Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
File: 03323014F00111EDA34BD84DC4F9AE02.roa (raw, json)
Hash identifier: uIlMALK1bzVVlvQm1RlPLecxFnJoDdsXl3kj076G+pY=
Subject key identifier: 57:F5:AE:BF:7E:6F:7F:E8:30:C4:C5:A1:B2:F1:54:4F:FF:73:DC:E8
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 33
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
Signing time: Thu 11 May 2023 13:37:46 +0000
ROA not before: Thu 11 May 2023 13:37:46 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149621
IP address blocks: 103.182.210.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416
Validity
Not Before: May 11 13:37:46 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=645cefaa-4c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:f4:63:cb:bc:08:43:e9:ca:4d:c5:ca:bd:
ad:43:f6:f2:60:65:6e:a3:4c:b8:61:74:2a:f2:70:
b6:cd:47:7a:7b:2f:33:27:48:33:00:9f:35:43:e1:
f3:8b:1f:f6:13:13:38:6a:71:64:7b:4e:e6:af:cf:
b1:07:41:83:f2:13:ed:cc:79:f7:ea:ac:3e:01:97:
ad:79:c7:28:dc:7e:dd:6c:2d:61:b4:a5:e4:b5:60:
6d:d0:e9:9f:93:0b:53:1f:7a:5a:8b:d7:5d:e7:01:
c9:24:d3:9d:5a:6e:89:e4:ca:76:cd:3a:9b:49:43:
cf:20:95:eb:82:36:8b:d8:25:7a:64:78:29:bb:1b:
3d:9e:75:a3:7f:b5:73:fc:ca:39:c2:e9:02:5d:75:
8e:96:b1:dc:b2:f5:a4:e5:dd:85:d7:24:f6:12:a6:
6f:b7:2d:2e:a9:bf:76:89:6f:2f:99:b0:5c:5b:4c:
ce:61:5a:a8:96:c4:94:0c:a3:c8:5f:63:0d:a6:fd:
36:63:00:fc:bc:fb:79:50:ae:7d:48:de:10:cd:08:
04:1b:ef:57:72:bd:99:99:6c:8b:4c:0a:a1:bb:47:
3c:68:9b:78:29:f0:68:b0:81:be:9a:39:f6:50:0f:
f7:24:f4:8b:c4:8a:32:7f:37:fc:e3:bc:d9:a0:b9:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:AE:BF:7E:6F:7F:E8:30:C4:C5:A1:B2:F1:54:4F:FF:73:DC:E8
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.210.0/26
Signature Algorithm: sha256WithRSAEncryption
8c:f9:7c:d5:3b:95:7f:b6:fe:48:95:2a:72:c2:d9:75:11:51:
9c:8f:98:c7:18:f6:3f:82:3a:b1:e2:bf:e0:b1:33:5f:44:35:
a8:66:50:d0:f3:48:0f:9e:55:3d:46:11:e4:ca:be:b2:00:00:
2a:b3:d8:18:e0:62:14:32:08:ac:80:bb:4c:90:a4:30:2b:05:
0a:88:41:aa:3d:0e:30:37:47:36:67:19:d9:01:35:73:8c:c2:
ae:2a:c0:64:f8:e6:33:bf:ba:ff:a2:8f:77:b9:cb:76:f2:ff:
33:2d:3d:f7:68:d0:6d:27:98:61:9b:05:ac:db:fc:1e:18:3b:
90:54:24:80:0a:46:ae:1a:c1:f4:78:68:5e:e4:71:cb:fb:cd:
6a:79:df:17:cc:b3:c5:1c:7a:ef:4f:04:bf:34:4c:df:78:b9:
ea:12:94:2b:d7:80:48:c0:49:e3:71:70:32:7f:72:af:35:66:
c8:ec:e7:35:bf:4a:1b:85:aa:0d:7a:31:76:8f:6e:11:92:42:
76:6f:03:1b:02:ca:4b:7e:ee:3f:99:58:13:3d:16:c9:93:a6:
f9:81:9c:14:6c:44:a4:99:a7:c2:79:10:3d:1d:92:37:90:79:
6c:3c:95:a0:50:f3:14:23:a7:7f:38:ae:24:4b:be:d4:c8:12:
2a:8f:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:03 2025 by rpki-client