Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/38164934E0F711EBB2B5263AC4F9AE02.roa
File: 38164934E0F711EBB2B5263AC4F9AE02.roa (raw, json)
Hash identifier: +q6txWxN83kY5tfO/nNj5lGkcfHwOrB0Fs3Fhs7Xbac=
Subject key identifier: 13:4A:A8:62:C7:C0:04:FC:E2:71:4E:EB:B4:07:30:35:52:A6:D5:1C
Certificate issuer: /CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C
Certificate serial: 04CC
Authority key identifier: 13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/38164934E0F711EBB2B5263AC4F9AE02.roa
Signing time: Tue 01 Aug 2023 00:41:42 +0000
ROA not before: Tue 01 Aug 2023 00:41:42 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140077
IP address blocks: 103.151.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C
Validity
Not Before: Aug 1 00:41:42 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c854c6-17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:0d:61:84:a3:cd:99:76:2c:32:68:4b:9f:
49:17:19:7d:46:9d:2f:55:72:a5:02:a9:97:ea:6d:
71:41:24:b1:4d:20:f0:60:7e:4c:f6:9a:9a:ec:9f:
e7:33:67:25:c4:34:b3:fc:81:1b:30:a9:b0:d0:50:
19:ae:f4:55:f0:7c:76:c9:e9:bc:b5:53:de:73:df:
21:9c:94:fa:53:ee:63:ef:1a:82:ad:44:7e:3f:4f:
e8:f0:26:3d:17:f0:26:21:0e:65:4c:6e:32:47:2f:
2c:09:bc:85:a7:67:ff:5e:0c:c4:4a:51:af:eb:9a:
35:c9:39:4a:31:b3:f3:20:19:f4:98:27:18:4e:33:
17:55:01:38:31:f7:76:d7:d0:66:cf:c3:74:b5:5c:
eb:46:58:86:55:56:92:3e:ce:2a:db:49:3b:d0:77:
22:42:c9:28:2a:a4:b6:59:99:a5:a6:85:b4:1b:99:
82:d4:fe:1b:9c:e0:aa:52:a7:1d:cd:01:df:e2:d9:
60:65:a6:18:2b:43:ea:92:7d:ea:0e:ec:1f:fb:2c:
ca:b0:6d:07:d3:29:e3:32:93:bf:ee:9f:9e:ee:df:
92:57:de:74:3c:74:13:19:d0:f1:6d:de:d8:f5:81:
b9:84:1b:f3:ea:8c:7e:05:1e:78:6e:65:77:5e:cf:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:A8:62:C7:C0:04:FC:E2:71:4E:EB:B4:07:30:35:52:A6:D5:1C
X509v3 Authority Key Identifier:
keyid:13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/38164934E0F711EBB2B5263AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6b:28:a5:4c:b5:d9:9c:9b:2c:15:09:ec:66:de:f3:17:7b:
61:d6:d5:59:ea:6b:9a:b2:31:3a:ed:8e:12:a3:ef:5f:84:be:
4e:69:14:66:6a:e6:3c:94:24:74:b9:d1:13:26:88:64:08:23:
83:3d:a0:ec:53:d7:89:a7:d8:d8:a3:5f:e9:21:a5:9f:84:bd:
54:5c:f3:30:4f:0c:4b:13:12:95:1f:85:b8:3e:32:f9:11:7b:
b5:85:d2:73:0a:77:30:53:00:94:f2:c1:73:f3:2b:bc:c9:6d:
af:c3:67:47:85:b7:20:a0:18:43:c5:43:17:6f:80:89:ce:db:
19:0c:02:e2:0b:38:15:a2:ee:92:93:bb:81:25:2d:c7:c0:1f:
26:5f:02:fd:56:9d:b8:60:bf:5a:20:ff:11:22:43:07:8d:bd:
1d:b8:2b:6b:29:fd:f0:60:0e:e1:04:01:3e:4f:7f:37:63:2b:
8e:f8:e3:db:66:6f:b5:3e:42:bf:1c:19:51:05:a5:bc:36:16:
95:b3:9b:0c:44:d1:7c:1e:6a:40:55:d0:42:1f:c6:e2:e6:0c:
76:44:6f:a5:ec:5d:14:cb:f6:3f:63:05:cf:2c:a1:5e:09:93:
f3:88:db:7a:ea:8e:16:59:34:45:ec:f1:19:5f:e1:86:95:65:
4d:95:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org