Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/F8D3F93A679211EABCEE086DC4F9AE02.roa
File: F8D3F93A679211EABCEE086DC4F9AE02.roa (raw, json)
Hash identifier: c+iID/Jc+/gUyNvih6b50JqmCk5AuNTti/Uq/aXL0nU=
Subject key identifier: 3B:F6:B1:0C:E2:05:22:C0:87:7B:8D:A5:37:F5:C7:51:FE:31:1A:A1
Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
Certificate serial: 1090
Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/F8D3F93A679211EABCEE086DC4F9AE02.roa
Signing time: Thu 01 Sep 2022 18:14:47 +0000
ROA not before: Thu 01 Sep 2022 18:14:47 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 136468
IP address blocks: 103.35.251.0/24 maxlen: 25
103.35.251.0/28 maxlen: 28
103.35.251.16/28 maxlen: 28
103.35.251.32/28 maxlen: 28
103.35.251.48/28 maxlen: 28
103.35.251.64/28 maxlen: 28
2402:cf80:100a::/48 maxlen: 48
2402:cf80:100b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4240 (0x1090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
Validity
Not Before: Sep 1 18:14:47 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6310f697-3fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:90:57:1b:39:c6:08:a6:5f:02:1b:5e:a9:
42:e6:d2:81:71:5c:a8:f5:0e:3f:fb:ca:77:b7:6b:
92:54:8a:64:b9:2e:a4:91:ba:86:82:83:d7:c2:d1:
f6:69:4c:db:52:55:55:9f:17:fd:80:dc:19:d0:97:
74:bf:24:47:b4:6e:85:7d:0d:24:62:88:ca:a8:40:
0c:85:ec:15:ce:40:71:49:b9:eb:2c:db:95:9e:a6:
52:8d:fb:7c:aa:ed:02:e5:b2:3f:db:b2:8f:0b:6b:
9e:3a:26:1e:96:5a:aa:9b:a4:35:a2:14:5b:fb:81:
ee:15:9f:9f:11:2a:f1:54:f2:ed:17:f6:7c:53:8a:
85:aa:c0:49:4f:57:41:41:8a:a7:f8:70:60:1e:21:
00:ac:e5:89:4b:43:84:e1:d7:42:58:3a:43:6b:65:
55:30:94:91:61:2e:1a:bc:6c:08:9b:a4:dd:ea:61:
06:35:ff:b6:c9:de:b9:da:01:7b:be:55:97:01:ed:
05:ca:94:93:12:32:08:25:b5:32:77:43:cc:13:7c:
91:8c:2c:14:b7:b8:7c:c8:40:b5:2b:14:42:7e:6a:
bd:9b:fa:ab:5f:ee:d0:6c:af:d6:02:a4:86:ab:02:
63:f9:3a:04:fb:ee:01:98:a5:77:ac:68:7a:c7:7b:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:B1:0C:E2:05:22:C0:87:7B:8D:A5:37:F5:C7:51:FE:31:1A:A1
X509v3 Authority Key Identifier:
keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/F8D3F93A679211EABCEE086DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.251.0/24
IPv6:
2402:cf80:100a::/47
Signature Algorithm: sha256WithRSAEncryption
5a:6b:4f:57:c8:fa:28:2e:b9:86:0d:d2:e9:5a:d0:aa:1e:74:
e9:33:ea:50:93:3e:de:3f:23:5c:85:8c:fe:49:35:b4:1e:06:
ac:8a:00:38:cf:b5:ac:eb:ac:61:ec:b9:07:d1:15:ae:36:a9:
ef:d3:bc:74:9c:51:43:e4:06:ef:e1:2f:0c:88:5d:83:f0:61:
36:4c:80:cc:f5:25:66:ec:9e:96:02:e3:ef:f0:97:55:36:88:
d6:36:fa:60:d9:74:a5:f9:77:d0:5f:3d:71:19:54:90:cb:3e:
49:a2:8a:a8:de:a2:04:a6:e7:76:83:43:31:69:db:50:05:c2:
de:10:4f:84:94:84:8c:26:2e:47:98:26:47:55:33:34:bd:aa:
7d:e9:60:54:b2:09:b8:83:59:ad:48:fc:3e:16:f2:35:3d:ba:
e7:8c:e6:8d:f3:64:25:13:bf:a1:fc:b3:b1:c0:09:4f:22:1f:
8c:30:e2:0b:59:df:17:48:0a:ab:83:c5:ae:d9:c6:45:e7:11:
d0:0e:f6:e6:d7:3a:28:2f:7e:cf:37:fb:8a:96:50:1b:f4:14:
69:ff:d7:a2:79:f9:3c:24:75:07:33:6c:a0:95:ca:df:36:6c:
fc:f3:16:36:c6:91:36:84:d9:74:3a:8b:d8:7d:0a:12:9f:06:
65:5d:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org