Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/5EF7DFA6F3EA11ED9541D882C4F9AE02.roa
File: 5EF7DFA6F3EA11ED9541D882C4F9AE02.roa (raw, json)
Hash identifier: b7oVGnUBSsOsW0y7c46cdb3iZDpSaKjeGT00V7xiMfs=
Subject key identifier: F5:54:64:C9:4A:42:E9:92:9C:43:87:B2:0B:3B:55:9F:7C:E2:73:96
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0BC7
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/5EF7DFA6F3EA11ED9541D882C4F9AE02.roa
Signing time: Wed 17 May 2023 07:35:13 +0000
ROA not before: Wed 17 May 2023 07:35:13 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 151080
IP address blocks: 103.109.56.0/24 maxlen: 24
103.109.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: May 17 07:35:13 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=646483b1-cfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:83:90:d9:b1:b6:8d:31:69:c6:bd:b0:f1:
77:28:e9:64:31:18:ea:f9:e7:18:86:b8:e7:d1:62:
74:fa:45:54:7e:d5:01:90:bf:81:89:87:40:3f:7e:
e3:5d:fe:b8:72:12:9d:0f:4e:35:f6:b0:67:8d:69:
e6:20:04:07:f2:76:99:a2:6a:65:a2:1f:91:de:0c:
b2:d3:95:96:de:b9:20:8e:7e:25:1d:d5:80:73:42:
4e:0d:2c:90:d2:5d:b0:89:0d:16:8e:30:db:d2:fe:
cc:a7:04:fe:bc:4f:36:88:8e:5c:d8:23:97:df:be:
e1:17:03:39:de:5e:78:08:75:fe:ed:0d:7c:7b:89:
e2:a2:b7:1f:73:55:45:eb:c4:86:f0:80:1e:b3:43:
2e:ea:87:68:1f:20:2b:93:1d:24:79:a0:4a:32:9c:
8b:50:b9:e5:bf:8d:f4:56:6b:0c:26:8b:36:27:03:
97:36:61:bf:0b:97:dc:64:cb:13:e5:14:e8:c4:f6:
33:e3:1a:19:a0:17:c6:14:6a:1a:a5:90:e5:e4:29:
d7:eb:f1:f1:8a:de:2e:3f:6b:36:43:26:e5:f1:aa:
49:0c:48:21:38:fd:77:1e:3d:45:42:05:80:a2:f8:
ea:3e:ef:75:69:72:fd:4a:56:ef:f5:d7:25:b9:d9:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:64:C9:4A:42:E9:92:9C:43:87:B2:0B:3B:55:9F:7C:E2:73:96
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/5EF7DFA6F3EA11ED9541D882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.56.0/24
103.109.59.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e6:ca:cc:b9:3f:87:c6:93:87:5e:14:88:ec:d1:88:62:f7:
97:98:fa:16:1c:4b:34:87:63:a5:d2:a8:76:1f:9a:78:d3:ab:
3b:a0:b3:e2:50:50:65:98:d8:69:3c:9c:a1:83:f3:45:66:5f:
91:fb:87:26:72:d2:98:84:fb:27:5b:1b:a3:64:71:b2:1f:ce:
02:8e:0f:ba:fa:5e:7b:0e:33:d4:58:b4:cf:d4:dc:a6:e8:af:
7a:a5:65:52:43:43:e9:cc:28:98:ca:3b:3c:cc:a9:f3:e7:9d:
00:be:a8:a1:42:f6:a8:ad:21:33:96:18:22:d4:66:ad:65:52:
d9:3c:9e:77:a1:bb:a1:89:04:29:fa:75:66:3e:80:0c:89:d9:
6d:ea:8c:f3:08:be:8f:8e:71:3f:9c:cf:2e:0c:04:7c:8c:0b:
4f:1d:0e:9e:38:4e:d2:23:45:30:d8:ec:ab:a3:6a:7c:20:80:
30:1b:11:53:fb:11:e9:f5:bb:40:38:73:0e:ce:1d:cf:b2:71:
46:3e:e8:ad:bf:86:f4:b7:53:23:b6:ff:5d:4d:62:66:04:c5:
d9:04:ee:9a:aa:54:02:33:bf:ce:63:99:4c:83:89:a7:49:11:
bd:33:77:db:90:64:41:8f:ef:70:20:0a:22:75:2d:cc:68:bc:
61:80:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org