Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/F0190D8CC72811ED9BDF0933C4F9AE02.roa
File: F0190D8CC72811ED9BDF0933C4F9AE02.roa (raw, json)
Hash identifier: 0x6TgpkKVk01OTNC7tnJgnuIb+fEgFzzLn9W2s4/lZI=
Subject key identifier: DE:53:31:70:39:CB:4F:92:94:0F:9B:EC:BB:57:3D:64:53:13:B1:A7
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 07F9
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/F0190D8CC72811ED9BDF0933C4F9AE02.roa
Signing time: Tue 21 Mar 2023 18:49:23 +0000
ROA not before: Tue 21 Mar 2023 18:49:23 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 10143
IP address blocks: 103.237.16.0/22 maxlen: 22
2406:3400:de::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Mar 21 18:49:23 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6419fc32-03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:9e:a0:1f:03:4f:b5:3c:d4:5d:13:21:3f:
a7:90:47:48:eb:01:22:5f:08:38:a8:97:d6:21:5a:
32:24:72:21:4a:15:10:f9:e5:3d:4a:46:de:d8:79:
39:48:9f:16:2f:99:1d:9f:8d:2a:2c:b7:e2:68:07:
52:1b:e8:ef:8b:fe:ea:c4:1a:1c:14:ee:75:38:b1:
ca:45:6f:fa:4b:44:45:9f:e9:22:ba:b5:2c:55:2c:
1b:3a:76:ea:ad:ff:5b:7b:e4:4c:4e:33:aa:e2:b6:
ab:17:57:ae:33:7a:36:bb:8d:06:32:fb:9e:ae:24:
7e:29:0a:25:87:7c:83:64:37:27:0b:8b:3b:72:77:
78:a1:3a:ce:17:3c:4b:8d:19:fb:42:00:2a:a6:6b:
f3:07:45:a5:e7:13:d4:6b:42:c8:17:ee:76:cf:21:
6f:5e:16:3f:39:01:cd:c4:1e:f6:96:52:dc:8b:60:
28:bf:9b:8b:93:01:7f:6a:2d:ef:8b:3c:f8:7f:61:
65:88:ad:c2:20:83:11:a8:ba:34:9d:1c:82:c7:ec:
fe:31:02:13:a4:a8:4c:74:12:d4:13:e4:b6:dc:12:
cd:dc:9f:aa:28:66:c1:a7:8b:96:29:08:10:a2:e7:
88:f6:e2:58:b7:e7:71:e7:62:b6:76:dc:ad:ef:67:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:31:70:39:CB:4F:92:94:0F:9B:EC:BB:57:3D:64:53:13:B1:A7
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/F0190D8CC72811ED9BDF0933C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.16.0/22
IPv6:
2406:3400:de::/48
Signature Algorithm: sha256WithRSAEncryption
c3:91:0c:15:fc:98:50:57:b6:f4:5d:6a:3b:d1:04:f7:8f:4c:
c8:1a:46:a2:3d:de:4d:7b:af:81:76:5e:5c:73:2a:df:0b:dc:
cb:bd:70:08:82:73:ce:9b:97:82:9b:15:54:a3:9a:cc:8d:1c:
32:63:3c:b5:08:46:78:49:2a:d2:f0:3f:85:50:ac:a3:1b:48:
60:8d:9f:1e:fe:5b:9e:29:43:69:ac:fa:aa:b8:df:df:2d:24:
40:19:29:fc:3f:cb:dc:d1:68:79:6c:2b:de:3f:db:cb:1b:68:
62:50:a9:54:f2:cd:ea:4f:b9:c2:f5:62:45:80:14:7e:a9:4b:
61:11:06:9d:02:1f:d9:c5:4c:46:51:47:03:25:e8:92:69:c1:
5d:d3:dc:b9:0d:33:27:10:f2:fd:b1:10:7e:86:b4:69:30:f0:
50:ab:d4:af:24:f9:74:44:86:9a:14:95:31:49:c2:33:0d:55:
f0:40:82:f4:11:af:1a:b6:77:f0:29:ec:7a:b5:6a:ff:f4:78:
1b:f2:aa:38:e3:76:a7:bb:2a:48:36:c1:68:b6:c6:e6:02:fe:
16:a9:a1:9c:e6:b0:b0:d8:41:b0:69:ff:b2:33:d0:b6:07:8f:
80:10:b2:d4:0c:ee:23:aa:64:62:48:bd:d3:8d:d8:e9:20:62:
84:71:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org