Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/071356302C4311EE9D4CC936C4F9AE02.roa
File: 071356302C4311EE9D4CC936C4F9AE02.roa (raw, json)
Hash identifier: /OfCXC3MbeDLhfo34X90YX2KMkCiZEDpP+04YV3Hbqs=
Subject key identifier: 54:06:05:2B:E9:F2:2A:E8:92:3A:01:C8:FD:C5:7F:B9:CA:F3:42:D3
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 0D
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/071356302C4311EE9D4CC936C4F9AE02.roa
Signing time: Thu 27 Jul 2023 06:01:29 +0000
ROA not before: Thu 27 Jul 2023 06:01:29 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138346
IP address blocks: 103.175.56.0/24 maxlen: 24
103.175.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jul 27 06:01:29 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c20839-13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:55:5a:4e:2d:a3:1c:04:3b:dc:85:5f:e5:
de:a4:cd:a3:7e:ce:4b:8d:c2:0f:88:f3:df:5d:11:
fa:fe:d7:5b:9f:f4:22:86:9d:f5:95:72:8e:69:a6:
03:e2:9f:84:bc:7e:cb:6f:67:00:79:07:8c:e3:28:
ee:db:10:b4:dc:64:58:77:d9:8b:c0:49:a7:e0:fc:
cd:25:7b:f0:fc:1f:86:10:05:9d:d3:4e:0c:13:9a:
4b:82:2a:aa:cb:ec:89:52:4c:cc:a4:40:5a:e2:bf:
23:7b:3d:b9:9a:38:ea:3b:ac:64:f9:b4:f0:ce:48:
e2:ad:b7:97:4c:98:04:eb:80:fa:c4:91:a2:f9:fa:
60:69:dc:13:c7:0e:ad:02:e1:db:d7:b3:63:64:14:
20:60:4a:2b:e4:17:f0:49:35:ab:fa:ef:d1:6c:75:
48:ae:61:08:41:26:6b:c9:1b:ac:d7:bc:8c:10:8a:
ea:c1:9b:6d:67:b0:62:ae:5a:f0:b3:e1:80:68:eb:
96:db:e7:51:f0:4c:86:f1:89:3d:29:cd:2c:0e:2f:
b2:a2:d2:c5:a0:ee:2c:12:bd:21:55:7a:97:27:f6:
2a:7b:5f:62:6d:8b:fe:5f:20:54:58:54:0c:17:83:
55:a9:77:77:7e:39:7e:98:26:47:eb:5d:93:ea:50:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:05:2B:E9:F2:2A:E8:92:3A:01:C8:FD:C5:7F:B9:CA:F3:42:D3
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/071356302C4311EE9D4CC936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.56.0/23
Signature Algorithm: sha256WithRSAEncryption
87:f5:7d:28:06:e9:79:43:4e:ab:cc:dd:3b:7d:da:c1:b4:fc:
f8:b9:99:1e:01:a9:d0:48:77:ff:f5:ec:24:81:36:ad:5f:94:
2e:4a:0d:ae:d8:9c:34:ec:cf:26:cf:52:80:86:d1:70:1f:d1:
b5:6a:a0:75:25:08:3d:70:c8:89:88:e3:e0:7c:be:cc:1f:d4:
1d:b5:51:ee:b2:2c:4d:ae:a4:60:2e:91:65:9a:83:da:92:ae:
eb:9e:46:60:b2:b5:ab:59:09:cc:ba:37:e3:f7:85:b0:6e:e2:
12:e7:7b:cb:68:4f:1a:70:ed:99:58:19:dc:0d:eb:cc:e7:dc:
39:21:4b:1a:0f:eb:d0:a4:ef:90:8b:91:04:55:8f:d6:96:50:
ac:a9:a8:76:4a:a6:a3:f1:5a:a6:70:ca:76:f8:ed:4d:2a:50:
41:d9:f4:c1:1a:3c:9e:4d:46:dd:15:d9:d7:0a:af:a2:a1:63:
3b:e3:6e:75:a0:5f:7f:1c:79:b9:5e:3c:4b:51:53:71:78:69:
fb:33:6b:f7:e8:09:8f:5e:55:ae:5e:d0:cb:dc:f6:d7:c2:69:
f3:06:0a:7d:9b:a8:92:dd:67:ec:5b:d5:1c:04:e8:c2:e7:06:
6b:4d:c6:c1:98:83:5a:2a:59:90:86:c2:d8:11:63:02:c6:52:
c1:b5:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org