Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/CA8BDE1C92CA11EBB15CF45CC4F9AE02.roa
File: CA8BDE1C92CA11EBB15CF45CC4F9AE02.roa (raw, json)
Hash identifier: qrCc0gBvUggLWneCYIYx35+gvCY5/+r0IzkbYpYXLN8=
Subject key identifier: 81:B4:22:F7:4E:3D:89:CE:28:FC:30:B7:D4:4A:9B:B1:C4:10:0C:37
Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial: 02E5
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/CA8BDE1C92CA11EBB15CF45CC4F9AE02.roa
Signing time: Tue 17 Aug 2021 09:16:30 +0000
ROA not before: Tue 17 Aug 2021 09:16:30 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 138561
IP address blocks: 103.133.4.0/22 maxlen: 22
103.133.4.0/23 maxlen: 23
103.133.4.0/24 maxlen: 24
103.133.5.0/24 maxlen: 24
103.133.6.0/23 maxlen: 23
103.133.6.0/24 maxlen: 24
103.133.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Validity
Not Before: Aug 17 09:16:30 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=611b7e6e-b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:ca:da:39:b6:2f:3a:86:c7:03:1a:ca:b4:
b4:bd:fd:e4:12:3e:94:9c:e2:6a:f6:2d:6d:da:46:
02:a3:04:41:7e:2f:99:6b:25:fd:84:d8:56:de:a7:
5a:c3:49:d3:6c:cb:1f:a7:32:42:70:5d:9f:96:5e:
93:ba:70:e6:9b:a4:4c:17:88:41:2b:9c:9b:0a:9f:
28:fc:38:09:7b:97:a0:e2:df:b0:9e:34:20:de:31:
1d:ea:09:72:ea:f3:20:cd:89:84:31:c7:6a:5b:63:
ac:53:64:04:e1:34:6c:5a:fa:d9:61:88:22:ea:43:
d7:62:05:d1:51:5b:f0:da:ba:99:48:2e:67:c6:12:
53:ee:d2:5c:61:da:de:e3:04:9a:ba:a5:8d:fa:a6:
a5:ad:aa:83:16:44:eb:9a:c1:37:84:2a:77:2d:67:
6a:b8:04:0d:73:1d:8a:11:8d:3c:d4:a7:d0:4d:e5:
02:67:14:cb:ed:32:fb:68:6b:ab:4d:1a:fb:e8:bb:
a4:be:f1:68:c3:70:aa:01:0f:c2:b5:c7:d0:4d:79:
1d:04:b8:55:9d:62:49:8b:a2:8c:cc:38:a5:e5:30:
7e:78:25:e9:89:40:d9:d4:fa:1b:e8:2e:df:8c:b4:
f9:be:7c:6f:d6:10:a8:73:01:c5:44:5b:91:96:73:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:22:F7:4E:3D:89:CE:28:FC:30:B7:D4:4A:9B:B1:C4:10:0C:37
X509v3 Authority Key Identifier:
keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/CA8BDE1C92CA11EBB15CF45CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.4.0/22
Signature Algorithm: sha256WithRSAEncryption
08:b2:e6:bb:d3:1c:4d:f0:d4:7b:9f:28:c3:ed:25:f5:74:92:
13:7f:ca:29:cd:99:8d:8a:07:89:b3:c4:ac:79:c6:2c:49:73:
20:74:f1:b3:46:f9:65:ee:88:fb:d3:a7:23:ad:c8:46:97:f8:
83:1c:51:b1:c9:9c:a7:03:73:f4:71:03:2f:db:23:8b:d6:b7:
ed:36:c6:f1:c8:01:98:1a:1a:0c:e7:1f:87:70:c2:b3:f2:02:
c6:48:fd:1d:54:ff:a1:9b:1e:60:7f:06:2d:c1:24:85:2f:1c:
3b:f7:b7:fd:a5:b3:19:ac:8e:98:48:19:cf:3f:c7:8f:0e:a9:
0d:5b:cb:38:cb:51:01:e0:fb:8c:37:0e:b7:86:63:03:e8:f2:
e1:26:ec:79:4a:cb:30:b4:44:99:49:ff:a3:fe:c9:8b:f3:35:
d4:33:95:c5:07:e3:64:48:31:5b:32:3e:a9:7e:71:0c:97:49:
54:24:af:fd:83:4a:a0:20:15:11:59:50:52:88:d4:dc:26:2a:
50:4f:1c:27:1f:4c:ed:17:23:92:23:12:c7:87:de:c2:77:c2:
60:c3:ce:8e:d0:94:e4:59:16:8d:a1:45:43:16:d6:e5:94:3a:
da:a7:cc:80:60:f6:83:f5:3f:28:b9:99:13:b3:fe:b7:ea:63:
45:f3:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-ams.rpki-client.org