Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
File: 410520D640B011EE8D704466C4F9AE02.roa (raw, json)
Hash identifier: Qn7eRJoRs1aKXlFMBCrsm51wCP2kAtexeLa0ZZqZtBY=
Subject key identifier: 14:67:E9:8F:47:68:14:5B:8A:5C:62:47:7F:F1:9B:03:5A:8A:C8:63
Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial: 93
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
Signing time: Tue 22 Aug 2023 05:53:44 +0000
ROA not before: Tue 22 Aug 2023 05:53:44 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 149197
IP address blocks: 103.73.34.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Validity
Not Before: Aug 22 05:53:44 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=64e44d68-bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:b3:cf:30:be:62:d2:e7:8c:47:9b:58:87:
3a:ab:d4:08:bf:24:84:cd:3c:ad:a1:77:51:a4:e7:
14:f1:02:87:db:49:2b:f3:0e:34:a7:c7:61:27:b1:
76:5d:2f:77:6c:e0:5d:4a:8f:98:4b:49:c2:ba:9e:
a0:18:78:36:cc:a0:a5:2c:d5:ce:e5:fb:97:ab:ad:
b7:87:66:ee:b2:28:b2:20:dc:4f:af:78:02:87:15:
8c:c0:cb:23:67:bd:03:9e:bd:7d:8e:23:a5:a3:65:
fc:8c:a5:5b:3f:93:8c:78:a4:a3:bf:9b:44:58:c2:
3a:da:58:27:4d:f7:ed:72:a2:82:d0:16:f5:c0:05:
8c:02:fe:0c:21:76:2d:5d:93:24:ac:9c:13:3f:ae:
77:8a:c9:cb:c6:c0:2d:1f:c4:0b:af:f0:07:f1:4e:
1b:f8:3f:2e:70:36:e9:84:91:b7:89:cd:e5:1d:eb:
6d:9f:91:f5:f6:ba:2b:5f:14:0c:5c:36:36:d4:93:
78:fb:38:22:72:3d:1d:5b:76:24:cb:97:35:27:f5:
58:4a:6e:2f:ad:54:1c:6f:e3:f6:b0:58:c2:7a:71:
df:37:2a:86:11:b7:21:c8:9e:b2:fb:8a:b8:28:e4:
4c:11:96:6e:ef:fc:f7:cb:9f:65:da:33:6e:7a:58:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:67:E9:8F:47:68:14:5B:8A:5C:62:47:7F:F1:9B:03:5A:8A:C8:63
X509v3 Authority Key Identifier:
keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.34.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:62:f9:4e:fb:3f:d5:91:43:93:42:39:02:db:e9:30:bb:e3:
f9:90:51:80:46:7b:da:90:e6:b1:1a:f1:98:b6:ec:6a:46:fc:
90:90:83:c6:ef:9b:bd:1a:84:26:3d:84:29:24:12:3f:5c:8c:
1c:ee:80:cf:15:3d:2d:8d:25:4a:b5:3f:3e:30:f4:38:ce:f8:
10:1c:31:15:59:67:bf:2c:86:42:d9:a1:fc:65:b1:24:4c:29:
b8:6a:b6:97:a6:88:c9:67:78:08:c2:7d:49:31:48:a7:1c:24:
2a:90:bd:1c:1f:bd:82:13:7b:cc:29:10:f8:bf:7d:31:fa:49:
fa:55:8b:bb:07:32:53:0c:ca:64:b8:b0:73:4f:92:7f:59:bf:
6d:98:51:85:1c:42:ad:a8:67:21:d5:0a:7b:d0:97:aa:a0:8d:
fd:05:67:4c:2e:91:45:33:a9:36:8b:5d:d8:9f:3d:c7:c7:52:
6a:18:64:36:c6:a5:29:ef:0d:f0:6d:a2:fe:6a:5c:05:03:03:
1e:92:3b:88:a3:29:8d:d5:4c:c0:df:6f:55:8e:02:c1:a3:45:
9b:1f:db:f9:1f:f7:0a:42:63:d0:b8:9f:9a:d7:c4:2a:de:fc:
bd:8a:cc:fa:0f:9e:84:3b:74:14:ee:25:20:bb:b4:8f:38:b6:
9c:86:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org