Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/C711E2C8B13511ED8ACDEE25C4F9AE02.roa
File: C711E2C8B13511ED8ACDEE25C4F9AE02.roa (raw, json)
Hash identifier: NDFBut/kOBtAPUTeaXQ6ADr/HqXbbMTw+Fuqmxzquv4=
Subject key identifier: 2D:15:76:7B:E4:93:37:6F:42:CC:F0:83:A1:59:6E:76:65:6D:32:84
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 051C
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/C711E2C8B13511ED8ACDEE25C4F9AE02.roa
Signing time: Mon 20 Feb 2023 15:46:45 +0000
ROA not before: Mon 20 Feb 2023 15:46:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150744
IP address blocks: 103.203.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Feb 20 15:46:45 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63f395e5-fe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:07:45:40:81:0b:c6:f0:41:d9:d9:1e:50:
c6:6c:da:12:79:a6:ec:52:4e:fe:94:99:14:9e:be:
51:5e:e6:9a:a6:66:3a:3b:31:54:d2:81:f8:18:6f:
22:1e:59:34:14:28:c2:c0:fc:fa:22:a5:64:b4:83:
2b:7b:8d:de:4b:a5:c4:5b:ce:b0:3d:b2:29:f4:d5:
00:47:cb:4c:e4:de:66:9c:55:92:ed:09:77:25:19:
ff:c7:32:5c:04:16:43:6c:04:28:5a:21:0a:0a:1b:
74:3a:ed:25:98:26:6c:e2:c5:75:18:06:7d:c2:be:
84:9d:03:f8:d9:a2:40:22:d1:75:86:bd:4d:55:e1:
c1:38:31:37:de:cb:a0:1f:ea:cb:65:4f:50:95:90:
c8:7f:14:e9:e0:2f:7d:34:13:71:6a:78:73:1b:16:
32:b0:e0:73:d5:33:95:af:f5:6f:53:10:a8:6c:ad:
00:d2:7f:b9:8b:f8:07:c6:a8:70:89:6e:58:55:22:
45:54:eb:4e:c2:36:ca:bc:68:08:3c:e8:5c:10:41:
42:85:3c:12:e7:e2:0a:77:88:00:e1:b8:27:cc:40:
3e:82:7c:55:e1:d8:1c:23:ac:97:ea:de:3f:b5:3e:
86:c7:3a:15:13:d4:09:0b:c9:b7:ff:4b:f2:3f:b8:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:76:7B:E4:93:37:6F:42:CC:F0:83:A1:59:6E:76:65:6D:32:84
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/C711E2C8B13511ED8ACDEE25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.178.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:25:0b:11:d8:9c:2a:7b:d5:92:af:81:c0:bc:d5:11:ea:
e2:17:2b:ff:73:e9:73:8b:40:11:d4:7e:da:0c:08:3a:7a:22:
9c:17:03:c4:52:b3:8a:ab:31:f0:26:92:15:b1:16:52:91:e9:
09:cd:b7:62:28:5f:95:97:52:71:39:5d:06:ed:ed:26:d9:19:
99:58:67:16:32:cf:c5:92:ff:03:1e:01:7b:48:d6:03:d2:60:
dd:13:2b:d4:ab:de:c0:73:f0:e6:6b:7c:24:b9:18:6d:c9:1c:
5b:8c:2f:b8:a0:7a:2e:b6:31:ec:45:9e:47:3f:21:4c:72:d0:
4f:38:12:1e:74:60:b1:3c:56:4d:7f:52:ae:56:a6:e8:be:51:
25:ad:7a:f0:cb:0e:30:56:d9:8b:3a:db:e2:cb:5f:c9:0f:fb:
9f:e1:e3:18:3f:2f:16:c3:f9:25:1e:a3:12:a7:22:82:0c:9e:
65:70:54:05:d6:80:81:81:d9:27:96:38:6d:3c:75:77:1e:02:
09:14:7a:eb:ee:ae:4d:27:22:f0:04:ce:1a:f6:b3:3d:15:7e:
53:62:d3:97:6e:bb:8d:e5:b5:92:0e:60:2c:9b:e2:41:6f:ef:
16:02:b9:c5:c7:50:e2:49:cb:e9:7c:7a:43:b1:14:a6:f2:45:
cc:59:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org