Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/2527B4EE9AEA11ED9F1AE932C4F9AE02.roa
File: 2527B4EE9AEA11ED9F1AE932C4F9AE02.roa (raw, json)
Hash identifier: xadg7adAiJMRayI0uze2062KGqNSQE9nhF1ProZHyE0=
Subject key identifier: 98:78:90:CA:2A:3F:8D:2B:DB:FB:0A:43:BD:F4:3F:0F:16:08:F2:54
Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Certificate serial: 05DF
Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/2527B4EE9AEA11ED9F1AE932C4F9AE02.roa
Signing time: Sat 25 Mar 2023 00:11:03 +0000
ROA not before: Sat 25 Mar 2023 00:11:03 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 55707
IP address blocks: 103.135.128.0/24 maxlen: 24
103.135.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Validity
Not Before: Mar 25 00:11:03 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=641e3c17-ca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:55:d7:b9:64:47:e5:1f:6b:fa:bc:83:5f:
b5:db:d1:2c:95:84:5c:6b:2d:62:08:26:e2:fb:ee:
88:eb:42:aa:e7:a7:d5:0a:a0:2d:69:bc:28:d7:b8:
6a:4e:4c:2d:eb:dc:13:73:3c:80:4f:17:bf:b5:fb:
d5:2b:63:51:c5:e8:da:9d:d3:9c:f0:95:e9:8e:85:
ae:e5:3b:f9:b1:d5:a5:b5:ea:e3:b5:a5:7b:e0:06:
b9:a7:59:d1:8f:a2:98:2a:dd:c4:4e:41:6c:ef:ff:
6b:e5:d0:15:95:9f:ea:90:fc:40:75:2a:08:36:fb:
56:15:8b:4a:68:de:b5:a9:55:a7:02:68:0a:d7:2f:
dd:e3:5f:47:78:72:4a:4e:29:2a:2e:aa:3d:6a:c7:
3c:36:27:da:5c:61:ca:69:9c:f4:0e:c3:e4:15:c2:
7c:60:17:17:f2:35:34:26:62:ea:bd:9c:b6:3e:d7:
57:55:ce:36:2d:57:f7:09:12:0c:a5:f2:ee:62:67:
a9:bc:2e:68:2f:2d:89:03:e6:0f:61:f6:3e:c8:de:
8e:69:4f:8f:f3:70:8a:63:a5:02:85:39:3c:88:d5:
52:4f:b8:40:5f:cc:da:8f:43:13:dc:b3:1f:cb:2a:
e9:df:3f:f8:f3:a6:42:52:86:6b:f5:3d:dd:8d:7d:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:90:CA:2A:3F:8D:2B:DB:FB:0A:43:BD:F4:3F:0F:16:08:F2:54
X509v3 Authority Key Identifier:
keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/2527B4EE9AEA11ED9F1AE932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.128.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7a:5d:09:4c:26:bf:de:65:6d:2e:0c:d4:3a:88:26:d3:f8:
6d:e1:76:4f:3b:61:99:e5:54:07:f6:00:e6:4f:03:8c:ea:0f:
df:87:b9:7e:95:3d:f4:dc:8d:9a:76:30:6c:7e:63:73:ce:4d:
e4:63:e7:19:6d:9c:da:af:8d:31:2f:d6:c7:6d:6d:da:f6:4d:
7b:a8:33:97:15:ce:69:ac:bd:bb:09:51:c2:28:21:61:25:8a:
93:b0:41:0f:17:f6:76:c1:7f:8a:cc:be:e5:39:76:74:93:2b:
0c:d0:48:3c:65:7e:11:15:1e:b2:66:bc:90:36:76:a6:ba:70:
d7:32:28:08:5d:fa:3f:e4:99:7d:49:44:05:29:ac:1b:82:c0:
78:bd:a3:c1:a8:ba:ac:0a:78:3e:b9:0e:42:af:94:3e:1e:ad:
2b:ee:85:c9:1b:59:e5:8e:eb:71:f3:7f:39:6b:9c:bb:f8:be:
4b:58:2d:ad:64:d3:35:0f:11:4b:8c:59:97:a1:2f:54:0f:f0:
5c:a6:a7:c5:84:4e:b5:7e:00:8c:c9:c7:a3:83:e2:eb:13:9f:
8f:06:25:ed:02:c9:d3:0e:37:e7:bf:e4:94:cc:f5:8c:13:e1:
5e:c1:83:ae:f7:3b:aa:05:c5:07:76:e9:d3:d3:62:1c:9e:38:
4a:12:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org