Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/68B6D808A2EA11E9B6FFE649C4F9AE02.roa
File: 68B6D808A2EA11E9B6FFE649C4F9AE02.roa (raw, json)
Hash identifier: AYLgtFBvWF1n6XSOeTKhDKHbA/JaK79KL2oNXO5V8yw=
Subject key identifier: 0E:5C:B1:C9:9E:CC:E0:45:21:F0:7F:7F:FD:19:3F:8A:70:F4:A5:97
Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
Certificate serial: 0CF5
Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/68B6D808A2EA11E9B6FFE649C4F9AE02.roa
Signing time: Wed 30 Aug 2023 18:26:14 +0000
ROA not before: Wed 30 Aug 2023 18:26:14 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139300
IP address blocks: 103.141.2.0/23 maxlen: 23
103.141.2.0/24 maxlen: 24
103.141.3.0/24 maxlen: 24
2001:df0:e280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3317 (0xcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
Validity
Not Before: Aug 30 18:26:14 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64ef89c5-2cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:7c:66:76:94:88:f5:16:a2:77:69:7f:8a:
64:ed:d6:9c:0f:af:30:9d:09:65:5b:b7:68:f2:c7:
d5:62:0a:3d:8b:13:bb:14:1f:77:bf:d5:59:00:62:
28:80:22:8d:be:c9:ff:25:62:0f:dd:5f:0e:80:10:
92:6c:4d:26:49:e9:3f:2a:db:22:3e:59:14:85:b6:
2a:67:d0:f0:e4:b4:ef:8e:d6:e0:f9:28:e6:aa:48:
51:5f:dc:0b:b6:04:81:aa:64:f0:79:6a:7b:a9:e6:
28:d2:4a:18:1d:f4:5a:1b:08:74:fe:de:bd:3d:62:
60:46:e1:ec:d7:8f:97:58:7f:84:35:e0:72:0d:db:
5c:17:1f:09:f6:e6:93:93:6f:48:b6:ec:e4:53:f7:
51:57:aa:57:2e:90:d9:a7:63:f8:ff:16:1a:86:c8:
88:24:d8:1b:aa:3d:16:6b:95:2a:fd:a5:92:7b:c5:
04:59:d6:89:c6:46:98:a9:55:55:2f:36:f7:09:4b:
68:9c:1f:2e:ef:1e:b3:43:c7:af:b8:a1:e1:6d:be:
9e:44:06:19:9a:3c:68:a0:2e:97:e3:55:58:cc:ef:
9b:bc:81:9d:04:1e:8c:f2:9e:de:33:01:e6:20:47:
5e:ad:d0:38:d1:70:51:a2:33:f4:16:ea:a0:a7:a2:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:B1:C9:9E:CC:E0:45:21:F0:7F:7F:FD:19:3F:8A:70:F4:A5:97
X509v3 Authority Key Identifier:
keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/68B6D808A2EA11E9B6FFE649C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.2.0/23
IPv6:
2001:df0:e280::/48
Signature Algorithm: sha256WithRSAEncryption
6c:9b:ba:f2:f8:2e:31:b1:b7:24:e5:7b:07:f2:c5:4c:a4:5c:
09:0b:ef:be:6f:14:3a:c0:a8:0a:67:79:3c:3a:7b:23:e9:63:
ee:5b:96:a7:20:4b:21:a2:e9:ab:e2:83:ba:3d:36:1b:4b:d3:
30:23:6b:58:83:f5:5d:f2:af:54:86:8d:0a:34:29:f2:da:1a:
61:07:45:4a:fb:10:cb:52:52:4b:94:87:c4:f1:5d:a4:87:d2:
d6:d9:3c:84:b6:4b:85:83:8a:8f:35:6e:c3:f9:a5:59:0c:2d:
17:0e:d4:5c:b6:b4:70:5d:27:76:9e:cc:05:41:e5:ad:ff:a0:
f5:c1:e5:c2:01:f4:19:6f:97:aa:66:57:f6:a6:df:dd:c0:2c:
6d:d5:c4:df:73:53:53:3a:f2:b8:61:87:be:af:dc:74:5d:c1:
ee:cd:1e:ee:71:f2:af:49:74:2a:28:bf:92:59:d6:87:52:96:
4c:0d:ac:75:3a:9e:c1:ae:10:a9:ad:41:05:70:46:9b:29:05:
15:54:d1:e2:52:e5:d0:8e:cc:8d:d0:a8:02:b5:06:4e:f9:cb:
84:2a:c8:3c:9d:6e:d0:c4:c5:21:49:c2:20:31:7d:9b:54:d1:
0a:40:5c:df:12:45:b2:03:01:67:49:55:c0:d3:02:75:9d:c0:
0f:2f:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org