Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
File: 097F4E68C4FE11ECBD72527AC4F9AE02.roa (raw, json)
Hash identifier: 7yqTxdK5H5jV+TO9RqDD2eO/w4aPN/QGHnvPpjdJvKU=
Subject key identifier: C5:EC:C1:33:46:0A:19:7E:0D:41:B1:D7:38:49:1C:85:6E:3E:41:D0
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 01F1
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
Signing time: Tue 26 Apr 2022 01:13:10 +0000
ROA not before: Tue 26 Apr 2022 01:13:10 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 38710
IP address blocks: 103.123.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Apr 26 01:13:10 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62674726-e190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:ef:9c:05:63:0f:d5:4a:83:62:44:6a:df:
d9:85:93:61:77:45:bb:9c:70:c8:30:96:b6:26:9f:
ae:b7:7a:a2:d9:97:d7:16:3c:96:cd:fa:a2:f9:52:
33:e4:ef:20:c6:3f:32:54:cd:91:65:6c:d8:6e:27:
32:02:ae:76:81:78:32:3c:14:03:1c:90:3a:2c:e6:
80:be:74:fc:90:c8:03:b2:70:3a:df:d6:25:07:48:
72:1a:a3:f0:24:92:24:30:0a:aa:6b:bc:4a:86:e4:
a0:6b:d0:13:56:e4:f2:3e:c9:96:29:c2:31:ce:1d:
ce:68:68:85:a6:24:82:3d:64:6c:1e:ae:95:1b:6b:
0e:01:b0:9c:23:3a:1c:6f:e4:76:6b:5e:88:93:81:
81:8e:b1:26:3c:af:fc:d5:7f:28:60:fc:e4:ff:b2:
46:00:6a:64:04:09:af:80:cf:22:37:e2:1c:9a:37:
51:0a:45:e6:a6:02:c4:38:38:2c:ab:d4:29:6c:8d:
59:b5:af:6d:13:ad:95:3d:0b:85:69:f4:52:bb:f4:
ee:93:30:7f:18:54:1a:25:83:4f:14:25:1f:5a:6b:
1f:bf:a0:36:c8:ff:11:bc:58:69:10:16:82:ce:7a:
bc:aa:ce:d3:ff:3f:e4:22:bf:da:15:c9:4c:06:2f:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:C1:33:46:0A:19:7E:0D:41:B1:D7:38:49:1C:85:6E:3E:41:D0
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:84:5d:86:51:ba:dc:52:ff:c9:63:6b:c4:17:c6:06:f5:a8:
01:f5:a0:c7:02:9e:00:df:7c:45:9b:26:65:93:df:22:08:45:
50:17:6f:1e:44:e5:5d:96:f2:5f:89:d5:3a:93:9f:98:18:23:
d4:44:2a:37:2b:b9:8b:ca:8d:08:99:23:df:a4:c5:fe:e3:ba:
b0:32:5d:eb:ae:1c:30:53:96:e6:ba:6e:89:e0:db:ed:4e:dd:
2b:d7:38:c5:b1:87:7e:ff:dd:1f:e0:e2:84:ed:9f:67:0a:51:
d4:48:df:b0:78:ff:75:00:73:09:ef:d6:00:6e:18:ad:d6:46:
92:56:1e:ee:fe:13:68:3f:f0:b0:24:b4:c0:dc:f0:e8:01:db:
b3:45:12:f7:fb:26:73:e9:06:71:b4:ce:74:b5:16:ab:3e:2c:
cf:c1:c6:1d:c3:b7:91:e6:20:00:3b:8c:b9:ce:cf:9f:b2:52:
8a:28:b3:a9:46:99:9b:7f:b5:28:0d:75:72:6f:4e:8b:60:07:
3f:7c:66:47:f1:71:26:bc:10:12:a0:42:09:ca:9c:4b:9f:aa:
37:43:30:ea:03:2a:f5:a2:b4:b9:12:01:30:ac:34:1e:37:15:
ec:e2:0f:89:10:1b:ec:28:ae:15:ec:b2:e3:1b:9e:9d:21:ac:
9d:5e:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org