Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/DB6ABDCEA35B11EB89DAB756C4F9AE02.roa
File: DB6ABDCEA35B11EB89DAB756C4F9AE02.roa (raw, json)
Hash identifier: mLkFTtFD6ih9nJMorZ8q2PILZ/gC1oE4ALUWzlq816s=
Subject key identifier: 9E:36:48:DE:6D:5F:90:C6:4D:5D:3E:22:5C:F9:E5:5A:C0:06:EA:14
Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial: 064D
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/DB6ABDCEA35B11EB89DAB756C4F9AE02.roa
Signing time: Sat 24 Apr 2021 10:04:33 +0000
ROA not before: Sat 24 Apr 2021 10:04:33 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 139780
IP address blocks: 103.145.44.0/24 maxlen: 24
103.145.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Validity
Not Before: Apr 24 10:04:33 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=6083ed30-af3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:fa:24:7e:4b:92:c9:2b:ee:ff:e5:9a:b8:
ec:c6:75:30:19:86:b8:b0:1e:42:22:f3:0d:1d:d5:
c3:14:6c:c8:c3:98:da:b5:ca:a2:88:c7:18:a3:3f:
e3:3a:01:51:89:aa:e9:0c:23:af:48:f2:38:1a:79:
56:5c:55:ad:5e:09:a4:65:6e:2e:e8:d0:3e:c1:a3:
17:fe:7c:a2:08:09:52:23:9a:b7:79:e9:05:52:3b:
be:e7:5b:a3:c9:f4:bd:ef:85:68:6c:54:46:28:f3:
f7:63:c4:2c:47:ae:5c:c5:89:ab:0a:52:84:fd:8c:
c2:be:67:eb:64:aa:bc:52:e4:01:3a:51:e3:d2:9f:
8a:fa:e0:ce:8e:d0:01:e2:01:8d:40:01:a0:a0:fd:
cf:89:bd:dc:c3:8b:d4:dd:44:31:cf:49:cc:6e:0c:
fb:71:90:45:42:c8:61:38:1e:36:4a:a4:3d:b2:ee:
e2:d3:b3:e7:fa:28:39:4d:c9:6e:b2:40:19:8c:7b:
8d:e8:ac:36:d5:57:73:52:a3:4d:95:ed:e9:58:9f:
4d:2d:55:04:ae:0b:72:f0:59:58:16:d7:54:c8:33:
2a:51:67:67:da:0c:8c:a1:be:e2:f4:94:6e:4c:96:
8e:f3:80:d8:c7:f3:2f:74:1b:da:99:fd:ab:d5:ea:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:48:DE:6D:5F:90:C6:4D:5D:3E:22:5C:F9:E5:5A:C0:06:EA:14
X509v3 Authority Key Identifier:
keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/DB6ABDCEA35B11EB89DAB756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:5a:f5:b2:37:22:bd:ca:49:86:49:5b:12:5a:91:89:be:aa:
de:4d:d7:ad:01:50:91:90:d8:26:2e:15:73:83:16:3b:39:ef:
b2:05:94:c6:15:3f:10:ae:ee:78:d8:af:60:b9:4d:8d:8e:4b:
fb:7c:6b:7f:ee:8c:37:16:de:be:b4:bf:56:a6:ad:3a:36:6a:
fb:12:13:ed:ff:72:3e:d6:99:b0:51:64:83:3a:fc:9a:17:04:
21:4e:c7:9c:3a:e4:90:90:40:e5:8b:34:b4:e1:26:3b:b6:b2:
a4:8f:24:a2:31:39:58:6b:10:3d:3b:1c:cb:6f:a0:a4:31:f5:
87:97:05:a9:a8:ae:cb:7c:d4:7d:65:e8:2a:f4:c8:34:31:7b:
6f:30:94:24:f6:e6:8d:c7:7d:b6:25:18:68:3b:12:8d:20:86:
9f:cc:07:ce:3c:ad:67:4c:51:46:73:48:2a:6b:10:56:a5:95:
78:80:cc:91:f4:44:f6:0a:e5:81:3c:eb:87:b9:10:57:14:98:
ba:89:86:87:e3:48:e1:59:87:63:71:48:95:84:8a:26:ac:64:
03:44:d8:24:7d:ec:90:7e:71:77:1e:11:87:a5:6d:ea:36:5b:
58:d5:cd:56:dc:50:a8:60:d8:f4:3e:55:e8:37:b8:59:29:30:
9b:92:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org