Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
File: B49D604E651911ED80A85454C4F9AE02.roa (raw, json)
Hash identifier: vbhYS8xmDGALcY/6figJoT5pYTRuBk6KvLPoK54kvCI=
Subject key identifier: 30:9A:34:CE:F2:99:A6:91:71:51:C1:9F:AE:64:99:3D:E5:2B:0B:DA
Certificate issuer: /CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Certificate serial: 1F
Authority key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
Signing time: Sun 01 Jan 2023 17:24:42 +0000
ROA not before: Sun 01 Jan 2023 17:24:42 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 150422
IP address blocks: 103.38.208.0/23 maxlen: 23
103.38.208.0/24 maxlen: 24
103.38.209.0/24 maxlen: 24
2400:c060::/32 maxlen: 32
2400:c060::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Validity
Not Before: Jan 1 17:24:42 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63b1c1da-e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:c0:7c:c9:37:21:f6:43:47:db:a0:2a:de:
ac:82:d8:c6:5b:de:0b:dc:ae:ee:05:72:5e:dc:dd:
8b:ac:2e:96:dc:e9:8b:17:e9:63:b3:88:a0:6c:8e:
fb:34:91:bf:3b:67:22:93:c8:f1:c5:33:7d:26:40:
5e:c9:1e:1f:be:f8:de:06:e1:0a:f3:fe:8b:ed:96:
71:bc:65:00:48:df:cf:9c:bf:01:cf:a5:34:be:4a:
28:8c:8a:25:09:40:cf:f0:7e:0b:33:4e:00:f5:a2:
c0:16:37:7a:39:82:f5:0f:36:b1:9a:70:10:fd:7f:
6d:56:ef:b9:17:6d:be:22:5a:b4:b7:3b:fa:9c:ba:
b6:aa:ae:1a:c8:5b:5d:13:b9:ed:02:d5:61:5b:83:
41:59:1e:0e:e3:34:7f:d8:c9:e5:3a:37:10:3d:d9:
51:e0:1c:d7:2a:29:fd:13:1f:57:f3:70:a9:64:7b:
73:d5:69:dc:aa:80:ae:31:c1:a8:72:b9:0c:0a:30:
22:72:8c:f7:48:93:a3:2c:c4:fa:e8:22:89:e0:5c:
9d:20:c1:3c:90:33:f2:d8:13:3d:db:ca:62:48:f9:
3c:0d:8a:95:52:5a:bc:15:df:b8:51:c1:20:2b:95:
6f:a9:20:77:dd:1e:94:8b:c7:26:4b:89:c8:92:b6:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:34:CE:F2:99:A6:91:71:51:C1:9F:AE:64:99:3D:E5:2B:0B:DA
X509v3 Authority Key Identifier:
keyid:C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.208.0/23
IPv6:
2400:c060::/32
Signature Algorithm: sha256WithRSAEncryption
95:71:9c:ff:bc:77:b2:45:8a:55:d4:e5:23:26:c9:3c:0a:93:
a9:11:65:df:7d:92:b5:98:61:f3:a3:8d:1c:7c:c9:c5:46:4e:
a8:d5:ad:90:d9:57:89:71:e6:08:66:c1:f6:df:dc:7e:6c:78:
8e:30:bb:2b:41:51:e5:0a:9d:18:9d:09:08:e6:a9:52:43:36:
3a:f0:25:09:cd:ab:41:b9:9e:e8:41:c9:54:3d:26:5f:c9:ca:
70:93:a6:46:a9:66:47:8d:ca:1f:e3:0c:27:c4:d9:8b:44:92:
34:6a:ce:83:d7:50:d8:48:a7:69:b0:2c:97:8f:2d:58:37:e4:
c5:c5:cd:9c:30:9d:a6:a9:8c:c1:db:a5:cc:28:58:ff:8a:61:
24:6f:97:28:b8:42:38:d2:08:bc:3c:05:9d:46:7e:29:58:16:
b2:96:60:fb:f0:a0:36:30:6f:36:00:3c:48:e5:fc:e6:d2:9b:
da:f2:6c:98:c9:0f:b9:6a:04:4f:eb:da:c7:66:c1:72:88:3b:
7e:84:b8:42:00:fc:7b:a1:c0:bd:9b:98:8b:3a:15:9a:38:41:
c2:91:2c:30:16:57:ac:97:5b:bc:a6:b2:b9:7e:7f:f9:dd:13:
71:61:7d:0e:7c:f3:01:5d:2d:05:6c:d2:f8:1d:52:fa:32:0d:
4c:ff:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org