Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/42AADF922D3011EC91954F5AC4F9AE02.roa
File: 42AADF922D3011EC91954F5AC4F9AE02.roa (raw, json)
Hash identifier: SaLw6Ip2Fj53jfakJkkZVbFQYp+8qLv8Q4S7Eus0vdw=
Subject key identifier: 4D:76:A9:EA:78:47:4E:3F:7D:CF:56:00:72:5B:AC:39:DD:A6:3F:3A
Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial: 04B0
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/42AADF922D3011EC91954F5AC4F9AE02.roa
Signing time: Sat 15 Apr 2023 02:02:13 +0000
ROA not before: Sat 15 Apr 2023 02:02:13 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 141743
IP address blocks: 103.163.94.0/24 maxlen: 24
103.167.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Validity
Not Before: Apr 15 02:02:13 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=643a05a5-6b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:ed:17:b6:8d:85:ea:5c:eb:16:ab:40:13:
9c:b6:cd:bf:5b:51:16:be:5d:c4:46:7c:d2:af:3b:
7b:38:66:05:23:e2:92:c5:92:41:79:4c:1e:5f:35:
1b:fe:50:03:3d:f8:f3:f3:32:ec:b7:23:66:df:7b:
76:7e:1e:c7:c7:dc:7f:c6:95:77:6a:e9:ea:1b:ef:
f3:87:0b:8c:82:2a:7b:ad:11:bc:b6:df:da:9b:02:
a8:5f:61:ae:49:2b:3d:73:e5:27:dc:91:b4:91:4e:
45:b4:5f:94:b8:ad:65:11:07:bc:0e:54:79:6b:66:
a3:af:c9:b9:b3:40:2b:c4:e7:4b:b9:f8:bd:9e:e2:
19:90:5f:22:07:bf:da:a2:47:c4:b9:b6:7b:c2:03:
0e:d5:e2:2d:fe:b1:bf:e8:41:df:9b:19:c2:8e:84:
92:e4:99:e5:63:95:45:a9:fb:7a:b3:52:a3:12:d1:
28:0d:98:74:b2:ba:d9:2c:85:1b:50:2e:c9:7d:5f:
65:56:79:6b:e0:cd:bd:62:e4:db:7c:2a:b7:f7:e5:
77:6a:6e:c1:05:3a:ea:05:80:ad:22:41:35:14:5b:
2c:86:43:b7:24:6b:ea:0f:5d:95:6e:06:79:a8:1c:
e0:ef:12:ef:2c:82:40:12:4b:2b:14:98:4b:c4:05:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:A9:EA:78:47:4E:3F:7D:CF:56:00:72:5B:AC:39:DD:A6:3F:3A
X509v3 Authority Key Identifier:
keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/42AADF922D3011EC91954F5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.94.0/24
103.167.10.0/24
Signature Algorithm: sha256WithRSAEncryption
08:af:f5:2b:5c:26:8e:b2:01:a7:c1:db:90:9a:7a:04:36:8b:
6c:7e:a5:be:0a:ad:6d:bd:f4:99:5e:ec:81:fc:fa:5d:a9:ed:
14:a0:39:b9:19:12:47:fc:f7:12:5d:05:f5:09:1e:38:93:e2:
9d:61:fc:8f:9c:4b:76:37:73:ac:aa:40:22:22:d2:6c:8d:cd:
00:5e:c8:08:7f:6a:b9:ff:22:bc:f4:44:b5:70:02:12:01:1f:
4b:0d:53:9b:db:4b:1d:90:06:57:5b:62:b8:f5:bb:0b:ea:6f:
4a:d0:b7:9b:1f:07:f2:70:8b:fa:33:70:77:1d:c8:83:35:f6:
1c:2c:e4:bd:93:8c:85:94:7b:1f:b2:bf:4f:08:02:d3:01:72:
ec:9f:8b:14:c5:d8:fc:c1:c0:51:ff:65:3d:eb:ef:09:67:40:
97:9b:2c:e8:c3:c3:d3:6f:10:7f:9b:12:a5:be:9e:41:98:6e:
da:95:1b:67:38:67:a2:d3:94:b0:16:de:46:7f:03:8f:85:6a:
dd:fb:54:17:8f:0e:5c:ef:e6:9f:08:d1:cd:ff:a6:88:71:70:
f3:00:e1:43:5c:ff:cb:03:ec:5b:d3:af:fb:75:52:15:4d:55:
cd:d9:ad:6b:79:ef:a9:ab:88:f9:2e:80:e8:17:25:69:a5:07:
4d:20:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org