Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/0F5F067E98EE11ED8C827943C4F9AE02.roa
File: 0F5F067E98EE11ED8C827943C4F9AE02.roa (raw, json)
Hash identifier: g+/rJDpHhjzutgtF4DoUXzVt97sLp+5E6nHaFAltea0=
Subject key identifier: 99:AB:B8:B6:81:BC:5E:94:9E:7A:DA:1B:95:27:D6:D9:D1:4E:C3:67
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 02E7
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/0F5F067E98EE11ED8C827943C4F9AE02.roa
Signing time: Fri 20 Jan 2023 18:12:55 +0000
ROA not before: Fri 20 Jan 2023 18:12:55 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139351
IP address blocks: 103.174.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Validity
Not Before: Jan 20 18:12:55 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63cad9a6-33cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:96:90:ad:5e:6c:4f:de:57:f1:4b:58:31:
f6:7f:52:a3:60:55:2c:c5:cd:7c:e7:5b:bf:85:e8:
24:7d:2d:8e:f9:a6:f0:b2:6e:43:ad:b9:e5:0b:66:
06:6f:9c:a5:4e:79:60:e8:ba:41:88:17:c5:8c:00:
78:5a:d9:c5:13:6d:c8:f6:4a:62:32:6e:3f:ac:61:
ec:ff:25:d7:ee:3a:30:8b:ec:1d:c3:7b:03:0b:3b:
50:2f:e5:76:8e:f4:f5:9b:9b:5b:a8:c8:03:10:d8:
8f:c0:1a:cf:cd:85:24:9f:f7:01:b9:6d:4a:8c:fe:
7e:da:38:bb:da:b8:3f:66:ce:f0:2e:2d:64:36:88:
03:7e:f4:31:8c:12:28:bb:4b:83:c7:6f:01:a7:61:
0e:83:4e:82:1b:03:55:d5:e4:3e:64:d9:02:b4:81:
3f:f1:17:ac:82:c9:8c:89:43:55:ef:85:68:da:68:
e2:47:c9:7d:1d:cf:50:08:66:48:f7:86:65:6f:a7:
0d:fe:e2:46:10:6a:f1:84:d3:c0:53:5c:32:75:d5:
71:c0:3a:2e:7b:8d:32:dd:ff:46:b9:51:26:e3:04:
16:fa:52:70:46:4b:cc:f6:7b:ff:bd:56:25:48:47:
e9:20:d1:33:67:08:e3:bc:32:5e:e8:74:e0:c7:4e:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:B8:B6:81:BC:5E:94:9E:7A:DA:1B:95:27:D6:D9:D1:4E:C3:67
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/0F5F067E98EE11ED8C827943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.5.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ab:f4:94:53:6b:e5:e2:34:05:9b:e3:53:82:9d:1f:75:ab:
67:bf:de:4f:e9:e7:41:e6:70:7e:dd:fd:cd:fd:2f:04:f7:47:
c5:97:cb:e6:7f:1c:73:8e:8f:fe:0b:42:8f:b9:0f:b9:d0:88:
3b:2c:d3:21:69:e5:0a:28:7f:e0:83:f3:ca:1f:da:47:d9:26:
1c:08:f6:89:fa:ae:0d:f0:1a:d7:36:76:16:bb:37:81:4e:07:
f5:e4:7d:9b:2b:02:98:ea:dd:ae:db:ef:57:99:93:df:2f:97:
27:d2:dc:44:b9:a0:e8:f0:04:40:d4:39:c6:f6:5d:ab:8b:a7:
57:2d:76:55:7e:b0:a1:c9:05:b2:7d:7f:9c:bd:d7:36:52:cf:
24:7d:85:74:55:be:c8:f7:c5:98:11:2e:29:b3:f5:ae:6b:02:
f6:ad:65:5a:d2:df:5e:75:be:e9:df:95:0a:c8:98:2e:4e:8b:
0b:91:54:f5:db:67:40:40:a0:6c:ff:36:e8:a5:a1:7b:49:c8:
a4:40:0e:d0:b4:6b:20:68:a6:49:00:fb:0b:e1:b6:62:e5:5f:
a8:42:a2:6a:a6:ac:8a:64:5f:eb:fa:d8:85:6e:78:e2:b5:0a:
4b:3f:69:4d:25:57:fb:36:08:63:a1:46:5e:db:2b:06:b7:d9:
95:52:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org