Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/60BFEED4D2CE11EC9658CB1EC4F9AE02.roa
File: 60BFEED4D2CE11EC9658CB1EC4F9AE02.roa (raw, json)
Hash identifier: qRTw196Ferauo154PQJb8oE9ztlwF0svZeDGbgY5Nwc=
Subject key identifier: 6E:B1:84:E1:54:93:4B:24:48:F1:27:A2:84:06:EC:C1:03:30:69:E0
Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Certificate serial: 0A33
Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/60BFEED4D2CE11EC9658CB1EC4F9AE02.roa
Signing time: Fri 13 May 2022 15:07:18 +0000
ROA not before: Fri 13 May 2022 15:07:18 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 134595
IP address blocks: 103.130.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2611 (0xa33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Validity
Not Before: May 13 15:07:18 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=627e7425-86f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:2a:8a:dc:82:2b:64:7a:51:7a:25:5c:42:
ca:07:7d:82:81:6e:c7:c8:0a:bc:ba:74:13:6e:91:
5e:ce:f5:27:29:cc:6c:fe:c4:aa:b7:9d:87:61:ba:
d1:76:4c:7f:76:b6:99:df:33:ac:d4:41:af:c4:a2:
11:02:ff:9e:e7:72:df:f3:a8:73:1a:54:b0:7f:05:
a2:6b:19:76:52:77:ce:01:eb:13:fa:94:45:b3:c3:
47:12:90:c6:1d:06:cc:7d:41:e4:76:56:3d:22:02:
bc:fc:a5:f1:30:22:84:5e:3c:f3:87:cc:fa:ed:3b:
98:d9:15:d8:20:a5:02:40:aa:18:49:10:11:a2:b3:
40:a9:ca:0e:75:5f:19:33:7a:91:6c:f8:23:82:db:
ac:cd:35:f6:c9:2c:ad:a7:76:17:84:15:3c:cd:17:
8d:91:f9:cf:1d:fa:e8:8d:27:bb:a8:91:d5:79:19:
0e:98:af:b5:9a:38:b4:08:0e:bf:5d:c1:7a:fc:88:
95:e5:ea:eb:bb:51:98:4b:73:be:62:5c:47:98:5d:
c2:10:56:e1:ca:a5:e0:b1:89:f1:ee:de:c1:97:e7:
e7:3e:4e:16:a8:a3:8a:ad:0f:1c:ab:98:cc:e9:99:
ca:7b:a4:36:ae:57:19:c1:91:3f:06:36:d6:54:d6:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:84:E1:54:93:4B:24:48:F1:27:A2:84:06:EC:C1:03:30:69:E0
X509v3 Authority Key Identifier:
keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/60BFEED4D2CE11EC9658CB1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.170.0/24
Signature Algorithm: sha256WithRSAEncryption
08:75:c2:3b:b5:97:c6:ad:fa:34:a1:5d:6a:ff:0f:5e:d2:45:
78:d1:50:3a:1a:6d:1f:57:57:f2:cd:0b:1c:c6:c7:ff:72:74:
d7:c5:d9:86:26:f7:14:a3:a1:04:92:ef:0c:2d:eb:56:32:ae:
6a:ee:b0:9f:b6:7d:c5:54:a7:7f:58:50:de:28:f3:40:48:26:
0d:ad:e0:4e:f0:5a:ea:ea:8a:b3:02:e7:f3:9b:9d:f4:6c:e0:
bd:4f:de:45:fb:e0:1c:1f:f4:f7:33:3d:9b:89:7c:24:6e:c5:
cc:e9:78:9f:94:4b:60:73:dd:67:89:41:7e:4d:7d:67:c4:0b:
90:18:94:f1:3a:3f:2a:f7:44:db:2b:f8:be:dd:b9:f6:6f:2c:
b9:ab:00:aa:e4:69:19:af:30:55:26:26:3c:c9:2f:fe:07:0f:
e1:0d:2a:de:56:b7:e1:71:db:f8:80:ae:3e:11:b6:35:92:fe:
dd:e1:2b:a6:a0:34:ed:a3:0b:b7:7e:5a:16:95:9d:8e:36:fd:
18:85:2e:4a:e1:d1:f3:5d:a1:e5:4c:2b:ac:72:b5:6a:e5:e9:
ad:68:e7:28:65:42:50:4e:3e:f6:1c:a4:64:0f:9e:02:f1:0d:
f3:8b:fe:61:94:e8:9c:9e:1b:a7:63:76:c9:05:b9:36:b4:68:
b6:05:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org