Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/1FE5A63AB65211EC9691AC13C4F9AE02.roa
File: 1FE5A63AB65211EC9691AC13C4F9AE02.roa (raw, json)
Hash identifier: 7ODVdIax2FX8XHdCX9k7i+IRT8UoVv1KdOOwcA7cqTI=
Subject key identifier: 85:75:6A:A1:B4:AA:78:48:56:48:CD:DC:16:A1:49:19:E8:BD:99:47
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 0DB3
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/1FE5A63AB65211EC9691AC13C4F9AE02.roa
Signing time: Thu 07 Apr 2022 09:07:18 +0000
ROA not before: Thu 07 Apr 2022 09:07:18 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 41255
IP address blocks: 103.135.102.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3507 (0xdb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Apr 7 09:07:18 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=624ea9c6-ba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:68:1d:eb:4f:f1:20:5e:d6:01:c3:70:50:
50:f6:06:bb:1a:6c:12:93:9c:8c:55:18:db:92:b2:
07:9b:9e:e5:66:a0:7b:24:dc:ef:94:a9:34:75:ff:
ec:23:2c:3d:be:91:f6:23:db:a0:73:cb:98:d4:e8:
99:9b:b4:24:91:fd:d7:9d:39:56:fe:be:c8:b5:64:
67:45:0e:b4:df:f7:38:d6:d7:4e:4f:46:d1:d2:29:
c6:d0:6d:bd:fd:8c:32:cd:91:da:bc:7d:12:44:19:
ed:50:96:e6:de:c8:5f:42:80:76:2c:ca:b0:9a:c8:
af:e6:8f:71:9b:02:ac:30:41:30:af:c7:2e:b7:bf:
2b:65:f9:b7:48:ea:28:f2:26:16:b6:66:60:d2:8a:
d4:45:a0:a8:04:c0:58:09:64:98:34:27:0a:7d:b5:
33:63:26:ca:6e:fb:58:dd:8c:ff:e9:cf:fc:1b:59:
38:5a:3b:19:87:21:9b:ef:52:ef:b1:22:00:c8:14:
fe:83:49:ae:5c:ea:d8:7b:eb:df:29:8c:f0:7c:79:
f7:7e:aa:be:4d:f8:bf:40:81:b4:22:9b:59:f5:18:
58:1b:b4:65:4c:28:db:53:90:31:1c:bf:56:3b:17:
99:59:e2:cc:cf:2a:1c:1d:b8:6a:4f:e8:4f:32:cf:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:6A:A1:B4:AA:78:48:56:48:CD:DC:16:A1:49:19:E8:BD:99:47
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/1FE5A63AB65211EC9691AC13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.102.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a6:3a:72:85:b3:f6:8e:c4:39:c0:41:e8:2b:12:cb:62:e7:
df:48:48:ef:1e:63:be:9b:76:a9:dd:08:02:ef:71:e2:ec:ba:
80:a1:aa:a8:52:97:e4:85:05:20:45:74:81:0b:99:72:48:18:
a4:ba:1f:43:fe:9d:73:70:8f:07:98:02:68:61:a8:05:52:6f:
33:1d:c5:d1:c5:b0:04:75:68:67:4e:23:be:4c:4b:14:d4:08:
a0:fa:a8:d6:55:42:f6:e7:4e:b9:a7:07:01:bc:b2:17:d0:6f:
36:32:5f:8d:19:7d:6a:64:0c:a6:2a:19:fc:c3:31:b8:8b:51:
52:07:d9:6b:94:44:66:71:5b:de:7b:27:da:dd:ff:64:21:d7:
2a:16:47:e5:40:50:90:2d:73:0b:ca:24:a7:15:e6:30:0b:1a:
58:b0:ed:0f:57:85:4d:6c:fa:96:9c:b4:0e:6d:13:b2:67:a8:
32:35:52:c2:df:aa:c7:17:fd:27:4f:f2:c3:09:89:10:bf:47:
d4:8a:5a:30:6c:dc:68:07:5f:4c:14:d3:82:bf:b9:dc:fa:64:
70:73:24:ab:d2:ac:63:98:85:1b:94:74:3d:f7:c0:e1:d4:12:
15:ec:be:30:eb:1f:07:04:84:dc:d8:f6:7a:1c:53:ee:e7:b7:
70:d8:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org