Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/D4269A4843E511ED802A4B6FC4F9AE02.roa
File: D4269A4843E511ED802A4B6FC4F9AE02.roa (raw, json)
Hash identifier: 4250LCjx6fV4sDZVqvAMxlMNTHQI0U9qPFiU3mWpFX4=
Subject key identifier: 6C:A8:90:16:41:D9:F7:7B:E1:3F:B6:60:CC:FF:AB:79:90:3B:D8:53
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 05A4
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/D4269A4843E511ED802A4B6FC4F9AE02.roa
Signing time: Mon 21 Nov 2022 00:09:45 +0000
ROA not before: Mon 21 Nov 2022 00:09:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 139088
IP address blocks: 103.156.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Nov 21 00:09:45 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=637ac1c8-7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:7c:d2:a4:6c:67:d7:34:e4:0a:ba:7e:ac:
11:6c:ce:a8:ba:d5:b8:31:b9:7c:17:d1:04:47:fb:
43:78:06:ac:04:6a:d7:7f:b1:c6:5d:30:4b:ae:2d:
5a:73:a5:d1:a0:5b:a2:91:8b:c5:19:14:ea:2b:a5:
da:ac:89:02:b1:b9:25:6c:bc:09:71:4a:35:3a:32:
eb:d1:29:5d:03:62:1d:3f:ad:18:05:fc:6e:5d:f3:
e6:84:5e:57:7f:26:e8:ae:8f:54:80:d6:64:7d:44:
a1:1b:0c:da:97:db:88:92:42:ff:3c:36:ef:05:51:
e1:a2:fb:5a:67:18:30:9c:30:e1:bc:d2:2d:01:15:
8e:4b:83:92:e5:4f:d0:59:8c:4c:c5:6b:33:c2:81:
97:b2:f8:b2:21:20:a9:b4:bd:32:2a:13:e4:1c:7e:
1b:c6:e5:23:4b:b3:c0:52:e5:85:f4:4f:84:bc:52:
67:eb:8c:f7:8b:3d:b0:3f:23:aa:df:b2:63:49:90:
1b:ca:46:d1:89:35:89:a5:e1:09:05:f0:bf:c8:78:
0b:7e:2f:a8:3d:9b:65:2f:c3:1f:21:45:5f:fb:55:
a9:3c:fc:56:0f:39:da:68:08:96:d3:9f:86:1b:24:
33:bf:a3:32:72:14:4e:ba:62:18:a9:98:45:9a:71:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:90:16:41:D9:F7:7B:E1:3F:B6:60:CC:FF:AB:79:90:3B:D8:53
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/D4269A4843E511ED802A4B6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c0:76:36:98:59:c1:60:82:b1:f5:13:67:ee:59:50:99:61:
be:b6:17:37:6f:92:cc:12:2d:b6:9e:3e:42:25:64:e9:72:06:
e5:07:97:80:5b:b7:ca:99:59:31:86:16:d5:c4:8b:03:1e:a8:
45:12:91:ef:62:c9:7a:51:64:25:72:2f:e0:c9:e4:a3:e3:89:
7f:db:9e:1a:f2:20:fd:d0:ae:19:85:8f:6b:10:c6:18:5c:80:
e8:84:db:f4:0e:70:6c:69:bc:b8:14:78:87:eb:1c:b5:89:c3:
3a:15:88:d4:d0:c1:2d:6d:27:26:ea:16:95:5c:67:ab:a1:e6:
65:06:b1:71:59:21:4d:7c:aa:ba:b8:94:dd:85:4c:cf:f4:58:
cc:21:9c:0b:9f:c1:9a:32:18:e4:eb:87:3e:08:2a:eb:18:44:
ec:ce:bd:e6:ec:e0:cd:af:52:75:15:8f:cc:ad:c2:70:94:b4:
4c:44:1e:cf:de:7a:9d:51:e1:e2:7d:57:10:e2:70:ba:ea:32:
75:e7:c5:39:98:b1:ba:bb:d6:77:59:2f:dd:ee:9a:1c:fa:a0:
cf:9e:9e:c3:d2:44:51:6c:a8:ec:eb:d4:20:98:3a:8b:45:df:
0e:fb:66:2a:b2:cb:67:20:a9:e8:26:2f:20:78:6a:4e:11:fd:
2d:ee:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org