Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/C5792C9CC20511EDB7FDDA50C4F9AE02.roa
File: C5792C9CC20511EDB7FDDA50C4F9AE02.roa (raw, json)
Hash identifier: 4l09PXW/IilRoEzMqmioJ/R/qej2aAiEoRLHK/OBufo=
Subject key identifier: EA:C3:17:7B:7F:20:D1:25:45:D0:71:49:F7:D2:9B:C7:10:EC:87:71
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 07
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/C5792C9CC20511EDB7FDDA50C4F9AE02.roa
Signing time: Tue 14 Mar 2023 01:15:57 +0000
ROA not before: Tue 14 Mar 2023 01:15:57 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136923
IP address blocks: 103.71.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Mar 14 01:15:57 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=640fcacc-7627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:44:f0:c7:69:53:ff:24:38:44:53:19:fa:
61:26:9c:d5:df:60:49:d8:dc:be:27:7a:81:01:fa:
22:8a:27:ca:de:de:a9:75:3b:a1:e1:35:fb:38:cf:
b5:8f:3c:66:bd:06:33:c8:88:f5:a1:59:c1:bd:a9:
2d:ca:8d:39:50:bc:e4:7b:04:65:6b:16:61:59:af:
8a:76:d1:e6:74:3b:3a:ee:22:9e:b1:04:f0:30:20:
62:25:2a:8a:36:93:1b:59:55:33:1a:53:3d:9f:cf:
02:ce:67:f9:b2:20:b8:b9:65:c7:36:00:2d:32:cf:
94:c8:b6:73:75:17:d5:61:c3:74:47:9b:48:4f:e2:
fb:99:c1:0d:ad:3d:2f:76:9c:fa:c2:9e:20:46:e5:
06:4a:5a:59:08:07:97:7d:5e:13:38:2c:25:21:79:
10:5f:a2:45:ca:e9:1a:d0:b6:4a:b5:12:ee:e1:38:
3a:ef:76:cc:b5:7b:5b:41:48:78:12:0b:1f:56:1b:
d7:ac:51:ea:ff:d2:b9:ed:e3:0d:7c:c7:c3:5f:19:
d6:50:af:49:1d:1c:4a:cc:d5:0d:a8:6b:aa:f4:a5:
74:08:6a:a3:40:38:d5:90:dd:67:06:8b:0e:91:e1:
0a:fd:0d:ec:fe:fb:9e:f2:63:d4:8a:f7:74:6e:12:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:17:7B:7F:20:D1:25:45:D0:71:49:F7:D2:9B:C7:10:EC:87:71
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/C5792C9CC20511EDB7FDDA50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.94.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ef:7b:b0:f4:d7:9e:8c:ea:48:b7:4d:12:d4:e6:29:fd:0b:
5c:f8:74:06:3a:4c:3f:7b:85:49:ad:4a:60:6c:63:a6:d5:cd:
4c:31:b1:85:5c:73:59:4e:5b:20:49:bd:8b:6c:77:5f:6d:cf:
0f:5d:4e:54:d9:db:ef:4c:66:95:a4:27:ed:6d:68:db:c2:6d:
ed:af:aa:d7:2f:2d:dc:ae:23:2f:da:b0:9f:d7:32:7b:51:d3:
48:ff:1b:61:43:9e:58:5e:4c:7b:8d:4d:57:9d:3f:71:5a:9f:
b0:62:eb:89:b4:fa:77:d5:f9:ce:f7:c9:a6:ba:0a:f3:c0:d7:
fc:57:0f:98:d7:91:4d:ac:27:71:ac:83:c0:45:c4:e0:00:74:
e5:ee:1c:46:3b:27:40:dc:85:7e:85:2b:05:4a:fe:70:31:86:
b2:e3:f6:b5:ab:27:ff:bf:97:b3:41:2c:77:8f:85:b6:0e:73:
a5:e1:a0:a4:48:fb:0f:46:f3:0b:bc:d1:d9:92:9d:a0:a2:6d:
08:92:d0:e9:01:4a:8d:70:90:58:b2:1f:e5:36:05:ae:63:a9:
5e:35:44:4d:39:57:1a:b5:1b:3a:a1:c2:04:c6:6b:14:57:9d:
dd:3f:bf:03:8f:c6:a8:8c:61:96:f1:f6:99:6d:29:c2:1e:80:
bf:58:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org