Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/2BDA23807A8511EB9A14261CC4F9AE02.roa
File: 2BDA23807A8511EB9A14261CC4F9AE02.roa (raw, json)
Hash identifier: blT2lca1SkP3ieBVUxep4qv6Fjpkh8HPL4s7cRzn2U8=
Subject key identifier: 98:AE:C4:EB:A8:5E:A9:69:5B:81:49:84:72:E4:D9:64:14:AA:91:B8
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0390
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/2BDA23807A8511EB9A14261CC4F9AE02.roa
Signing time: Thu 01 Jul 2021 10:57:49 +0000
ROA not before: Thu 01 Jul 2021 10:57:49 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 140868
IP address blocks: 103.152.178.0/24 maxlen: 25
103.160.48.0/24 maxlen: 25
2001:df4:1780::/48 maxlen: 56
2406:7ec0::/32 maxlen: 32
2406:7ec0::/33 maxlen: 33
2406:7ec0::/33 maxlen: 41
2406:7ec0::/35 maxlen: 39
2406:7ec0::/40 maxlen: 48
2406:7ec0:2000::/35 maxlen: 39
2406:7ec0:2000::/40 maxlen: 48
2406:7ec0:3000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Jul 1 10:57:49 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=60dd9fac-76e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:e8:4f:2d:60:a5:93:a9:d8:aa:04:bc:6a:
ed:8c:e9:23:a6:8d:a8:98:2d:22:6a:b3:40:56:30:
ba:4b:d6:ce:95:87:49:7d:75:0b:92:41:4a:89:3f:
28:14:39:ba:9a:23:da:bb:dd:7f:a8:c9:e2:24:04:
93:23:2f:b7:ce:2f:9a:8d:be:2e:e2:07:ad:2d:31:
f8:9d:1e:90:e9:3e:a6:11:5b:7c:3e:31:08:12:a2:
d9:c6:74:ca:ef:93:18:f2:c9:47:90:e8:3c:c9:2b:
de:7f:61:3e:7b:8f:1c:16:33:9d:9e:8f:da:41:0d:
42:69:4f:b1:32:05:ef:00:09:d1:88:22:a2:e8:bb:
6c:a9:4c:e3:ce:39:36:89:92:97:70:86:97:5c:1f:
bc:2e:6a:b4:23:6e:6b:42:13:78:ae:82:46:37:62:
37:04:f3:91:ce:d5:1c:5c:8e:b4:55:3b:9c:8a:53:
64:be:97:09:e7:df:e7:03:4d:b7:0e:51:11:68:28:
77:ea:5b:23:83:84:85:b9:c4:90:d2:84:39:bb:9a:
34:5a:91:4f:0d:cf:50:f7:39:59:c0:5c:ab:63:ba:
fa:f9:a3:57:05:36:69:f4:52:21:47:76:f9:f1:a1:
50:31:56:21:ba:0c:bb:79:10:73:9d:fd:97:32:c9:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:C4:EB:A8:5E:A9:69:5B:81:49:84:72:E4:D9:64:14:AA:91:B8
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/2BDA23807A8511EB9A14261CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.178.0/24
103.160.48.0/24
IPv6:
2001:df4:1780::/48
2406:7ec0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:57:5c:8d:e1:61:a4:d2:ec:ca:b6:0c:55:b1:c3:1c:e5:f7:
4b:72:ec:95:f7:a3:2f:77:01:ff:49:2b:2b:4f:4f:9d:38:2d:
f9:4d:12:0b:8b:c4:03:15:30:9e:9e:97:bd:af:75:7b:43:6d:
9b:67:d7:45:5a:eb:04:e2:a0:67:fa:59:f5:85:c6:ea:74:ec:
63:b1:cd:ac:03:5d:c0:01:bc:c3:00:02:36:0a:9e:4b:07:98:
32:77:fc:3f:0d:64:c9:1f:84:22:ff:86:2c:09:49:f1:74:19:
38:8b:e1:84:92:d5:60:e1:0c:f7:a2:9e:43:15:9a:c9:b1:cb:
26:1d:45:1c:de:bc:bc:cb:b1:c5:4c:c0:b3:19:a9:6c:24:a9:
69:19:2c:e9:60:5a:fd:1c:5c:93:05:e2:96:52:7a:71:78:fb:
a5:07:41:db:ab:04:c9:94:9d:fd:f1:a3:88:bf:24:54:15:f3:
76:36:9c:a1:cf:1b:47:8f:ff:a8:bf:f7:28:98:52:67:85:75:
b5:b8:0e:ab:28:d2:90:7c:cd:a2:f6:74:de:3b:4c:8c:69:cf:
7b:05:c6:4f:6f:f5:5e:7e:4a:63:50:18:a7:27:10:ac:30:b2:
68:ef:3a:2d:13:27:a7:3c:a7:40:c6:40:05:f7:11:f9:e3:bf:
2a:6b:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org