Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/95469E8E1CBE11ED97666764C4F9AE02.roa
File: 95469E8E1CBE11ED97666764C4F9AE02.roa (raw, json)
Hash identifier: XjCYnNxxqZvgeAWdZZLdSvHK7hZuSM20kKlz0v9Fgj4=
Subject key identifier: CA:BE:10:A6:BF:2B:55:29:18:63:6D:2F:39:20:8B:60:F4:95:95:25
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 04B4
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/95469E8E1CBE11ED97666764C4F9AE02.roa
Signing time: Mon 15 Aug 2022 17:20:39 +0000
ROA not before: Mon 15 Aug 2022 17:20:39 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.110.104.0/24 maxlen: 24
103.110.106.0/24 maxlen: 24
103.110.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Aug 15 17:20:39 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62fa8067-250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:ef:2a:5c:18:7c:c6:8e:d4:d3:3b:67:49:
4e:0f:d2:f0:80:ca:b5:ae:7f:66:ea:33:ce:79:3e:
ee:f8:73:52:f8:d0:fd:c9:3b:7b:54:e3:39:60:70:
fc:11:8a:57:8c:97:d7:fe:80:35:30:38:c9:de:c9:
32:c9:45:d2:0f:2d:fa:1f:c2:9e:3b:f8:21:95:5d:
58:90:75:33:89:23:d4:33:ae:41:7c:a3:32:03:34:
6b:09:19:d0:67:14:89:15:29:1b:5b:61:f3:7d:a7:
35:62:7a:96:59:69:60:a1:fe:fe:de:78:07:dc:93:
f0:19:f1:77:60:87:38:b0:da:04:cf:8c:d0:2f:fe:
a3:2d:90:1a:93:59:12:43:70:39:64:18:3c:cc:df:
ca:9a:85:b6:69:5c:9f:37:11:a7:1d:f5:28:e2:d5:
cb:b0:3c:77:ea:a8:e5:d0:3f:ac:3b:e7:0f:d6:60:
2c:d4:0c:50:2e:85:b2:c2:c5:a3:16:50:f6:8c:e5:
d5:b5:d7:40:51:fb:31:2d:3f:ca:e9:6e:a8:07:14:
09:66:42:d1:aa:46:e8:26:b0:5d:90:17:f2:ac:dc:
3a:30:71:9c:2c:a6:93:2e:66:b5:c2:e3:f6:12:ce:
25:29:2d:59:fd:99:18:2e:16:47:69:63:70:33:bf:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:10:A6:BF:2B:55:29:18:63:6D:2F:39:20:8B:60:F4:95:95:25
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/95469E8E1CBE11ED97666764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.104.0/24
103.110.106.0/23
Signature Algorithm: sha256WithRSAEncryption
43:bf:04:11:d3:a6:34:f0:08:2c:4a:0f:40:f1:cd:84:2c:f2:
54:47:fb:ea:16:5c:38:f3:5e:22:2d:9e:62:0f:ce:3a:5b:12:
0f:c4:3d:e1:41:85:a1:9d:02:18:5a:e5:39:fe:6c:b0:ea:86:
91:84:2f:ff:10:97:7d:38:7b:d3:dc:89:a2:af:ad:b6:a1:d0:
7d:c7:04:fc:7d:71:2d:ae:58:8f:84:4d:3f:ca:17:38:16:2f:
ae:35:7b:32:bf:ef:55:76:0c:2d:af:c2:24:49:00:2b:d7:cf:
bf:46:82:08:09:ac:e9:ca:0c:da:83:1a:7e:a0:bb:af:ec:e5:
eb:1d:e5:17:6d:c1:3b:78:8a:50:2c:b1:ac:68:58:28:83:c6:
92:4a:47:8f:bf:f5:47:31:93:58:4c:46:ee:f4:a5:8b:da:ea:
87:11:53:f7:30:dd:f7:75:61:d7:6d:ca:80:bf:9b:fb:65:46:
72:f5:2f:f8:4b:1b:6c:6d:ca:da:0f:1c:f2:f7:9b:ff:45:72:
70:79:8e:55:dc:38:13:5c:85:2c:fb:67:cc:40:34:b0:a2:16:
dc:be:c4:58:6e:0b:f0:49:28:b5:c4:4f:5a:5b:93:aa:eb:7e:
82:80:2d:95:84:96:3e:09:17:79:21:7e:ed:ec:f1:50:20:d0:
7a:8e:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org