Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
File: 63C70DB87B9511EDAE580D3EC4F9AE02.roa (raw, json)
Hash identifier: e5U+H4kCCheGFjkV90IBF0pnIc6KMxQV9nFyDG6LOcM=
Subject key identifier: BE:29:E6:9D:65:11:23:3A:31:B1:37:E4:F9:0A:D6:F0:10:B5:A3:84
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 0E8D
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
Signing time: Wed 14 Dec 2022 09:55:07 +0000
ROA not before: Wed 14 Dec 2022 09:55:07 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9654
IP address blocks: 103.103.194.0/24 maxlen: 24
2405:1340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3725 (0xe8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Dec 14 09:55:07 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=63999d7b-fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:3b:4f:4e:ac:0b:06:5b:32:50:4d:a2:99:
2c:4e:fb:1f:b2:5a:ad:98:a6:7b:87:b3:be:3b:2f:
a9:81:d6:16:20:61:85:3f:2c:76:04:a6:46:72:e2:
28:52:67:03:e1:5c:53:47:fa:ad:99:37:96:5b:e5:
58:22:78:43:e9:b2:d9:2c:84:64:e1:ab:47:51:b2:
25:80:d9:ca:88:c6:e9:a9:c3:4b:fd:9a:5b:ba:bf:
30:32:93:ec:14:2b:8e:5d:ce:15:cf:ea:d3:24:d4:
c0:3d:10:ca:c7:28:4b:30:dd:57:ee:90:5d:6a:5e:
7d:0b:ba:05:5d:02:c2:85:be:1a:25:a3:f4:68:4f:
4f:6e:78:33:68:04:02:16:a8:8c:36:b4:65:49:7a:
9d:d7:c1:63:9c:3c:c5:a4:37:04:2f:94:f8:9b:dd:
30:16:81:a1:9f:37:5f:e6:15:67:7a:5d:48:5c:15:
12:d3:fa:8f:91:41:e2:32:c6:65:66:87:bc:86:4a:
2b:6a:aa:b0:61:0d:0b:29:ad:ca:b9:1c:3e:4a:97:
0a:38:18:19:46:f7:f4:52:29:96:ab:c8:5a:de:b5:
78:c4:10:30:b3:57:ed:ec:aa:63:f8:aa:f7:ef:98:
54:fd:19:15:23:d4:5f:0a:8c:d8:0a:be:1e:65:ab:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:E6:9D:65:11:23:3A:31:B1:37:E4:F9:0A:D6:F0:10:B5:A3:84
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.194.0/24
IPv6:
2405:1340::/32
Signature Algorithm: sha256WithRSAEncryption
74:08:6e:9d:5d:22:59:95:d6:c1:11:bc:d7:ce:2a:e2:7c:6a:
e5:36:32:05:fb:18:8b:9e:65:78:7b:4a:ca:46:fc:67:b3:a9:
f1:48:56:bd:7f:e0:9d:78:a5:e2:be:c3:94:15:53:b0:08:e0:
c2:ba:8e:6a:a0:26:77:8e:81:5a:38:30:b4:37:d4:1a:5f:e3:
af:76:7d:9f:f5:6b:2c:27:38:a2:73:be:19:e2:28:8d:f8:7c:
0d:72:b6:5a:a1:22:dc:a8:92:11:78:3c:0f:d7:aa:6e:6f:53:
e1:13:7c:ba:34:96:03:db:f9:c7:7f:b8:ad:25:c0:60:4e:ac:
21:7e:d0:73:99:23:75:3a:3d:01:df:3f:e5:e3:f8:4e:5a:d0:
b5:00:1e:cc:ee:98:37:c0:89:2e:72:64:54:ec:1e:39:09:2e:
da:43:f5:76:9f:87:a2:f4:4a:32:e4:47:b6:5d:ad:07:f0:61:
87:70:3a:22:0c:45:02:54:c1:d4:26:13:c2:b0:fb:36:f1:f3:
a4:7f:ee:7e:3a:a6:96:79:86:01:b0:37:ff:e9:8d:92:b0:42:
df:1b:35:24:2e:80:e3:b8:c9:f6:0a:aa:b0:ab:57:7b:d3:a4:
4e:fc:55:f4:d5:6e:1d:fd:9e:4d:33:ff:b5:00:07:ec:dd:9b:
c0:3b:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org