Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6F217558110611EDAECDBA5FC4F9AE02.roa
File: 6F217558110611EDAECDBA5FC4F9AE02.roa (raw, json)
Hash identifier: b7U0ttfuJeyMbKh2k3RVq+DalfMgMtwnpH/2K7lqggs=
Subject key identifier: 2C:BE:A9:22:1A:AA:64:CB:5F:DA:FA:57:94:50:1F:04:A7:7B:F6:39
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 0634
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6F217558110611EDAECDBA5FC4F9AE02.roa
Signing time: Thu 04 Aug 2022 17:44:57 +0000
ROA not before: Thu 04 Aug 2022 17:44:57 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138619
IP address blocks: 103.134.200.0/24 maxlen: 24
103.134.201.0/24 maxlen: 24
103.134.203.0/24 maxlen: 24
2404:6ac0::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Aug 4 17:44:57 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62ec0599-ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:b3:6b:ce:b3:a5:bf:31:e8:b7:c7:c7:e2:
3c:c8:60:81:86:df:38:2d:5e:11:5a:d7:2b:77:9d:
03:06:56:c1:b0:c6:3b:ba:93:ae:83:22:d1:b5:96:
38:69:15:04:87:b0:15:fb:d5:e7:40:38:4f:c4:f1:
dc:24:b0:cf:eb:e4:d6:22:b1:3c:70:f6:77:e9:5b:
7a:ec:73:5d:e6:e1:1d:43:fc:7c:97:9c:ec:21:c9:
e1:58:24:da:b7:ed:33:e3:b2:4c:3b:a5:0a:08:86:
63:c2:37:8d:de:68:76:3e:d8:16:19:13:69:3a:f7:
cb:6d:51:8c:de:f0:a0:8d:d8:0d:be:ac:c9:8a:a6:
1b:04:e4:8d:47:f0:48:f2:ad:96:34:49:ca:f1:ca:
ae:c3:d2:75:ce:ec:7e:c1:d1:8c:4e:45:fc:66:c8:
07:6b:fb:5e:b7:87:54:0a:92:0f:f3:d4:d3:07:93:
a4:6e:74:c6:72:50:aa:d5:1d:e3:b2:ae:e4:af:85:
e8:14:52:b0:86:6b:22:92:6e:6f:8d:cd:12:fd:cd:
ff:a8:b2:1a:8e:58:11:df:26:bb:d0:8f:4b:a0:81:
04:7f:00:cc:2c:02:66:db:f2:e0:89:0b:3a:39:5b:
9d:9b:2d:24:da:ec:d4:35:2f:5e:ce:b9:ae:12:ca:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:A9:22:1A:AA:64:CB:5F:DA:FA:57:94:50:1F:04:A7:7B:F6:39
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6F217558110611EDAECDBA5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.200.0/23
103.134.203.0/24
IPv6:
2404:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
71:32:f9:c9:7e:8c:42:f6:e3:1a:10:a8:64:5b:f0:2d:71:52:
b7:bb:70:65:4b:2c:5e:21:be:1d:8b:e2:96:7b:c7:9d:70:9a:
f9:a5:10:e4:a5:9e:24:1e:b1:0c:03:a9:4e:98:5d:97:2a:14:
6a:82:00:0a:48:39:bd:df:9b:b3:61:82:4d:74:3b:27:75:38:
95:d3:2c:84:ab:51:54:41:92:f2:7f:42:2e:5b:07:10:13:83:
c3:dd:0d:dd:e4:2f:1b:32:30:ee:24:32:bb:8d:b1:a5:b1:ea:
54:dd:ad:79:ea:66:11:63:b1:89:d3:5e:98:c7:3d:50:e5:28:
c3:be:15:30:f4:c5:29:4c:22:69:c6:d8:58:29:6a:37:60:4b:
84:d2:9c:e6:f6:e0:45:1b:8f:7c:9c:d9:3b:e4:1a:3b:3e:2a:
67:20:28:0d:4a:7f:fb:a3:85:14:fa:ff:b5:18:a4:9d:66:ec:
ed:c2:b1:b5:af:7b:1f:6c:70:59:a2:50:de:7f:8b:7f:c5:fb:
ff:4a:62:de:97:a1:51:00:44:24:ab:9e:61:bc:cc:0f:d1:cd:
ee:c6:e3:2a:ac:22:39:fb:c0:a3:14:2d:32:71:c4:ea:7c:c5:
fb:a6:27:74:60:a1:17:f5:5c:86:90:e0:12:61:3f:9a:9a:01:
9e:79:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org