Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/5FAC2680659911ED8981D533C4F9AE02.roa
File: 5FAC2680659911ED8981D533C4F9AE02.roa (raw, json)
Hash identifier: rRuAt87uht1ziFGBPGWBOj4QuEqS4tAXruZxp+Q3g6E=
Subject key identifier: 8C:BB:AD:10:F5:8D:CF:90:9F:0D:3D:24:75:6B:0F:9E:5E:77:8B:3F
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0726
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/5FAC2680659911ED8981D533C4F9AE02.roa
Signing time: Wed 16 Nov 2022 10:28:13 +0000
ROA not before: Wed 16 Nov 2022 10:28:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133973
IP address blocks: 103.112.1.0/24 maxlen: 24
103.112.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Nov 16 10:28:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6374bb3d-2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:9f:29:97:31:f4:d7:2d:e6:90:78:34:f8:
9e:48:8f:90:27:ae:dc:8d:c7:36:8e:7f:03:f0:3c:
f7:1c:2b:29:4d:96:f2:60:c2:d4:0f:06:ad:c3:fe:
b9:bc:d0:54:3e:78:4a:a9:56:b3:78:33:7d:a9:00:
fb:94:e6:90:7b:18:fa:18:fe:c8:6c:a3:96:d3:3d:
e7:39:da:3a:4c:8a:9c:4b:61:14:19:46:61:1c:30:
3b:77:09:05:8e:b0:8c:82:d2:d8:3b:5a:77:b2:13:
ee:72:ae:8c:51:c1:f8:3f:ba:33:fa:16:6d:6c:7b:
de:db:59:96:57:1a:5a:e3:b2:49:8e:46:93:af:03:
28:2c:4c:2a:20:cd:bb:21:42:73:31:38:75:44:a3:
62:be:be:cf:df:a9:95:30:4c:3f:2f:a8:d5:2d:8e:
72:41:a1:98:11:26:f1:ed:e1:43:dc:81:91:3a:90:
df:62:0a:c4:33:78:1b:eb:0e:ab:e3:2c:df:20:23:
3e:c7:e5:90:59:9b:e2:7d:0a:74:ff:7a:a3:e9:00:
5a:11:b6:b0:7f:fb:e4:64:6a:09:79:58:96:e0:46:
91:0b:64:63:84:43:dd:c6:2b:c6:00:93:ec:80:10:
33:5c:20:76:85:57:7f:62:0a:e5:a5:ed:ca:13:72:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:AD:10:F5:8D:CF:90:9F:0D:3D:24:75:6B:0F:9E:5E:77:8B:3F
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/5FAC2680659911ED8981D533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.1.0/24
103.112.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b0:67:ac:1a:ce:06:2b:84:59:7e:e7:63:b8:af:e5:cb:cf:
e1:6e:ac:0e:7a:46:7c:21:1f:41:cc:5b:b4:08:7f:3f:01:92:
c5:04:c7:1a:f8:b8:6f:23:6d:e2:f4:60:50:fe:0b:b7:a8:e5:
28:ec:f5:35:be:bd:be:c9:4f:55:65:8c:3b:bf:ba:81:a4:87:
4e:69:9c:20:83:e3:4f:7d:4c:7f:cb:4d:cf:3f:6d:27:aa:03:
6f:71:5b:be:66:60:a9:ca:f1:ad:77:d8:43:4f:cf:82:eb:5e:
97:7d:57:50:85:1c:9c:eb:3b:ad:dd:e3:8f:aa:ee:3a:9c:86:
01:e6:09:3d:ea:dd:e6:a2:67:47:88:89:2b:78:27:16:5e:16:
0a:14:9a:15:00:e5:61:ad:17:84:04:b8:56:0d:74:d3:55:3c:
90:4d:65:02:9f:cc:8b:08:4f:5d:ef:8d:93:39:7d:0a:a3:cd:
05:7d:2f:c7:90:f1:35:96:01:18:52:75:84:a4:82:29:e9:9a:
b4:30:7b:2b:ff:fc:b8:5c:59:f8:b7:65:92:58:d8:9d:05:a2:
72:72:07:a5:ff:e4:22:4b:df:20:52:5a:b2:f1:66:c6:6d:9d:
5f:dc:2b:2a:e5:67:9b:47:ea:9d:50:01:d3:7f:65:a9:b6:ce:
9a:78:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-fra.rpki-client.org