:67:22:56:f4:60:e2:b7:52:31:0b:a3:96:1f:5c:
1b:10:50:b4:7a:05:cc:1a:0b:e9:67:fc:3a:b6:49:
e3:30:af:19:ce:db:b8:f9:f0:ee:9f:29:0c:55:66:
29:a2:e9:cf:ef:cd:6a:4f:c3:c3:8c:f9:de:f6:c2:
9e:c9:71:c3:88:94:e2:8d:e2:51:d3:b3:0f:a0:c0:
c1:38:b8:86:29:cb:9c:98:92:80:62:01:29:68:56:
7e:e0:cc:01:e2:9e:1b:48:ed:12:32:42:cf:32:ef:
d0:cb:fd:51:64:b3:b6:52:8a:b4:41:4b:2e:3a:f7:
e7:9b:fe:98:87:ca:44:34:41:38:1e:29:c3:f7:a6:
90:9b:8b:7f:ad:bc:88:ef:09:8a:08:9f:cb:94:dc:
02:48:1c:45:ca:e3:24:6c:7d:c2:71:8a:12:75:42:
3a:09:ac:ee:65:73:4e:c5:fd:64:4f:cf:37:70:6f:
d8:34:88:30:45:38:26:b4:a9:cb:ee:71:e8:e2:5d:
4b:0e:08:a4:bf:81:b9:f1:68:0f:c6:80:a5:63:70:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:93:ED:E3:67:4D:F8:C7:D5:72:77:76:63:4F:C8:D9:A3:E6:D0
X509v3 Authority Key Identifier:
keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8D7F675228BB11EABB9C1E37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.184.0/23
IPv6:
2001:df1:4e80::/48
Signature Algorithm: sha256WithRSAEncryption
66:7c:76:f6:9b:dc:96:fb:53:8d:17:e3:79:31:73:43:79:66:
8b:3e:a4:82:3f:97:99:28:d8:11:dd:1e:f9:17:06:68:c7:88:
78:68:d1:d9:70:fa:bf:c2:65:6c:27:9d:ba:f3:cc:2d:d1:5c:
b9:a7:de:ce:53:2b:94:83:ef:26:d4:33:36:e1:43:7a:72:b1:
e0:87:2e:cb:2b:2f:35:15:b3:37:ae:66:ea:d9:38:1f:27:7a:
2c:cd:6d:49:84:86:de:6a:dd:7b:0e:03:3d:ff:d1:fc:ce:b9:
71:4c:45:55:31:29:51:22:57:84:0d:9b:2f:c5:6e:1f:6b:b6:
27:c1:37:5b:f3:15:a4:fa:c1:95:5e:af:a5:3a:2a:0e:86:fb:
d7:42:ed:6d:4e:6e:86:3c:4f:aa:c1:6c:c1:92:a3:97:9d:a9:
1f:4a:51:f0:b2:83:27:8f:4d:a2:88:12:42:bd:2f:ea:a9:f6:
cd:58:7f:fc:74:92:33:06:25:05:fe:ed:0c:15:a8:f7:5d:8c:
90:8a:90:6b:9a:bb:96:6f:f7:47:da:18:98:82:7b:21:19:80:
d8:28:47:28:1b:9c:83:84:c4:b6:bc:19:40:94:50:f7:a0:53:
f9:3a:fd:f1:95:7e:3b:63:df:b4:e4:6a:a8:0a:81:fc:26:35:
e7:03:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org