Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/1490FF28AC3D11EDA57EEC56C4F9AE02.roa
File: 1490FF28AC3D11EDA57EEC56C4F9AE02.roa (raw, json)
Hash identifier: hwKOkZ6Y16yB/b4Z8zQ+XuOb6lb6D8fEh/Bu7kGnOpk=
Subject key identifier: 21:A3:62:17:8D:03:E1:9E:EC:33:29:70:AC:2B:E2:CD:39:47:67:E2
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 02
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/1490FF28AC3D11EDA57EEC56C4F9AE02.roa
Signing time: Tue 14 Feb 2023 07:56:26 +0000
ROA not before: Tue 14 Feb 2023 07:56:26 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 150745
IP address blocks: 103.81.28.0/24 maxlen: 24
103.81.29.0/24 maxlen: 24
2001:df1:e940::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Feb 14 07:56:26 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63eb3ea9-dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:98:73:9e:ac:8f:e7:f2:77:c7:f4:96:ec:
72:c8:b3:50:55:95:2b:5e:48:80:1f:fa:59:12:ac:
23:9b:0c:67:b7:d0:bd:57:fa:12:df:a1:7e:0a:44:
39:e5:84:00:22:6b:6c:39:5c:a9:0b:b6:c0:04:f7:
4f:c9:99:e3:14:fb:f9:77:46:b4:16:1e:33:88:45:
02:74:7d:90:bf:02:61:54:09:ab:b6:2e:d1:58:7e:
59:2f:37:33:ca:38:1f:51:2f:19:eb:75:01:6d:e5:
d8:2f:ed:21:1c:27:db:c2:3c:d0:90:d7:bf:57:36:
44:a3:b9:f6:d7:ea:be:ec:05:91:cb:af:30:4b:91:
14:d5:29:4a:f8:d0:bf:11:8b:e9:d3:1a:92:ce:9e:
88:2d:2a:72:89:cc:a6:06:26:0a:bd:87:32:83:24:
f1:6c:d6:4c:98:bd:84:37:7d:b2:99:64:5c:bc:7c:
67:05:80:9c:d2:8e:42:03:f6:45:70:d2:61:8f:60:
12:55:f9:73:d0:35:82:f8:46:4d:7d:5e:8d:38:98:
95:7a:b2:90:61:87:fb:6a:76:c6:f9:a0:a7:64:5e:
34:86:cd:34:bb:a1:0c:8c:48:03:0a:7d:50:0c:20:
fb:56:50:2b:2e:bc:d9:a0:65:bb:e0:88:82:ed:45:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:62:17:8D:03:E1:9E:EC:33:29:70:AC:2B:E2:CD:39:47:67:E2
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/1490FF28AC3D11EDA57EEC56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.28.0/23
IPv6:
2001:df1:e940::/48
Signature Algorithm: sha256WithRSAEncryption
b7:a8:2d:5e:68:c1:18:23:ed:9b:00:1b:d4:7e:f6:82:a9:3c:
6e:c1:60:fa:84:19:af:53:81:f8:dd:68:1a:8d:f2:eb:52:4c:
ca:4c:8c:bb:de:26:2c:01:d2:f2:60:ca:93:7a:cc:e0:fb:2e:
88:c6:e5:da:af:b9:c6:90:03:22:dd:5e:55:34:61:01:2b:83:
0b:eb:4e:ac:70:34:ab:df:13:2c:9d:59:56:39:3f:6e:44:0a:
32:36:a7:ed:b2:08:b8:99:17:3d:13:be:3e:21:f8:b6:01:44:
3f:18:3d:1e:80:2e:d9:49:56:80:87:50:32:28:23:5c:7b:f9:
e1:fa:87:02:bd:6b:81:e8:a7:de:f1:8d:eb:a8:73:48:c7:96:
c5:7b:8e:75:b9:81:97:9d:2a:0c:a9:c5:6a:68:ac:51:5b:81:
05:6a:8d:60:2f:1a:25:b7:94:fa:33:7a:77:e3:1c:55:c8:1a:
39:ea:7e:53:f6:9c:13:53:3c:bd:c8:02:58:e1:90:18:15:fa:
8b:32:ad:40:1b:02:a5:63:ea:db:08:7a:d1:fa:de:cf:e2:bd:
d7:3c:cb:84:e7:cc:59:1a:06:2d:71:b1:85:92:a2:0b:80:dd:
dc:09:03:ab:0b:c7:21:f9:07:ea:38:ce:99:73:36:d1:36:3b:
a0:e5:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org