Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/86F80F0E258111ED9EC26986C4F9AE02.roa
File: 86F80F0E258111ED9EC26986C4F9AE02.roa (raw, json)
Hash identifier: s8Z+p/q+Dewprm2sQ9IH65j8A2Wu7+Dl9PLPw65roXI=
Subject key identifier: DA:89:14:61:37:66:55:9C:81:E6:8B:60:00:B6:1A:97:1F:44:F0:45
Certificate issuer: /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Certificate serial: 0A57
Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/86F80F0E258111ED9EC26986C4F9AE02.roa
Signing time: Fri 26 Aug 2022 20:56:16 +0000
ROA not before: Fri 26 Aug 2022 20:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135438
IP address blocks: 103.111.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Validity
Not Before: Aug 26 20:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63093370-4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:03:03:8a:f7:1a:7a:96:ee:90:d8:75:8d:
5e:6b:91:55:6a:0c:8b:c3:f5:c5:a0:ab:c2:7c:71:
81:3b:bf:53:56:38:9b:e1:60:4e:27:8b:bd:33:28:
cb:b2:71:14:b3:6c:5d:e8:5c:16:35:71:b4:3f:40:
30:39:36:ec:2e:df:e6:58:fc:c2:1e:92:f4:c8:af:
02:48:5e:d8:59:2c:25:74:89:73:de:16:05:7f:a9:
49:8a:4c:ab:33:f3:ab:f2:f5:33:05:78:74:73:b6:
de:ed:9a:53:23:c7:ac:80:61:82:67:f5:c4:c3:fb:
1d:3c:68:d7:73:54:b7:5b:7d:eb:35:22:22:da:b4:
70:ac:dc:71:53:38:5a:3e:61:41:9c:01:ff:dc:e6:
85:f3:7f:26:92:7a:f5:5b:3f:e4:e8:72:22:bd:e2:
e0:2b:ac:47:fe:e5:1d:8c:20:3d:8e:df:28:64:35:
07:dc:40:94:7b:e4:30:75:47:03:88:0b:c6:15:22:
64:99:7a:fe:05:80:03:a1:e7:5a:9e:9b:da:4f:06:
27:8f:f1:d9:02:fb:1b:3d:0f:15:98:1b:a2:41:81:
13:33:d3:33:00:a5:03:a3:83:ab:bb:fe:5f:16:9f:
35:65:02:29:d7:66:8e:35:35:9a:fd:40:b1:03:ed:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:14:61:37:66:55:9C:81:E6:8B:60:00:B6:1A:97:1F:44:F0:45
X509v3 Authority Key Identifier:
keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/86F80F0E258111ED9EC26986C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.12.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e9:6c:22:af:6b:8c:6e:a1:84:92:83:2f:3e:3f:80:1f:11:
9f:eb:e6:16:ed:41:87:61:a1:c2:8d:f1:cc:c0:4b:6d:b7:f2:
43:9c:f2:51:91:ec:fb:fa:df:7c:7b:8e:9b:96:76:eb:46:2e:
24:23:c4:07:49:13:75:ca:20:68:af:ff:bc:3e:90:c7:c4:bc:
7b:e8:f5:d5:8a:33:d7:a1:3f:38:c2:f4:9a:e0:66:36:33:dd:
e2:71:f9:27:85:68:af:8d:4a:1d:54:00:98:e9:c2:50:ac:49:
4e:27:98:ed:51:c1:1f:98:bd:4f:17:2b:8f:b9:e2:67:7c:80:
72:85:01:b2:04:71:c4:a7:de:0f:5f:0e:f5:50:28:8e:38:38:
46:a7:5b:c8:7c:84:f8:49:7c:40:73:12:da:1a:ef:80:58:1a:
73:79:60:c4:93:c8:b4:16:79:bf:db:1d:8d:0f:d7:e1:30:a0:
0f:38:93:a8:c6:58:d7:45:4d:b6:7e:b9:38:8f:7c:56:d0:1f:
1c:50:52:5f:97:45:9a:c4:59:11:3a:9a:af:19:d0:97:d9:52:
db:56:ad:27:72:12:20:42:1d:78:94:93:f9:b5:93:02:89:79:
f1:8e:c8:2f:f3:08:fa:7d:52:06:b8:82:8f:45:f7:73:75:af:
60:ca:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org