Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
File: 0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa (raw, json)
Hash identifier: LjWkftnY5a2A9fbs9pvwS5fCu8ofZvStYT6mZM3lMRk=
Subject key identifier: 8D:2F:39:8B:E4:A3:1D:CB:D4:B8:81:2B:FF:39:78:C7:2F:62:6C:51
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 023E
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
Signing time: Wed 16 Mar 2022 06:12:26 +0000
ROA not before: Wed 16 Mar 2022 06:12:26 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 139646
IP address blocks: 103.101.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Mar 16 06:12:26 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62317fc9-9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:a7:79:7d:98:15:3a:9e:a8:4e:db:2e:69:
6b:ed:d2:3d:1a:13:dc:9e:0b:22:81:a3:c8:e6:8c:
2d:61:ae:08:40:cb:9f:ea:89:70:97:45:08:0c:b8:
cf:44:44:85:78:1a:34:b3:d7:32:01:7c:56:2e:59:
91:b7:b1:95:2e:d6:ad:0c:2d:8b:57:91:fe:84:bd:
99:ed:9a:1e:f0:57:28:e5:bf:b3:6c:59:b9:b8:ad:
d5:58:9a:d0:53:1d:dd:c8:3c:46:43:3b:a8:6c:e6:
62:a0:eb:63:5c:e6:c0:30:b0:52:eb:f5:fd:e4:0e:
69:03:86:b1:ea:5f:50:cb:a9:28:37:3e:9c:29:86:
bf:ca:ce:83:79:f1:d9:33:e1:7a:96:48:7f:b4:76:
9a:50:21:a1:54:5f:78:34:28:ef:31:64:74:f6:24:
ac:dd:bd:af:0a:f4:67:5e:e7:7d:e5:b0:a1:48:c4:
8f:e9:46:2a:ae:c4:bb:f6:3c:9c:70:6a:63:34:e7:
78:bf:61:86:9e:d2:51:77:c4:6c:c6:5c:d6:2c:9a:
b5:4a:82:c2:c3:b7:8b:c9:a3:c8:a1:6b:c6:92:00:
f7:01:00:d3:33:12:ba:a1:16:fe:64:19:75:c6:e6:
05:d3:30:71:d6:be:f8:e4:eb:d2:0a:11:0c:82:1e:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:39:8B:E4:A3:1D:CB:D4:B8:81:2B:FF:39:78:C7:2F:62:6C:51
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.206.0/23
Signature Algorithm: sha256WithRSAEncryption
35:08:c0:b8:65:0a:f0:43:c3:4d:f8:c7:46:da:64:d0:4e:4f:
98:26:61:1d:84:99:c2:f4:95:64:9f:48:c6:b4:2b:16:01:23:
dd:7a:7d:9a:d4:47:65:8f:15:5c:ec:86:bc:8b:e8:c1:c3:38:
0a:cb:de:c4:b0:5d:4e:48:da:54:10:48:73:b7:df:06:4a:4d:
a2:45:37:b4:1d:0c:34:88:93:71:09:52:22:42:34:a0:bf:e9:
8e:77:fa:a8:3a:5a:42:c4:61:f3:80:d8:bf:af:10:00:4b:ac:
11:55:43:c5:ee:06:5a:24:71:12:da:67:bf:43:cb:7a:16:2c:
70:a3:2e:cb:a2:bc:67:9b:af:9b:20:6c:48:37:ba:2b:87:e6:
34:de:ff:3c:f2:14:e0:2a:e5:a2:ae:a6:17:27:c7:68:05:e0:
b6:28:76:80:06:da:cc:f7:c3:c6:2c:b0:c7:c9:7b:4d:6c:e2:
84:50:e5:7b:e1:be:8d:19:ce:47:e4:9e:99:25:bd:ab:5a:03:
f4:44:25:f4:5f:c1:1b:36:1b:2e:3e:e3:5d:f2:3d:3a:bb:20:
8f:0f:8d:2e:d9:22:f8:55:ca:fd:9c:14:72:48:d6:04:17:80:
c6:15:76:31:8c:0d:18:13:51:cc:b7:0a:2d:29:36:61:a8:2b:
80:60:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org