Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8FEA82C82A0311ED8539CA81C4F9AE02.roa
File: 8FEA82C82A0311ED8539CA81C4F9AE02.roa (raw, json)
Hash identifier: 9VZ1XkakcIhl+ZbHyKh750WMG8EsOR7iYzIJGB4/UNo=
Subject key identifier: DA:44:64:20:64:B4:32:DC:27:CC:40:5B:30:D9:D5:B9:79:0E:B9:D0
Certificate issuer: /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial: 09AB
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8FEA82C82A0311ED8539CA81C4F9AE02.roa
Signing time: Sun 30 Oct 2022 20:47:09 +0000
ROA not before: Sun 30 Oct 2022 20:47:09 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 55492
IP address blocks: 103.142.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Validity
Not Before: Oct 30 20:47:09 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635ee2cd-655d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:57:7e:6e:2d:98:76:76:4a:a3:35:d8:78:
40:73:af:54:49:ac:62:44:b3:a8:44:1f:aa:a1:1f:
85:63:c8:fe:ed:33:fd:90:93:d1:0f:46:56:2d:98:
fe:cb:38:a4:ba:74:7c:98:cd:97:9b:f2:57:a5:83:
db:48:39:ba:b0:90:66:7c:c8:d0:0c:30:cd:66:c2:
14:fd:f8:1b:cc:52:0c:c3:63:ed:a0:2d:0f:eb:e9:
97:98:59:d6:da:ee:44:70:59:8e:e9:9b:94:e8:4d:
36:80:fe:fc:2c:bc:84:f2:8a:d6:4d:7a:f9:b4:a2:
59:aa:7f:ea:79:28:26:5d:7d:74:4c:99:47:9b:8d:
f3:28:c3:75:49:ce:d9:73:f2:8b:fa:91:bd:63:c5:
bf:2f:43:b3:48:b9:c2:18:b5:e1:a2:4e:04:8b:c8:
5d:76:46:61:85:87:58:17:e7:85:35:5f:fd:a4:b8:
93:63:8d:4e:c1:28:f6:1b:69:f3:8b:b2:54:9a:94:
cb:4e:04:b0:6f:a5:82:91:cd:65:00:c2:fc:90:81:
11:fb:9b:40:a2:64:f0:5b:52:ac:3b:71:ed:c2:f8:
d7:06:55:0c:36:18:c9:b3:bb:26:ab:cf:c2:70:80:
7b:40:22:57:c7:f6:e0:5f:e1:ab:99:42:54:e7:ce:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:44:64:20:64:B4:32:DC:27:CC:40:5B:30:D9:D5:B9:79:0E:B9:D0
X509v3 Authority Key Identifier:
keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/8FEA82C82A0311ED8539CA81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7a:30:43:ea:e1:b1:cc:5e:40:d4:a1:a2:c8:75:7a:a1:41:
39:5f:78:84:b3:5d:88:60:ab:77:84:bb:60:17:89:33:a1:84:
b8:02:69:ae:fd:ba:ff:41:94:c2:82:26:2a:55:50:ce:aa:61:
cb:26:e1:f9:79:b3:e2:c2:30:3f:57:76:54:58:28:b0:21:b6:
e9:7e:cb:82:2c:df:d7:6d:22:66:24:59:1e:12:6b:b5:07:d9:
5d:ee:ab:f4:3a:c7:34:4d:39:c0:89:14:e2:d9:3e:ec:5c:f7:
09:f5:71:55:92:aa:8c:6f:d4:2a:7e:1d:38:d9:a9:be:78:d6:
8a:76:7c:65:46:73:ef:53:9f:ae:12:ea:cb:0e:5b:27:df:54:
8c:ea:81:7b:bc:d5:f9:0e:d7:ca:27:74:77:0e:4d:e9:50:50:
f6:08:53:3b:b7:f2:64:20:28:59:18:b9:df:f7:6a:ca:5f:b3:
f3:8e:8c:d7:49:3b:2a:ce:19:35:1b:cc:82:7f:66:20:42:b0:
f0:80:f0:47:e3:c9:8a:aa:87:06:0a:e2:75:47:1d:40:80:82:
8b:97:e6:36:18:c7:b2:38:b0:99:02:c6:38:48:b8:d0:48:d2:
80:c7:2e:fa:0e:ce:fa:c2:98:1f:c5:3d:92:fd:41:80:91:6a:
ab:65:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org