Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2DD74E90C9B611EAA2E57375C4F9AE02.roa
File: 2DD74E90C9B611EAA2E57375C4F9AE02.roa (raw, json)
Hash identifier: ibTcjOa4RElsz4Y16VkZdp8jOClC8xFV1BvNyDD6hHk=
Subject key identifier: FD:4C:A8:60:61:13:C1:42:5E:95:F6:F6:EF:F4:14:F9:B7:3F:27:72
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 24B7
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2DD74E90C9B611EAA2E57375C4F9AE02.roa
Signing time: Tue 02 Aug 2022 04:22:48 +0000
ROA not before: Tue 02 Aug 2022 04:22:48 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 138648
IP address blocks: 103.217.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9399 (0x24b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 2 04:22:48 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e8a698-cf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:71:0f:b7:3d:5c:19:8b:35:87:d7:34:f0:
9b:91:17:ba:7b:75:7f:22:a0:da:ce:d4:de:4c:c6:
a3:c7:b8:f0:11:23:48:27:70:14:54:7a:ce:eb:f1:
66:8b:7f:3e:0a:ef:34:33:5d:3c:6e:ee:42:3d:fc:
a6:99:9f:81:e0:7b:ff:39:db:24:d8:78:48:9d:9a:
aa:1b:25:65:67:e0:e4:09:1d:b6:20:bb:4b:5a:1f:
85:d8:78:ec:8c:5e:a6:99:9a:91:b9:84:d1:e4:56:
fc:5c:43:53:4b:35:ae:ff:eb:68:db:03:05:6d:25:
ab:41:31:06:2f:11:37:65:53:c5:ce:42:f9:f2:80:
fa:d8:41:b0:9d:c9:85:c1:e4:ec:79:6d:d1:b9:ac:
89:41:68:00:37:2f:83:13:e2:5c:84:c4:68:39:b2:
03:cb:62:84:42:ac:18:34:ba:34:ad:2e:e0:58:b1:
c0:c7:c8:a8:c1:0c:b3:36:c7:21:1f:3d:e6:2b:ed:
33:c2:29:c1:e9:1e:e2:5d:20:99:46:88:d5:7f:57:
8c:34:dd:bd:23:e4:90:91:5b:47:fb:c0:fb:2c:0f:
ed:16:84:be:1d:02:ff:ad:9b:01:9e:88:7e:bf:72:
41:c8:78:0d:09:08:36:54:3e:10:9b:fa:d0:0b:82:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:A8:60:61:13:C1:42:5E:95:F6:F6:EF:F4:14:F9:B7:3F:27:72
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2DD74E90C9B611EAA2E57375C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.253.0/24
Signature Algorithm: sha256WithRSAEncryption
55:90:99:76:d2:52:20:0e:ea:c9:47:1f:f0:6d:ef:ed:eb:3f:
cb:08:0d:b4:0f:e9:af:0a:70:3e:d5:f6:45:8b:0c:cd:9e:bb:
ad:3a:4f:9a:f2:ca:01:a9:10:a1:cd:00:59:e2:50:91:e2:be:
e7:56:d9:a8:f0:20:4f:5d:9c:09:6a:e6:03:47:4f:fe:86:bd:
a0:2c:0c:f5:41:01:fe:81:b1:06:ef:cf:f4:0f:fb:df:34:3c:
f5:3f:0c:46:0d:c0:15:5f:17:a1:2c:cb:26:96:6d:24:0c:cb:
07:9f:aa:87:72:90:71:c2:c9:54:84:6c:8f:be:a4:e3:5a:11:
5b:90:e5:59:62:4b:e2:88:c5:cd:14:07:bf:cb:cd:d6:7c:3c:
ab:83:b8:ce:59:10:ce:24:ba:ce:4b:d1:95:9a:8d:d6:f8:d8:
77:d8:c4:f8:d7:10:3a:a0:fd:42:55:8a:0b:33:d9:b5:f6:bf:
73:01:23:53:20:f5:2e:79:d0:68:73:bd:98:af:f3:45:9c:29:
12:bb:56:dd:45:f3:81:60:d9:f1:7b:be:1a:fd:37:33:c3:96:
7b:4d:c4:f4:f3:92:af:fb:70:ea:e2:c3:73:2b:c5:70:b9:9e:
c1:73:d8:da:88:de:83:43:da:12:14:00:bf:ff:e6:45:a1:aa:
55:4d:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org