Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/748E24E6E45211EB81261357C4F9AE02.roa
File: 748E24E6E45211EB81261357C4F9AE02.roa (raw, json)
Hash identifier: xcuN0aBxTizDc80KMEutOr/9iWRDi16YGIsKHQ4HWf4=
Subject key identifier: 7B:6F:D5:19:42:1A:A4:6A:02:64:BC:DC:F2:22:6E:0B:02:0D:C2:EF
Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial: 0303
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/748E24E6E45211EB81261357C4F9AE02.roa
Signing time: Tue 02 Aug 2022 14:31:20 +0000
ROA not before: Tue 02 Aug 2022 14:31:20 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 139297
IP address blocks: 103.140.246.0/23 maxlen: 23
103.140.246.0/24 maxlen: 24
2001:df0:df80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Validity
Not Before: Aug 2 14:31:20 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e93538-cbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:ea:2c:1e:1d:22:03:80:f1:ac:03:58:6a:
fb:12:81:6e:23:7e:b8:a9:93:ab:0c:b2:fe:bb:6c:
03:6f:d4:f5:93:27:32:42:d3:f6:8c:01:36:4b:07:
74:13:18:9a:9d:90:19:5c:7b:fb:ec:8f:f9:18:5a:
18:95:24:96:ef:fc:47:62:0f:84:00:d3:10:20:18:
4d:70:41:77:27:ae:9b:5d:ab:b0:be:48:50:fe:5b:
7c:e3:a8:8f:71:73:48:44:d3:8c:16:fa:d4:2e:e8:
c6:2a:51:18:37:a6:f3:20:77:be:cc:75:51:49:7f:
ce:e9:b0:aa:01:f6:f5:0a:13:7d:98:f7:6b:3a:19:
27:48:cb:e4:bf:7f:f9:e9:6f:de:76:6d:f3:c6:03:
ca:ac:74:7f:de:9d:29:65:0e:48:33:e1:ca:9e:f9:
a5:cf:b1:55:a8:34:2c:58:d4:05:4e:a9:bc:fc:ff:
42:c9:06:0f:12:0c:78:17:00:5a:e9:a9:00:88:5f:
1f:f0:2f:c3:db:7b:91:2e:87:34:97:7c:f6:2b:d7:
05:a4:a3:a8:12:fd:22:ca:5e:d5:bb:4e:73:69:8e:
86:14:49:83:a6:a1:90:cb:bb:4b:d4:bf:b3:d9:8e:
45:6f:64:ac:26:01:e7:ba:e6:3a:f6:8e:ab:82:e4:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6F:D5:19:42:1A:A4:6A:02:64:BC:DC:F2:22:6E:0B:02:0D:C2:EF
X509v3 Authority Key Identifier:
keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/748E24E6E45211EB81261357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.246.0/23
IPv6:
2001:df0:df80::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ca:f5:57:ca:9d:80:a2:d5:e6:05:82:1e:92:2c:fb:6f:06:
f4:a0:8c:3b:de:4a:c4:1c:2e:0d:54:a9:4e:e7:ea:67:26:1f:
bb:15:59:1f:c6:15:6d:d8:92:f7:3a:0f:34:d5:9a:7f:ea:fd:
52:38:be:cf:de:4f:dd:94:0b:6d:91:b1:81:77:17:05:e0:40:
22:7c:aa:aa:2d:36:eb:1a:d0:b6:6a:55:90:15:38:4d:08:ac:
fc:ba:04:c1:18:a9:f0:13:5f:07:b5:0f:3d:ac:e9:9a:bf:85:
80:bc:0c:3e:99:f6:07:02:79:ae:01:0a:ae:b5:25:19:bf:af:
32:3f:bf:0a:85:09:2d:cd:9f:d3:4a:2f:29:50:c0:54:e1:bc:
fe:1a:10:d6:8b:b6:b2:55:70:e2:16:f7:28:02:a5:c5:64:fc:
8d:aa:3b:d0:4b:ec:f9:78:5c:8e:90:48:44:ca:c1:96:be:3e:
c2:54:b2:b6:36:27:2a:8f:7a:34:3d:7f:52:19:ef:6a:49:2b:
51:f6:fb:cc:65:ec:c0:0a:24:79:66:55:3c:5e:5b:b6:e1:85:
e4:56:c6:35:72:27:1e:de:ea:5e:0a:53:79:92:57:a8:f9:c9:
58:2e:a7:f9:85:a8:25:a8:c9:d5:01:37:35:d5:03:e4:aa:f7:
a0:75:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org