Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/F4CAA5B42BE311EEB18D6B7AC4F9AE02.roa
File: F4CAA5B42BE311EEB18D6B7AC4F9AE02.roa (raw, json)
Hash identifier: K+5AwJFl2kDip31uNnv5tjR93SyAglp4LnaI8oXZ+Kk=
Subject key identifier: 37:15:45:D0:E9:96:BA:E4:30:A9:11:89:1A:81:56:D4:12:73:CF:A7
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 09
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/F4CAA5B42BE311EEB18D6B7AC4F9AE02.roa
Signing time: Wed 26 Jul 2023 18:40:56 +0000
ROA not before: Wed 26 Jul 2023 18:40:56 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 135615
IP address blocks: 103.175.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jul 26 18:40:56 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c168b8-de65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:3c:dd:02:ec:25:23:19:da:3a:47:10:ae:
26:a9:b6:e8:9d:ae:d5:3a:fe:33:1d:97:77:86:02:
59:28:98:ce:c3:a5:4f:b4:32:a0:06:b6:10:98:29:
8c:8d:e3:14:07:fd:c7:54:91:87:05:68:72:6f:6d:
7d:c9:ae:24:4d:06:a7:fa:9c:00:5f:c8:d9:3e:b1:
7b:74:fc:a8:98:af:90:38:ca:d7:65:54:57:cc:63:
71:4e:dc:1e:f4:da:95:50:71:6b:74:f0:dd:0f:8c:
76:a2:69:66:5c:a7:de:ce:c7:0c:c5:9d:4f:a1:b9:
64:58:df:40:28:18:2b:56:c1:dd:b7:a2:37:da:72:
65:85:7e:02:56:24:07:c9:d0:05:b8:ee:19:9b:0f:
1b:a8:d7:b7:14:d5:88:3a:7b:42:c2:61:d4:8d:18:
24:8f:0f:98:2f:ae:dc:74:ef:10:6e:3d:2b:3f:72:
51:2c:cc:2e:ca:ea:2a:4c:de:23:99:13:37:7f:12:
6c:7c:96:58:d4:40:12:a7:b8:48:7b:06:5a:ae:87:
00:35:e9:94:74:33:da:47:eb:7f:2f:b9:1c:e3:db:
45:52:c9:da:5c:ff:58:b9:5f:a3:ba:4d:14:cf:e8:
9c:ba:60:a2:3c:76:b2:50:10:35:7f:d1:c9:9e:ab:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:45:D0:E9:96:BA:E4:30:A9:11:89:1A:81:56:D4:12:73:CF:A7
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/F4CAA5B42BE311EEB18D6B7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:be:d0:7a:b8:d5:e7:06:13:9c:ad:3e:e7:d9:fc:83:c8:
7b:62:19:70:60:75:8f:a4:6b:3d:6f:d2:45:b2:8c:91:c9:7f:
f8:bd:92:c6:39:4f:39:fc:5e:99:d5:9e:40:07:6b:3a:de:14:
70:52:f5:8c:87:52:b2:25:fd:74:b9:a9:1e:8f:0f:18:37:7c:
79:07:f7:3e:06:53:ae:34:3c:f9:93:17:a2:d2:e9:c2:35:9b:
10:b7:0a:c8:c5:53:28:95:5e:e1:b1:24:5e:bd:52:52:2f:9a:
ff:90:c1:43:76:3a:6e:aa:34:d6:76:93:ca:e5:ba:99:ba:6d:
e1:73:62:72:f8:d1:28:7c:8b:d6:71:97:b7:78:2f:17:a2:24:
07:90:b8:04:5b:99:0a:40:24:df:5f:00:f3:0c:21:e8:dc:6b:
47:6c:7a:b2:2b:8e:49:a8:a6:4e:db:b5:30:1d:b5:c6:85:45:
01:76:54:62:01:0a:5c:a4:54:b2:6f:61:9e:f5:43:39:79:ae:
f9:18:c1:f8:ec:30:83:da:bf:27:c5:9e:7c:39:d8:c4:91:c9:
cc:81:bc:2f:d2:c1:23:8f:23:06:ff:97:8f:0e:de:30:40:00:
43:1f:75:ff:7f:12:4d:62:f4:df:03:06:a2:cd:3a:35:ef:e9:
23:4f:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org