Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
File: 1F4C04E86AF811ED91303A71C4F9AE02.roa (raw, json)
Hash identifier: S2RoAGxbnfmsMp8w1AAiHqcRUnVrzJyeAiAlhHcT+Z4=
Subject key identifier: 0D:29:EA:23:15:B5:56:96:0A:4C:8F:BA:78:0F:1D:0A:2D:22:B6:1F
Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial: 0929
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
Signing time: Thu 30 Mar 2023 21:47:53 +0000
ROA not before: Thu 30 Mar 2023 21:47:53 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 139904
IP address blocks: 103.148.172.0/24 maxlen: 24
2001:df2:df80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Validity
Not Before: Mar 30 21:47:53 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64260388-ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:ea:0d:e5:df:53:f0:f0:95:34:4b:0a:d6:
d3:ac:75:32:a3:72:73:4e:39:bc:10:85:33:d6:f0:
09:2e:08:b9:70:96:40:27:eb:72:e9:ec:9d:fe:9c:
a4:a7:d5:d4:51:b2:67:a3:ae:bd:93:66:e8:6b:74:
a0:5c:98:aa:39:02:1e:ec:5a:41:57:82:5d:f0:e6:
d6:40:38:5a:90:56:79:b1:e0:7b:ba:28:f5:2f:c0:
d4:07:40:2e:c9:23:83:22:16:89:88:af:00:20:0a:
42:bf:32:d6:15:ee:8d:c5:6d:9a:3f:05:94:dc:d4:
1d:e0:dc:00:67:aa:e9:62:78:29:e3:d3:cf:23:3a:
81:b2:c9:2a:ea:32:fe:c9:84:73:19:97:bf:98:ef:
e9:e8:a8:11:bc:2e:0d:54:bc:7f:fb:2e:24:b2:a8:
f3:70:ae:09:42:f9:6c:4c:44:b9:de:72:0a:a8:6f:
e4:94:c6:84:94:7b:7b:04:3b:c6:ee:05:40:9a:30:
a0:38:e0:3d:da:d0:76:00:5d:85:88:45:b1:76:45:
68:22:2a:19:53:65:25:91:fd:78:30:b5:3f:6c:6e:
ee:76:db:20:84:5d:64:d5:e4:06:fc:40:1a:d2:d2:
b6:61:07:9a:10:26:8c:35:63:81:0c:e3:4c:77:37:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:EA:23:15:B5:56:96:0A:4C:8F:BA:78:0F:1D:0A:2D:22:B6:1F
X509v3 Authority Key Identifier:
keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.172.0/24
IPv6:
2001:df2:df80::/48
Signature Algorithm: sha256WithRSAEncryption
1c:a7:a3:b8:b7:9c:87:ae:b8:1d:48:1e:92:ce:93:5f:0c:2c:
62:51:81:f3:c1:fb:a7:96:a7:00:d0:f0:7e:ab:c7:e9:fc:d2:
d6:5e:f7:bc:af:40:4a:69:53:d2:af:ec:40:6a:33:5e:59:92:
9b:52:5f:5a:b5:47:c4:46:29:b9:98:53:6f:2f:6b:eb:e8:28:
71:43:c8:2c:66:ea:28:6d:68:36:a0:de:7f:be:9d:12:27:ed:
7f:61:3f:30:81:52:98:40:8a:b1:b2:19:e8:f6:47:4f:59:0d:
0b:41:2b:eb:a2:67:cf:b3:5a:85:d3:8b:d5:f4:35:61:6a:43:
93:25:c1:da:6f:a0:69:64:46:66:2b:eb:d6:90:e5:9d:fc:f2:
d2:22:46:8a:6e:af:12:de:ec:eb:fb:ba:cd:8c:c4:7c:41:9d:
c5:59:a7:a3:33:01:b0:96:92:11:39:2d:05:30:84:b1:a0:03:
9b:68:bf:8b:de:ff:a4:3c:28:4d:a2:df:d3:57:ec:fa:4d:d7:
88:f3:23:10:b7:77:d3:01:71:39:a2:e2:80:a6:78:a6:49:51:
21:b5:c8:32:49:4f:0f:af:1c:64:b9:44:aa:e1:94:61:f1:e2:
ee:42:e6:eb:bd:01:aa:4a:d4:32:5d:f0:13:54:fb:4f:5f:86:
27:ed:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org