Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/EBFD3C12BD4E11EC96F8D625C4F9AE02.roa
File: EBFD3C12BD4E11EC96F8D625C4F9AE02.roa (raw, json)
Hash identifier: R6qwqTLYk1Tr0t/bvRt8wQtM4el/8nrMqx0S4K5H2yU=
Subject key identifier: 21:CD:B0:93:74:B3:14:23:C1:77:E9:B9:09:16:2B:A7:EA:3D:EE:F3
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 03F3
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/EBFD3C12BD4E11EC96F8D625C4F9AE02.roa
Signing time: Sat 29 Apr 2023 03:42:55 +0000
ROA not before: Sat 29 Apr 2023 03:42:55 +0000
ROA not after: Mon 28 Aug 2023 00:00:00 +0000
asID: 137491
IP address blocks: 103.112.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Apr 29 03:42:55 2023 GMT
Not After : Aug 28 00:00:00 2023 GMT
Subject: CN=644c923f-5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:7b:38:3f:ad:8b:de:0f:fb:4c:05:52:ad:
32:66:55:c1:d8:9c:8c:0f:44:a1:33:84:fc:53:55:
2b:91:32:eb:8c:73:9f:59:26:45:e9:bb:c1:53:35:
42:99:e6:fa:5f:5b:32:17:4a:6d:17:04:4d:7d:e9:
6f:31:a8:3d:d9:98:62:1c:ae:9d:af:7a:7f:e5:34:
6f:57:94:ed:9c:81:6d:11:91:b0:9b:71:1f:4b:52:
b8:cb:da:06:cd:7f:5f:78:6e:04:07:d0:9e:59:ea:
1a:8c:a2:a1:6a:4f:8f:55:73:27:1f:7b:77:05:09:
ee:9f:7d:1b:53:df:1d:7a:a6:50:0e:23:fa:83:77:
54:b1:e5:db:41:de:6c:4e:7f:1c:11:dd:59:d8:13:
19:f6:38:48:a9:3f:c4:32:6a:f0:47:b2:95:58:6f:
40:c1:2c:db:92:a0:72:2a:56:e1:b3:dc:bb:6a:d0:
ef:41:d5:1f:76:83:b3:11:16:95:a9:b1:94:c3:b6:
61:1f:cb:bb:94:ea:ec:bc:bc:52:60:44:3c:7d:fe:
12:96:69:b5:eb:af:cb:77:7b:35:1f:c3:10:32:bd:
3e:6d:a3:44:f1:62:08:7b:fa:8e:cf:22:ba:d8:6d:
ee:11:9f:7a:86:c3:98:1d:6e:81:3c:97:ea:6d:10:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:B0:93:74:B3:14:23:C1:77:E9:B9:09:16:2B:A7:EA:3D:EE:F3
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/EBFD3C12BD4E11EC96F8D625C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.237.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:e4:80:dc:2c:2a:24:63:73:d3:8d:5e:88:63:21:cb:49:
d7:96:9c:b6:2f:b0:ff:92:11:46:5e:2e:c7:30:9a:a7:a9:42:
f6:dc:88:cb:ff:57:f4:15:be:09:4e:73:cd:2e:52:ec:97:75:
eb:ad:1c:65:67:ba:e0:cd:04:69:5b:6a:11:25:bd:2b:64:e0:
e2:5b:da:18:42:70:fe:34:dc:59:b6:c0:55:9f:93:c1:80:b5:
19:f8:12:33:fb:f4:1f:b4:08:b0:b8:36:57:cc:2b:ff:6b:92:
8d:c9:4f:26:da:bd:5e:11:03:12:39:1f:63:d9:49:04:05:50:
97:1f:59:7b:09:99:70:ab:10:9a:bf:1e:2d:6f:70:d5:ff:5c:
b7:08:bb:c4:62:7f:5a:6a:e0:32:1a:f5:ff:7f:5b:9c:da:a3:
46:72:7f:d2:96:3f:f2:9d:11:b0:64:92:ea:b9:6b:5d:6e:d5:
af:83:66:4e:f7:8d:81:61:25:05:5f:3b:d4:3e:c3:8e:e4:93:
58:d1:13:f0:f2:57:47:95:7a:71:3c:f4:cb:0f:29:c8:76:a4:
84:56:6a:86:a9:53:1c:10:28:2f:d2:a7:8c:07:92:1d:ad:ed:
bb:76:56:92:77:da:b9:65:e6:06:be:91:a2:50:96:09:ed:1e:
90:0c:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org