Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DD955EDA372D11EDB1059640C4F9AE02.roa
File: DD955EDA372D11EDB1059640C4F9AE02.roa (raw, json)
Hash identifier: 54rGOHeT0t7mV7l74hek4v8ktGUkhm13IibYKsCyFww=
Subject key identifier: 7E:31:53:29:87:33:37:C5:C3:D3:3D:00:BD:32:63:64:21:62:94:8C
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0393
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DD955EDA372D11EDB1059640C4F9AE02.roa
Signing time: Sun 18 Sep 2022 08:42:45 +0000
ROA not before: Sun 18 Sep 2022 08:42:45 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 142436
IP address blocks: 103.168.90.0/23 maxlen: 23
103.168.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Sep 18 08:42:45 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6326da05-2106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:66:41:40:a4:0a:a4:58:65:84:69:79:c9:
49:67:df:0c:61:78:3a:33:de:d4:73:12:a5:12:c7:
c7:93:91:c3:29:54:02:45:a5:37:cf:31:a0:d5:42:
ef:1f:25:f9:05:01:1d:c8:a5:24:a6:b6:a5:50:45:
b3:44:5b:b2:93:a6:41:a4:a1:0d:5d:f3:8f:ed:02:
e8:dc:91:63:3e:6d:49:54:ba:43:4c:b2:ec:5c:41:
65:d2:1d:01:e3:46:03:51:7f:6d:87:f6:5c:d2:3d:
e3:1a:57:d7:7c:9d:a7:46:e5:0a:38:fd:3f:80:d9:
29:66:8d:2c:59:fb:16:b7:27:2d:3d:e4:8f:26:ce:
c3:ed:11:fd:f2:83:03:d2:c6:38:7c:54:3e:4e:31:
8f:e2:12:ca:5e:42:bb:30:fe:6c:48:db:80:bc:e3:
16:13:17:dd:79:de:ab:fd:22:35:58:40:5c:da:9c:
55:12:03:02:6e:04:55:c5:43:27:09:12:66:98:a8:
62:b2:f7:15:ba:b3:e4:33:4a:4f:55:d5:c5:38:9c:
47:d0:6e:0c:8e:d3:38:5e:10:7c:87:eb:65:22:23:
c7:3f:cb:6f:67:c4:42:d0:6e:1a:b4:13:a2:1a:21:
3e:b9:26:1a:54:f9:ae:51:70:29:a7:66:a7:27:df:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:53:29:87:33:37:C5:C3:D3:3D:00:BD:32:63:64:21:62:94:8C
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DD955EDA372D11EDB1059640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.90.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:83:9b:f2:4e:44:9c:7e:cc:cd:c4:50:60:2b:b0:77:ed:30:
4f:b9:a8:35:eb:9c:c2:ba:fd:2d:a1:e3:01:67:d4:55:ab:8f:
a5:2d:f8:93:a3:42:54:76:8f:cb:78:b9:0b:67:02:30:9c:89:
0b:51:c0:76:68:7e:f0:06:1d:be:50:04:e1:68:46:ce:b5:b0:
fd:42:0a:bc:f0:3a:75:2d:e3:60:a3:05:8a:12:21:23:99:8f:
7c:2f:a7:90:e9:a2:24:98:94:40:98:c5:4c:7e:dc:79:70:0f:
e7:29:d0:f2:16:be:b3:c6:85:b4:8e:ff:da:85:46:e9:98:75:
0a:d1:d9:e8:a3:b8:42:32:1f:e3:43:22:e4:a2:47:da:80:60:
63:23:54:56:15:fd:19:97:1e:83:2a:2c:d2:68:37:d3:45:08:
e1:09:b2:21:92:3b:cf:3f:b7:31:f8:3c:d2:8d:4e:cd:c1:7a:
48:66:a1:e6:32:d5:c2:7f:ee:5a:aa:b9:63:77:cb:07:6c:8b:
68:a7:2c:56:2b:bb:48:1e:1f:b2:33:fc:cb:8e:28:1b:e9:fb:
f9:90:b8:49:0a:8d:ae:a7:d3:e0:36:19:82:e1:92:f8:9a:ec:
9c:d3:0c:cf:9a:1c:49:25:c6:8d:b7:31:ae:79:a4:b9:2e:6d:
45:86:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org