Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/DB3A532C9F0511EC9DA80B77C4F9AE02.roa
File: DB3A532C9F0511EC9DA80B77C4F9AE02.roa (raw, json)
Hash identifier: mKnC3fC0Z3Q9F0SAegrywLG6nwnMOD3D/Aqg/2OtJn8=
Subject key identifier: 28:B1:CC:81:C3:5C:E4:73:DE:1C:0B:DC:E7:36:1E:BE:33:05:E6:11
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 83
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/DB3A532C9F0511EC9DA80B77C4F9AE02.roa
Signing time: Tue 08 Mar 2022 17:33:24 +0000
ROA not before: Tue 08 Mar 2022 17:33:24 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 57724
IP address blocks: 103.254.72.0/24 maxlen: 24
103.254.73.0/24 maxlen: 24
103.254.74.0/24 maxlen: 24
103.254.75.0/24 maxlen: 24
192.51.188.0/24 maxlen: 24
192.197.113.0/24 maxlen: 24
199.212.57.0/24 maxlen: 24
204.52.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Mar 8 17:33:24 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62279364-c963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:0d:ad:3d:a6:d5:88:48:13:e4:a7:42:b9:
f0:fa:4b:30:45:6b:d9:1a:65:e4:10:c6:ff:54:a0:
17:e5:83:10:45:36:0d:2f:00:16:4c:06:d3:29:24:
7c:11:56:cb:7d:0b:28:bb:bf:45:8a:e4:c6:05:9a:
0c:22:8b:fa:f9:e4:f4:f4:b6:46:3f:9a:a8:0b:5f:
d7:6f:f6:9a:34:39:3f:fb:86:9a:52:49:70:b8:a7:
80:63:61:e9:55:6d:87:b4:76:b3:c7:2c:ca:d2:c2:
6b:19:51:46:f2:bf:5d:36:fa:50:4c:2b:5a:70:2d:
ee:72:ce:57:13:a1:ac:7a:8b:75:40:5d:b0:18:92:
99:8f:ed:8c:d2:fc:12:5d:db:dd:88:70:c5:e5:2a:
f7:69:a2:1f:ab:5d:4d:d1:aa:79:ff:f2:15:92:ad:
2c:8a:8c:9d:53:1b:ab:4f:d1:bb:78:c2:d9:33:23:
ab:2f:d9:3b:9f:5e:26:62:ca:9f:34:4b:fa:a0:02:
d7:cf:da:ce:73:21:c2:f6:f6:1e:65:c7:66:b6:19:
fb:0f:09:cd:4e:26:8d:e9:d7:94:4e:06:08:2e:5d:
fb:2b:39:f0:66:d7:a9:15:32:c3:c2:6f:ac:49:7b:
5d:86:5d:e7:3e:93:95:3f:f3:cb:5d:88:16:64:e7:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:CC:81:C3:5C:E4:73:DE:1C:0B:DC:E7:36:1E:BE:33:05:E6:11
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/DB3A532C9F0511EC9DA80B77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.72.0/22
192.51.188.0/24
192.197.113.0/24
199.212.57.0/24
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2a:4b:0a:1c:28:24:e5:da:a8:42:0d:80:34:8b:ff:17:6f:
e1:7d:88:0b:38:09:48:8a:0b:4f:b4:90:0d:f0:91:4a:7f:f1:
8b:84:69:2b:4e:99:0c:59:63:9f:4e:c9:13:53:24:9b:2a:c4:
d0:63:fd:c4:98:06:6d:5a:dd:90:8d:20:fd:d3:e7:ca:ed:98:
6e:ff:22:06:18:07:28:08:af:9a:eb:01:67:1e:ff:7e:70:9e:
34:47:f0:b2:a0:c4:7d:86:d4:aa:07:32:e6:b6:75:dc:9b:c1:
be:47:27:c2:f1:35:9c:4d:8b:81:62:56:91:40:df:6f:42:18:
9a:12:77:b4:42:e1:0a:99:1a:0c:db:fb:e5:75:ad:52:68:08:
11:fb:c2:3e:e7:09:15:cb:24:c1:bb:0d:f6:4c:d5:0a:0b:c5:
b1:35:4d:77:2b:cc:6d:25:69:1f:5b:5e:b2:f1:4c:90:d7:49:
37:77:45:2f:7f:81:e4:06:a9:12:fa:fb:2b:d7:24:c9:99:cb:
c7:fb:8f:05:b0:9a:25:8a:68:4a:f0:2f:51:04:5a:7b:6e:9d:
39:f6:25:c4:5d:60:8d:1f:72:fe:1f:7b:83:fa:74:35:f3:ce:
d5:09:5b:4e:37:a0:d9:33:97:56:ef:42:34:2f:4a:d2:d5:33:
c7:18:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org