Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/41CBB27C2D3011EC91954F5AC4F9AE02.roa
File: 41CBB27C2D3011EC91954F5AC4F9AE02.roa (raw, json)
Hash identifier: DG2b/w6Fq9lM9ihoBzAePQU1YtqDyVe1b+FrtUTffRU=
Subject key identifier: A3:A3:2B:34:EE:B4:89:02:44:3A:FB:69:27:93:9F:4D:B9:DC:03:D0
Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial: 02EF
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/41CBB27C2D3011EC91954F5AC4F9AE02.roa
Signing time: Thu 14 Apr 2022 14:12:28 +0000
ROA not before: Thu 14 Apr 2022 14:12:28 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 139660
IP address blocks: 103.163.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Validity
Not Before: Apr 14 14:12:28 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62582bcb-4ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:fd:85:58:b5:fe:82:16:d6:fb:01:f7:ee:
46:5f:9b:74:59:e8:8d:62:7b:1a:bc:8b:ac:8d:23:
0f:36:32:5b:cd:0b:57:23:a2:9e:5a:50:f6:5b:6b:
fc:1b:b5:1d:55:4a:10:45:2c:54:20:f2:c9:df:f9:
52:49:bf:5a:f8:c2:6a:81:4d:2f:4c:11:0a:52:7c:
eb:c0:62:fc:61:30:17:61:80:3d:1d:74:fb:7e:79:
bc:af:f9:e9:f9:94:48:30:81:f2:50:54:07:5c:19:
e1:7b:67:a4:e9:d9:0b:73:b2:13:4d:93:98:cf:03:
f5:51:2f:e3:1c:23:20:b5:50:84:58:54:c8:11:06:
38:98:9f:1f:7c:cf:5a:19:7d:c8:bf:1d:bc:09:5c:
0e:eb:f4:2a:62:7e:5b:26:34:79:9e:90:cd:a8:4c:
aa:13:35:a9:20:33:87:21:b1:b1:a4:91:50:e4:50:
99:df:07:0a:3d:6d:be:01:b4:3d:07:c5:d0:40:fe:
b8:03:8a:39:60:3b:7e:18:f6:c0:68:ba:02:a3:bb:
68:65:61:7c:b6:eb:67:a9:20:6a:9b:b7:e0:35:d1:
a2:85:85:af:a2:4b:89:35:98:a6:cf:09:51:bb:cf:
70:33:8f:82:cc:fd:b7:07:21:3e:1e:6e:4f:91:9b:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:2B:34:EE:B4:89:02:44:3A:FB:69:27:93:9F:4D:B9:DC:03:D0
X509v3 Authority Key Identifier:
keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/41CBB27C2D3011EC91954F5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.94.0/24
Signature Algorithm: sha256WithRSAEncryption
35:96:b0:98:cf:dc:2f:d3:ec:93:17:66:3c:68:5a:60:f1:22:
02:f8:9d:4f:22:3c:17:8e:a6:77:9e:ba:26:6b:41:1f:d4:dc:
53:c3:92:3f:55:38:8b:4a:89:fc:8e:31:e7:65:a9:64:a6:06:
6f:8c:af:d1:13:c0:e4:3b:98:b0:97:53:9e:9b:96:f5:ac:4a:
ac:1e:f4:45:9c:e6:fa:d9:60:f9:54:3d:66:ef:e4:c9:81:88:
bc:0b:24:05:1e:0f:35:c4:ce:45:19:44:b1:db:cf:4c:ab:89:
4a:24:6b:27:20:80:f4:b4:05:39:19:7c:f9:6a:a6:c9:6f:a5:
95:35:4f:a0:5d:7d:e3:a9:cd:98:0a:9a:de:2d:63:46:d3:0d:
00:73:99:20:fb:3e:b4:81:11:4a:2d:c7:b2:d6:bf:e3:44:8e:
59:2c:04:40:ce:0f:e8:8d:33:fa:49:18:40:18:3e:2e:d2:04:
32:0d:55:5e:db:72:22:90:eb:4c:e8:33:2f:60:2d:aa:03:ec:
88:17:8c:8d:36:9c:31:48:9d:29:32:bf:52:b1:0c:a4:e8:0e:
8e:58:38:82:b7:a0:17:07:1d:81:dc:10:3a:78:b4:61:08:00:
d2:5a:4c:7f:99:bb:17:83:6f:18:ca:f3:1e:af:a2:99:44:10:
3c:0f:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org