Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/85DA5A5881C811ECB5F90D48C4F9AE02.roa
File: 85DA5A5881C811ECB5F90D48C4F9AE02.roa (raw, json)
Hash identifier: 893ZrFkrCq980ixrttebZ+YL0ZMc/qmQ6uqYSKVQjDA=
Subject key identifier: 3E:E1:C7:24:9C:D7:92:91:E3:90:C8:CF:2C:0C:34:40:8C:B8:D1:8E
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 02C7
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/85DA5A5881C811ECB5F90D48C4F9AE02.roa
Signing time: Wed 20 Apr 2022 02:12:05 +0000
ROA not before: Wed 20 Apr 2022 02:12:05 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 134723
IP address blocks: 103.136.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Apr 20 02:12:05 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=625f6bf5-dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:49:74:24:65:0d:80:00:29:a7:ec:0b:50:
d2:d9:57:e2:c1:20:8c:10:03:df:e7:68:9b:71:34:
a4:81:78:ad:b7:5e:90:a8:2d:4d:9c:12:7b:0b:4e:
69:15:62:e9:f3:01:48:87:26:7f:f2:b9:a3:3d:56:
e1:e3:ad:36:71:33:82:9b:69:97:f8:45:aa:65:e2:
82:97:fb:23:89:56:91:bd:2c:e4:44:75:f6:6f:f8:
e7:93:7f:ef:53:a1:38:e6:f6:fc:98:64:76:44:b0:
ba:bc:0a:c3:af:56:8f:40:05:69:37:b7:99:2b:2f:
70:0b:9b:94:ec:4f:5f:dd:1f:7f:13:4a:d3:4b:14:
2e:49:b5:05:ab:d5:31:eb:64:c5:38:7a:b2:92:8d:
cf:1e:3a:b5:76:3c:9d:48:f5:88:ef:37:1c:a3:0f:
54:a6:cb:46:11:b4:49:93:0f:42:ee:f1:ee:01:1a:
e3:18:c7:a2:0a:13:38:f0:bd:b3:be:58:43:75:5f:
15:ec:b5:cb:9b:e1:fb:9d:4a:85:6f:0b:a2:86:05:
18:83:c5:58:c2:bf:16:58:a0:c4:74:5f:53:b3:fc:
51:b6:b9:f4:f7:88:4a:fe:e6:e1:99:86:3e:19:5c:
c4:71:b8:a5:e7:58:d7:7c:38:cc:98:99:42:6b:27:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:C7:24:9C:D7:92:91:E3:90:C8:CF:2C:0C:34:40:8C:B8:D1:8E
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/85DA5A5881C811ECB5F90D48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5c:b9:c9:58:19:3c:22:7c:70:ca:6b:73:1d:95:b0:2b:9a:
7f:d4:6d:ef:0a:01:d1:e0:f2:e4:98:1b:59:51:c9:bf:ee:1c:
90:f1:9f:75:87:6b:9a:83:ec:23:7c:e3:52:eb:f2:75:1b:1f:
78:26:34:9b:42:7f:5b:0a:54:14:44:36:d5:d7:8b:cd:1a:0b:
a3:20:38:e5:22:4b:cf:79:c8:86:36:3f:d3:08:dc:7d:a0:57:
aa:39:27:11:59:c6:7c:3b:7a:00:6f:4f:4e:26:40:92:5f:bb:
07:88:0a:2c:e0:04:06:c7:ee:66:90:ed:3a:e3:21:59:56:61:
22:7f:24:fb:88:21:db:d8:21:e8:06:c6:69:c3:da:6f:1d:e0:
de:3f:71:00:aa:1d:a4:d6:f0:9d:10:d0:3e:72:d2:b6:02:82:
c5:94:2a:ca:6b:e2:be:97:a5:32:65:eb:4e:9e:5c:0f:dc:74:
d2:e1:c4:bb:6a:f2:e9:cc:c2:76:cb:3c:96:74:58:20:c0:b7:
8e:e7:68:26:79:21:65:59:f2:ee:01:ec:7e:a3:17:f7:92:66:
61:17:56:3f:e7:c2:f7:ce:db:ea:30:0b:0e:ee:4f:67:bf:0f:
f0:37:34:4e:be:82:87:fa:cb:ff:b5:96:9b:e0:e3:d3:61:c8:
7a:d4:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org