Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BBA57F8078BC11EAB9E4F747C4F9AE02.roa
File: BBA57F8078BC11EAB9E4F747C4F9AE02.roa (raw, json)
Hash identifier: kZztV13IERPiado5WpZBTPydf3dVJq9GQ8gZlJPlr6g=
Subject key identifier: 2E:5D:69:D4:84:7E:6E:05:F8:3E:05:B6:50:DA:63:E5:4A:65:04:D1
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 061B
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BBA57F8078BC11EAB9E4F747C4F9AE02.roa
Signing time: Tue 01 Feb 2022 10:08:00 +0000
ROA not before: Tue 01 Feb 2022 10:08:00 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 135010
IP address blocks: 103.82.216.0/24 maxlen: 24
103.82.217.0/24 maxlen: 24
103.82.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Validity
Not Before: Feb 1 10:08:00 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f9067f-69f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:51:67:3c:2d:5b:f5:a0:f8:58:99:7e:88:
c9:9b:04:19:f0:15:79:e1:03:e8:1e:94:e3:16:f6:
ad:39:d7:02:8b:d1:41:91:2f:86:3e:f4:5f:1f:59:
19:58:cd:4f:19:15:6f:a2:ef:25:cc:7b:4c:bc:ce:
33:d0:ec:84:2c:44:ed:35:7a:58:c4:cd:74:9c:74:
1a:88:58:6e:c7:1b:77:cc:cb:58:bf:d6:65:01:11:
1a:44:c0:60:ab:b8:e0:1b:a9:92:b6:38:34:3c:bc:
59:e6:fd:98:3f:46:2c:8c:bb:41:c3:6c:83:7c:01:
4a:7a:45:ea:1f:be:56:43:fe:7e:7c:50:08:5d:be:
37:b8:31:a4:db:47:11:de:85:53:f7:44:31:e3:01:
26:ba:c1:b0:f4:1d:fc:a9:17:ab:65:ab:50:90:90:
39:df:f2:5a:99:0d:c8:8a:db:d3:50:da:57:c2:4f:
7c:e6:88:4b:3b:62:51:09:c6:a3:6e:14:a3:cc:d0:
5f:19:1c:e9:e3:10:1e:bf:5e:4a:1c:28:fd:4b:60:
fc:00:e2:50:5a:ea:02:7b:bc:2f:7a:f3:4e:c1:51:
be:f6:51:db:9f:e0:72:f9:64:53:41:b6:39:33:3d:
bd:d7:36:18:cb:26:db:7a:0d:2d:72:9a:2f:63:58:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:69:D4:84:7E:6E:05:F8:3E:05:B6:50:DA:63:E5:4A:65:04:D1
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BBA57F8078BC11EAB9E4F747C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.216.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f6:ae:36:a4:57:ff:bd:cf:13:01:63:c4:11:c2:f4:d4:25:
7b:6b:c7:b3:ef:67:a9:a6:28:2a:15:b4:b7:d6:a6:51:8a:24:
b3:d9:f7:2c:43:81:6a:9d:29:2d:af:97:9f:df:5b:96:ac:70:
45:f0:15:52:d6:69:27:85:81:3d:a2:01:02:c0:85:e2:23:54:
ac:e3:3f:18:d3:2d:6b:5c:74:d3:95:38:b5:52:b7:c9:61:aa:
a9:35:4b:a1:9b:49:0f:25:78:58:e7:71:e5:0b:39:40:5e:09:
4f:40:a0:ac:cd:8b:1c:9f:95:53:ee:b1:74:14:c7:ed:e8:f2:
89:82:93:97:53:15:a4:2c:73:b7:9d:eb:61:35:aa:31:86:7f:
06:66:78:6e:d7:5b:ee:bb:d5:c2:64:14:39:82:dc:79:28:81:
d1:fd:c0:73:29:bf:4a:8e:a9:e7:b6:c9:8e:7b:4a:59:33:22:
1d:91:02:57:4d:de:2e:5e:bc:be:26:fa:36:83:4f:25:17:cf:
b5:e4:f8:17:46:cc:35:94:b7:d6:d1:ba:b7:52:44:68:83:de:
b6:22:2f:52:6d:00:6c:b8:ec:01:08:38:8e:95:0d:18:e0:29:
b6:58:d8:f7:b4:8c:69:3c:b8:ed:fe:dd:a1:41:36:db:68:86:
5c:7d:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org