Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/73F36B0EE45211EB81261357C4F9AE02.roa
File: 73F36B0EE45211EB81261357C4F9AE02.roa (raw, json)
Hash identifier: /KlCFg2UZ6s2TKQ/6Lh1CeifxadjljojlOkrOpAuJas=
Subject key identifier: 63:E7:D2:AE:BB:FA:98:C4:94:22:E3:9D:EA:4E:88:FE:11:3F:E0:CE
Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial: 0302
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/73F36B0EE45211EB81261357C4F9AE02.roa
Signing time: Tue 02 Aug 2022 14:31:19 +0000
ROA not before: Tue 02 Aug 2022 14:31:19 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 132513
IP address blocks: 103.140.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Validity
Not Before: Aug 2 14:31:19 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e93537-1ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:8f:c0:4d:1b:ce:11:21:21:87:1f:e3:f9:
f4:e6:73:a6:f3:dc:e9:07:bd:90:2f:00:fb:67:54:
d4:a8:c8:84:17:85:a9:79:77:40:c7:12:92:e5:82:
e2:33:00:a8:af:c2:7f:a1:31:fe:19:1c:06:81:53:
37:a8:41:e8:3b:af:86:d0:5b:ba:92:f8:a1:ba:39:
9a:98:e2:82:4f:b4:99:54:5e:6a:5d:a1:d2:8e:da:
3b:8c:cd:53:37:fb:bb:74:87:fe:e2:62:2f:29:43:
d1:d8:38:91:36:a1:e2:90:e5:d1:76:3b:ec:e7:c9:
5d:ce:ee:e4:2e:5d:7e:02:61:31:a6:af:2c:ba:67:
2c:12:c6:f3:af:7e:0f:ce:ad:50:f3:da:97:d6:44:
e0:96:a1:59:94:68:9b:f9:76:37:7f:a5:c0:99:e9:
c8:c2:30:53:c5:4e:c7:10:13:88:99:30:3f:27:e1:
5f:a2:9d:df:c4:c0:53:7f:a0:b6:d1:56:a7:39:21:
3f:18:c9:fc:33:cb:61:60:f9:e7:3e:51:31:06:4e:
23:9e:f4:ee:ce:a3:04:04:fe:3b:9c:a2:fb:4d:31:
45:e2:11:be:4b:a3:aa:55:ab:a6:98:68:ea:1b:f3:
02:d2:b9:aa:b3:ab:32:c8:85:e5:6a:fc:13:10:ec:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:D2:AE:BB:FA:98:C4:94:22:E3:9D:EA:4E:88:FE:11:3F:E0:CE
X509v3 Authority Key Identifier:
keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/73F36B0EE45211EB81261357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:88:c0:31:9a:7c:d9:b0:73:02:8b:4d:c2:2e:ac:54:7f:a7:
4b:b9:4c:45:c0:f4:2c:67:36:9e:66:58:d3:67:a8:f3:5e:77:
93:1b:95:62:45:56:b0:a1:df:0b:40:5a:4f:09:f9:a7:87:ac:
18:57:45:8b:bd:33:e3:9c:12:15:91:74:44:38:5b:e0:15:7c:
b6:cd:b0:0d:ed:bc:4a:38:fc:3e:96:27:fd:e9:26:2d:31:96:
df:80:eb:12:ff:17:24:c0:59:d0:ce:d6:26:10:41:06:ad:82:
3f:eb:a8:20:b6:eb:ca:cb:4a:d3:56:75:6f:61:7f:d6:3b:b8:
97:37:54:78:c5:d6:be:72:7a:9f:dd:1d:1c:2d:0d:ab:d8:fa:
58:d1:8b:f6:6f:9f:af:cd:1a:e4:8f:90:5e:7e:6c:cf:d5:ca:
80:e1:6f:c7:31:c5:a5:5d:dc:ce:9f:e6:aa:dd:f0:73:01:c0:
60:f8:16:b4:68:78:7e:e6:81:69:15:ad:c1:1c:04:4e:c0:d0:
a5:70:c9:22:51:ba:ca:5e:e3:20:14:5d:54:a5:b7:f1:66:39:
d7:d5:4d:74:a3:bf:0c:37:cb:d7:90:df:18:15:fb:f1:75:ea:
ec:61:b8:ad:a6:19:10:87:a1:85:dd:f6:ff:50:de:07:ef:ad:
7e:68:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org