Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B63E62E8B59911EC8AF81F77C4F9AE02.roa
File: B63E62E8B59911EC8AF81F77C4F9AE02.roa (raw, json)
Hash identifier: QuldCczZF0+9sXOQThSpG/3464CQGaNnfLgZMpnaTVo=
Subject key identifier: 58:ED:C5:52:ED:37:B2:D0:6D:8C:7C:51:CE:56:B1:69:C8:4B:7A:9C
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 0DAE
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B63E62E8B59911EC8AF81F77C4F9AE02.roa
Signing time: Wed 06 Apr 2022 11:07:14 +0000
ROA not before: Wed 06 Apr 2022 11:07:14 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 4842
IP address blocks: 103.135.101.0/24 maxlen: 24
2404:7ac0:608::/48 maxlen: 48
2404:7ac0:660::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Apr 6 11:07:14 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=624d7461-f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:b3:48:a5:5d:13:d0:3f:fb:72:4f:0f:bf:
19:48:a4:54:c7:98:ed:59:8b:2a:82:f6:a5:df:7a:
14:0b:f0:1a:66:73:44:d8:39:dc:84:ef:5d:2f:b0:
7d:91:8b:2b:53:43:51:86:aa:02:2e:15:85:e8:af:
6c:b7:7a:a7:e7:f7:9c:c0:bf:1b:c1:89:9b:17:dc:
a1:58:32:6e:df:1f:e9:6a:97:dc:21:bf:7d:d0:7f:
30:04:12:20:69:cc:f9:10:e7:ed:99:f5:32:8e:21:
46:d4:8f:e2:63:88:42:45:1d:97:a5:40:88:3e:45:
21:8d:86:67:a3:3e:07:9d:2a:d5:4a:a1:e3:05:be:
1b:1c:d5:af:2e:85:67:10:6d:6c:6f:55:0d:86:7d:
69:a4:05:6b:93:4b:76:ec:26:87:33:57:4f:7f:e7:
ba:e4:9b:03:db:b1:55:48:b1:7a:3f:9a:7b:dd:cb:
6b:dd:00:72:5d:14:5a:32:05:f2:07:e6:3a:d3:38:
72:11:e2:7b:3d:46:6b:a5:02:c7:3d:3a:c0:cb:0a:
83:76:26:52:af:23:7a:2e:e5:42:4d:ec:4c:00:fe:
c6:4b:22:c3:87:a2:cd:03:68:d9:b3:85:3f:9e:d0:
75:28:d9:f5:62:88:87:38:f0:be:3c:55:e4:be:f1:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:C5:52:ED:37:B2:D0:6D:8C:7C:51:CE:56:B1:69:C8:4B:7A:9C
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/B63E62E8B59911EC8AF81F77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.101.0/24
IPv6:
2404:7ac0:608::/48
2404:7ac0:660::/44
Signature Algorithm: sha256WithRSAEncryption
8f:a1:e3:48:a8:fe:07:24:29:54:8c:62:27:8d:85:24:4a:3f:
2a:c7:cd:34:54:2c:b6:02:f8:2f:58:3d:cb:bb:86:c1:e2:a7:
a9:8a:b1:b0:ab:70:dc:12:01:67:0c:03:22:ad:21:6f:f4:0f:
f6:0e:b1:d2:6c:ec:cd:29:96:97:54:3e:4d:05:69:98:82:69:
24:3d:58:0c:1a:08:e4:28:00:bf:a4:88:58:06:bc:61:14:60:
86:21:37:9f:e9:ee:36:99:68:36:af:ad:d3:ac:6e:f4:b5:9c:
7c:a8:97:d2:07:5d:9d:f0:0d:a5:88:96:d5:98:ee:88:59:a2:
f1:b8:ff:16:cb:52:52:a1:3f:57:a1:a5:13:7b:05:44:9b:48:
27:19:80:b4:34:9c:6f:71:f7:28:78:d9:ca:f8:bb:b1:a2:52:
05:7d:e5:6f:a7:62:4f:c0:2d:6a:94:96:05:ad:71:dc:b1:83:
b6:68:1c:a2:57:a5:a9:b0:0a:0b:80:a6:9d:d0:38:cc:df:f5:
b0:1b:b5:cd:fc:4b:d6:48:d1:b8:04:e4:b2:41:46:36:25:98:
06:50:7f:83:7c:22:79:10:0c:b3:0a:77:b0:58:0c:85:6b:11:
16:00:a2:e1:7f:1a:dd:c5:94:ad:27:3e:d9:01:64:a4:d3:c3:
f2:88:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org