Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/B324670A8AD211EEADD1F30CC4F9AE02.roa
File: B324670A8AD211EEADD1F30CC4F9AE02.roa (raw, json)
Hash identifier: xXh5PcCx96k0O72TKsfKnshEGOvM/aI0rLoIwmJ+sPg=
Subject key identifier: F9:C8:5B:69:9E:33:A5:2B:D6:25:26:07:3E:93:45:3B:CB:6A:06:0E
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 038E
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/B324670A8AD211EEADD1F30CC4F9AE02.roa
Signing time: Fri 24 Nov 2023 14:06:45 +0000
ROA not before: Fri 24 Nov 2023 14:06:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 400384
IP address blocks: 103.175.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Nov 24 14:06:45 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6560adf5-dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:c2:58:9a:69:a4:79:38:87:a8:78:30:a9:
bf:4b:c3:5c:6f:7b:e6:70:f5:f3:39:7b:c1:d6:4a:
f9:ff:d1:18:4b:98:27:65:ee:d0:89:6c:24:76:8b:
37:84:3e:c4:11:b7:b3:5e:a0:05:40:76:ab:f6:d2:
e5:87:20:62:c7:1a:a3:99:dc:a5:61:42:02:d7:1b:
41:54:fb:6f:f3:84:13:24:80:aa:92:53:b0:81:55:
1b:af:62:f9:e5:a9:d8:2e:14:13:73:21:71:c3:1f:
3b:93:0c:8a:5b:15:46:17:b7:64:03:a8:68:1f:32:
30:ea:34:1c:09:64:08:04:23:fb:85:44:2a:6a:be:
97:ab:7d:8f:50:9e:35:8b:ed:ad:be:3d:a3:ce:16:
18:b8:82:3e:31:33:b2:9e:ac:81:62:ab:8c:71:c4:
d3:88:fe:6b:ab:42:27:fb:1d:f8:09:bd:ed:26:d2:
67:cc:14:83:99:fd:76:b8:56:04:b0:a7:e8:ad:9a:
bd:a2:a7:d8:ee:d9:a9:96:93:51:3b:7b:ed:2a:0b:
72:f9:af:46:fa:20:d6:76:77:55:98:96:25:27:d3:
67:40:e1:75:4f:6e:07:e2:46:dd:25:21:cd:37:a2:
eb:a8:62:c2:81:31:35:e3:30:e4:f8:a3:34:4d:12:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:5B:69:9E:33:A5:2B:D6:25:26:07:3E:93:45:3B:CB:6A:06:0E
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/B324670A8AD211EEADD1F30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:58:58:c7:b4:26:70:1f:b5:8c:fd:29:a2:06:c8:a5:04:a9:
db:a2:83:d1:d6:b0:b0:5c:14:71:c3:ea:bc:94:82:50:e3:2e:
80:ee:02:0c:21:df:e2:3c:63:da:28:11:f4:0e:a8:72:86:9d:
5c:30:b0:a7:6e:9d:6c:3b:d9:cb:aa:15:86:7f:4a:16:80:d4:
ea:ed:16:00:cd:9c:e3:fb:3e:44:2c:a8:9d:32:b0:f9:49:e6:
9b:6a:79:53:f2:38:77:ec:c9:8d:2c:9e:2a:0b:25:48:42:8a:
c2:88:c8:ee:8c:b4:52:4c:f0:f8:bd:a2:18:90:72:2c:2e:19:
d1:f8:6c:ae:05:a5:74:77:09:fa:0d:c5:e6:e3:14:bd:ee:1b:
60:8c:a2:7d:e9:c6:29:0f:8e:3e:67:07:73:20:b8:ef:4f:87:
b4:1e:25:6e:05:34:16:5d:38:ea:5f:90:33:a2:ad:6a:46:06:
2a:57:ac:f5:04:23:b6:12:86:36:95:8f:44:52:8d:23:17:03:
c8:87:f7:83:44:92:77:6a:1a:bd:17:e4:d4:68:68:6e:d9:22:
45:b4:6d:9f:b8:2d:93:26:6c:5b:c9:e1:2b:cb:af:2b:75:e0:
21:c3:50:bf:72:eb:9d:ac:9e:a6:f2:cf:fd:04:33:f1:4e:88:
00:6f:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org