Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/82405DB4907511ECBAEE6128C4F9AE02.roa
File: 82405DB4907511ECBAEE6128C4F9AE02.roa (raw, json)
Hash identifier: joxiEPfGmCCGL0Qpr7VFOpMM/dgYqftuNEVzWz17ytM=
Subject key identifier: 06:37:52:00:AD:C5:45:A6:84:1B:78:A1:83:DE:56:11:BB:09:BD:5A
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 0D81
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/82405DB4907511ECBAEE6128C4F9AE02.roa
Signing time: Thu 17 Mar 2022 18:45:27 +0000
ROA not before: Thu 17 Mar 2022 18:45:27 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 4842
IP address blocks: 103.135.101.0/24 maxlen: 24
2404:7ac0:500::/40 maxlen: 40
2404:7ac0:608::/48 maxlen: 48
2404:7ac0:660::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3457 (0xd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Mar 17 18:45:27 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623381c7-e376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:6a:b0:ab:a8:20:c6:8e:8f:15:03:86:19:
6c:08:aa:7c:ae:5e:8e:2a:31:45:13:41:2e:18:e5:
49:b5:89:1c:1d:dc:5f:0f:16:87:c8:8c:8c:1b:33:
e5:84:37:33:03:ff:f7:8e:a5:55:c2:cf:c7:c7:2a:
e3:f9:95:20:15:9e:84:07:2f:79:e8:3a:47:0d:83:
2f:ac:88:ee:e9:ab:0f:5e:83:c3:12:25:ee:82:b8:
54:30:3b:8e:f6:b2:c3:14:47:ec:56:f3:1b:bd:8b:
40:ab:4f:bd:e2:b3:ce:d1:ec:6b:17:65:34:8f:d0:
a1:dc:74:2e:39:f2:f2:87:11:a3:3a:be:f4:60:86:
41:3f:37:2a:ac:19:61:df:1a:b9:28:eb:e8:7d:dc:
c3:f9:57:cf:76:0e:0a:86:46:f7:b2:81:40:64:8c:
90:5c:9f:f5:85:fa:d7:61:15:20:35:15:1b:eb:68:
b2:fb:c1:46:f4:d2:8b:10:18:e5:d9:29:5c:d6:0e:
ba:f2:cf:4a:c6:50:36:53:79:17:d1:c0:6d:0d:68:
ca:a4:d5:cb:9d:6a:71:a5:c2:5e:2b:31:67:73:2e:
1d:36:94:0f:6c:91:9c:b0:68:b9:6d:57:c1:0e:5f:
e3:02:c6:07:73:d9:41:61:3d:38:6a:31:2b:71:8d:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:52:00:AD:C5:45:A6:84:1B:78:A1:83:DE:56:11:BB:09:BD:5A
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/82405DB4907511ECBAEE6128C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.101.0/24
IPv6:
2404:7ac0:500::/40
2404:7ac0:608::/48
2404:7ac0:660::/44
Signature Algorithm: sha256WithRSAEncryption
78:f6:34:53:b4:ec:9d:f4:84:b3:1b:4c:aa:66:68:05:92:f5:
11:a7:91:44:18:0a:27:06:fb:f1:8a:f1:e5:ab:00:25:c1:90:
59:c9:11:35:15:b1:f1:77:96:92:de:da:f0:0e:b7:ba:d7:1f:
fe:d2:fd:f7:11:03:0a:7d:a1:45:6b:3c:2b:a0:8d:fc:cb:a5:
29:76:2e:4c:f3:d8:06:c5:e2:0b:f7:ef:b9:37:96:30:5c:95:
8e:6a:df:18:90:f8:e1:3e:ea:2e:20:e8:52:a6:a3:cb:97:82:
9f:4c:8d:a8:9f:a4:8e:06:52:c7:b3:f6:fe:70:4c:83:27:55:
7e:32:70:25:95:73:37:5a:42:7a:d8:15:b8:15:f6:e0:87:8e:
08:d0:e8:fb:aa:32:b4:a2:c3:42:1a:3c:cc:bf:7f:47:fa:93:
0d:7c:c3:db:6f:1e:cf:c3:fd:10:9e:53:f2:a4:de:30:76:87:
5a:64:ec:e1:ae:76:a3:fa:44:38:05:f1:39:68:0f:ab:62:5e:
6f:e1:6c:ae:87:56:88:16:74:29:56:df:98:85:24:7f:50:5b:
dc:aa:28:b3:70:bd:19:cd:59:f5:87:48:a8:e9:7e:eb:22:2b:
22:3d:c3:7d:b5:a8:8d:55:4f:36:7b:5c:48:0c:d9:0f:b9:4a:
80:e9:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org