Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/3F82BC8A547C11E8B0B28267C4F9AE02.roa
File: 3F82BC8A547C11E8B0B28267C4F9AE02.roa (raw, json)
Hash identifier: KrWsdKPHMOpO8Vzm5MDXl+UKJPfQPlP1WEFCVoJzr4c=
Subject key identifier: FD:9A:4A:06:4F:DC:CE:ED:FD:02:25:36:0C:5D:B8:B8:94:FF:22:B2
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 1574
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/3F82BC8A547C11E8B0B28267C4F9AE02.roa
Signing time: Sun 27 Feb 2022 17:23:56 +0000
ROA not before: Sun 27 Feb 2022 17:23:56 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136230
IP address blocks: 103.84.96.0/24 maxlen: 24
103.101.172.0/24 maxlen: 24
103.101.174.0/24 maxlen: 24
103.101.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5492 (0x1574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Validity
Not Before: Feb 27 17:23:56 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=621bb3ac-8684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:40:f7:71:1b:7a:62:85:85:94:08:3d:dc:
50:67:88:e2:b6:05:b4:ac:03:6c:f5:6d:73:76:57:
4c:44:37:11:bc:49:4a:4b:d7:5e:c7:2a:7f:b8:5b:
c1:bc:a3:f0:9a:eb:be:3e:11:76:c2:0d:5c:cf:31:
15:63:91:71:67:5b:50:53:ae:5f:fb:84:b0:83:fc:
1c:8f:f8:7d:ea:b8:ca:3d:da:48:15:92:7c:c1:bb:
19:b8:01:47:c5:6b:38:09:7e:f9:7f:7c:73:5d:63:
4b:e7:7c:3f:89:23:54:57:66:de:37:84:6f:83:a6:
e6:6d:30:80:da:6c:5c:34:2c:39:e2:7b:5c:44:91:
9d:25:7d:6f:8d:d9:ba:5d:29:0b:52:af:96:41:e0:
a6:7a:7b:51:c0:6c:e0:7e:c8:c1:01:d1:8c:36:59:
02:1d:7d:ad:f7:86:b7:32:94:4c:22:cf:f5:24:5d:
96:e5:25:93:65:1f:26:4b:51:d0:a0:41:ac:dc:70:
87:6f:b2:b6:1e:2d:2d:6c:2a:ac:f2:a9:02:fc:27:
44:2c:8c:ea:22:80:de:d0:a8:50:f5:d8:bf:ba:d9:
8b:ec:93:fc:7c:56:5d:ff:39:35:1d:e9:e2:4b:1f:
f5:8b:e4:2d:7d:10:70:88:10:d6:0b:e7:5f:56:a7:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:4A:06:4F:DC:CE:ED:FD:02:25:36:0C:5D:B8:B8:94:FF:22:B2
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/3F82BC8A547C11E8B0B28267C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.96.0/24
103.101.172.0/24
103.101.174.0/23
Signature Algorithm: sha256WithRSAEncryption
62:06:ae:fb:b8:2e:88:ac:91:6d:d3:71:5d:05:46:77:0e:ee:
91:c7:7d:70:8b:84:e9:d5:36:b0:68:11:7a:2f:86:2f:80:79:
12:5b:f1:fb:ea:7e:e6:70:34:9e:27:49:0c:fc:b7:49:0a:ca:
86:b7:5d:ad:7f:6c:bd:c2:4c:36:56:93:10:2a:e3:70:be:15:
a1:fc:b8:2a:5b:79:9b:37:24:6d:98:09:45:13:76:ce:88:12:
e6:46:ea:85:cb:d0:e0:42:65:8c:0a:f9:a3:e7:3c:20:89:b8:
f5:32:9e:5b:b5:da:9d:32:09:44:1b:52:1d:00:56:57:f0:45:
8a:c6:32:a3:5c:aa:fc:bb:a4:15:ba:e3:75:80:2d:9b:64:40:
cc:a1:93:a1:db:4e:f7:c6:39:16:ad:2d:a8:ea:5c:43:27:57:
26:cd:0f:da:13:c3:8c:e4:0b:6c:1b:f5:0d:a1:57:d7:fe:47:
82:db:7e:7e:b8:93:07:cd:4d:7d:89:f7:83:05:6b:9f:54:28:
ee:85:fc:19:26:6a:f4:be:46:38:33:49:cb:39:03:b0:4b:99:
f5:07:78:c8:43:cf:98:a8:85:13:fb:9c:01:99:a9:f8:5b:b7:
20:7f:1b:a7:6e:db:34:45:78:27:1b:a3:75:83:42:05:df:02:
ff:33:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org