Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/C3B143C8C21A11EBADD5893AC4F9AE02.roa
File: C3B143C8C21A11EBADD5893AC4F9AE02.roa (raw, json)
Hash identifier: mInNVn9o9+V924MurP8gK6aOl7hz/7lju03ZRmaUTe8=
Subject key identifier: 38:1F:90:CF:F9:31:80:DF:07:ED:D7:AC:75:C5:8C:AA:90:31:92:D4
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 02D5
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/C3B143C8C21A11EBADD5893AC4F9AE02.roa
Signing time: Sat 12 Feb 2022 13:10:44 +0000
ROA not before: Sat 12 Feb 2022 13:10:44 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 134599
IP address blocks: 103.162.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Feb 12 13:10:44 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6207b1d3-9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:a6:27:b0:3e:6d:e4:7f:84:00:0f:fb:11:
14:e3:f4:b4:5b:9f:3b:41:29:09:b9:b2:81:76:c7:
6a:ed:4b:01:9e:0b:a7:87:91:ee:5d:e7:e7:19:8f:
d0:60:fa:d8:b4:9f:8c:be:d0:3a:fd:95:63:9c:e1:
45:77:e3:7d:56:e8:7d:da:c3:0d:dc:3f:2f:56:8e:
48:3c:d1:af:73:e8:00:38:37:31:45:7e:73:78:b9:
9b:2f:06:60:bb:3d:c4:29:76:2c:2a:20:73:5b:58:
29:9e:bb:3e:de:d7:89:c4:e4:31:03:e0:48:ef:52:
a1:68:28:4b:1d:04:03:ce:f9:ee:f8:93:41:fb:d7:
d5:f1:12:ba:d4:30:8a:ae:d9:73:aa:31:4a:66:28:
b7:9f:aa:a9:74:c9:7f:e5:ff:9b:03:be:ad:98:aa:
37:a8:d6:b5:0c:69:87:3e:9c:66:28:ee:8b:e9:42:
23:c0:3d:4d:62:2f:52:b6:ae:60:1c:7b:4d:c8:3c:
20:84:e0:55:ce:b4:09:f0:ca:9f:cb:0a:78:6f:8c:
12:bb:4b:d2:17:45:3e:50:77:e0:e7:59:cd:1c:e0:
41:ec:44:13:40:2f:7c:be:9d:56:e0:d8:f9:81:66:
6c:a4:47:54:75:26:21:1e:11:1a:56:81:9b:a5:e3:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1F:90:CF:F9:31:80:DF:07:ED:D7:AC:75:C5:8C:AA:90:31:92:D4
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/C3B143C8C21A11EBADD5893AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e9:8e:d0:d2:32:5b:8d:83:47:d0:8b:52:d1:c5:83:79:30:
ae:18:99:7d:5d:d4:7a:d9:22:36:07:16:5c:38:9a:32:af:fd:
8d:b4:32:4e:21:c8:b0:ad:d2:bc:d3:db:a0:c5:bc:49:13:87:
f8:92:2b:b1:bc:89:22:f8:d4:8f:4c:d5:4a:2d:a7:bc:17:f8:
77:6a:64:33:ff:b4:c3:2a:77:c9:86:4c:7a:4f:2c:5e:4f:96:
72:56:a6:3d:9e:aa:9c:44:72:8f:c7:ab:39:29:10:95:dc:9d:
14:36:b5:a7:7c:a0:b6:e1:7f:05:b1:57:14:1f:bf:df:9e:b1:
89:df:f4:00:7e:1d:01:5f:99:da:c9:7f:60:1c:d8:b6:2e:69:
d4:87:ef:e5:e0:ee:72:ab:29:d4:1b:0c:11:31:1e:f8:2c:da:
3d:04:24:1e:e3:70:48:ba:40:7f:50:87:17:74:17:cc:61:df:
8d:68:53:7e:d2:0e:5e:22:b6:01:c4:40:ca:5f:00:8c:93:e8:
77:15:24:4b:e7:6e:db:4e:42:68:ea:10:18:8c:4b:29:bc:f6:
81:7b:e8:9b:2d:91:ff:8d:d6:a2:1a:e9:05:3f:5f:aa:65:91:
e4:a9:e0:38:69:77:3f:48:24:22:5d:f7:0b:37:e3:ff:62:2b:
e8:a7:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org