Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/416530B4D10A11ECA78C081CC4F9AE02.roa
File: 416530B4D10A11ECA78C081CC4F9AE02.roa (raw, json)
Hash identifier: nVvYxZfTBnW+dEfy9xwq6WUvaaWlepr1OljwtzzictI=
Subject key identifier: 20:82:17:F5:8D:86:F0:06:64:07:87:0A:49:5A:29:FA:2A:8E:1C:97
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0443
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/416530B4D10A11ECA78C081CC4F9AE02.roa
Signing time: Wed 11 May 2022 09:10:52 +0000
ROA not before: Wed 11 May 2022 09:10:52 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 141414
IP address blocks: 103.158.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: May 11 09:10:52 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=627b7d9c-8444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:b4:5f:a9:f7:70:e7:d9:a8:57:b0:99:92:
8f:63:93:0a:ce:b6:0a:64:af:a1:fc:31:2a:f9:14:
13:d2:b1:31:ba:2a:75:50:8f:5a:30:4b:89:b0:15:
a3:f5:58:22:5a:f7:4e:2a:2f:ec:28:c6:7e:69:05:
08:b3:8f:d0:00:71:2b:12:31:6b:f0:b2:aa:cf:14:
7c:18:22:16:b0:54:a2:71:0d:73:7f:03:74:e2:53:
13:a1:e6:14:0a:d9:18:7a:82:60:34:c7:b8:fe:21:
d6:df:81:a8:55:02:40:1e:ac:51:35:71:78:1b:b8:
03:dc:d2:ed:6f:9d:1b:b9:34:4d:d1:ab:7f:80:2d:
c1:4b:ed:ce:12:af:c0:b0:57:24:2c:1d:72:0e:11:
a3:0e:a5:19:46:d0:0f:95:6a:9d:f0:0d:c6:60:77:
4c:90:0a:d4:b5:1e:04:7e:61:1c:41:18:bb:98:85:
b9:70:54:ee:26:f8:2a:d7:3e:94:f1:25:1b:16:8a:
81:19:e9:2a:2e:44:d5:30:2a:a9:37:e6:ad:c7:e0:
79:b0:9d:65:b7:db:f6:43:50:36:e2:17:a2:87:5c:
06:62:35:64:33:48:c0:cc:c5:81:dc:0b:a3:3e:cc:
07:a1:de:07:e5:53:85:04:74:2a:c2:0e:bb:b9:56:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:17:F5:8D:86:F0:06:64:07:87:0A:49:5A:29:FA:2A:8E:1C:97
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/416530B4D10A11ECA78C081CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:66:73:57:59:af:59:49:6d:04:47:a7:79:90:5e:9a:10:02:
39:93:9f:e9:5d:ef:db:4e:76:07:45:a1:2d:62:08:76:12:67:
5c:76:63:82:49:f7:8f:77:4a:a8:41:a4:cb:3f:1a:52:0c:40:
74:7b:56:44:36:ff:a1:22:77:87:5e:c8:33:a5:f8:ce:a3:8a:
88:b1:d6:ff:f9:6a:51:0d:fd:90:3b:65:e1:39:d6:45:c6:08:
a7:8b:30:6e:f8:f3:d3:19:45:72:16:79:69:3b:3d:f3:74:f2:
54:0e:02:f7:a8:e2:1f:a3:dd:f2:ad:48:6c:1b:51:93:a1:9e:
66:d5:1f:bb:c3:ca:b0:ea:b8:ab:53:13:91:18:2c:bb:10:8c:
5b:57:02:98:d0:26:9d:3c:8f:ff:4f:d5:23:6c:69:af:d8:b4:
d5:a0:cf:5f:56:5e:bf:4e:5a:e9:d0:de:c0:33:19:c0:60:a5:
53:cf:4c:30:9d:85:6b:49:8f:17:6b:ed:a7:8a:1b:f4:8c:f3:
7a:ed:2a:59:6c:d9:f1:f6:ab:0e:f8:b4:ae:f8:99:b3:37:e0:
5d:c3:ea:74:93:f5:ce:bc:5f:46:d9:15:fc:03:3f:42:6f:17:
91:8f:29:7a:ef:2a:24:31:4f:b7:89:5a:e8:f9:e4:b4:6f:d7:
86:e2:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org