Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E9E9D8F4CAC311EC910B8C20C4F9AE02.roa
File: E9E9D8F4CAC311EC910B8C20C4F9AE02.roa (raw, json)
Hash identifier: DiZfPraicL+vEU9Mm9hE+LnWeD50tT31Lk1zZ9TAor8=
Subject key identifier: 87:AD:2F:D4:7E:3E:35:20:74:EE:E0:E8:FB:15:97:7A:37:86:A1:D6
Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Certificate serial: 02C1
Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E9E9D8F4CAC311EC910B8C20C4F9AE02.roa
Signing time: Tue 03 May 2022 09:32:14 +0000
ROA not before: Tue 03 May 2022 09:32:14 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 136933
IP address blocks: 103.155.214.0/23 maxlen: 23
103.155.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Validity
Not Before: May 3 09:32:14 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6270f69d-53af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:de:b2:aa:9e:55:e3:3c:fe:25:76:6b:1b:
4c:eb:bc:51:ff:5b:d9:95:aa:83:f6:8a:48:e3:16:
c7:c6:82:ce:7c:3b:8b:48:91:a1:cb:9a:69:14:19:
22:a0:5d:e7:31:27:e1:a8:a2:dd:8d:1f:bf:44:5d:
ee:d6:1e:b4:81:4e:db:10:29:7a:aa:25:c0:13:89:
38:b2:b7:86:4b:a3:a0:43:d1:8d:98:d9:48:dd:e5:
7b:72:b8:28:be:67:18:e0:81:43:01:70:3f:40:fd:
37:93:a5:ec:57:90:00:ec:bb:b1:d9:e8:5a:71:31:
e9:2c:81:15:e3:6d:80:f1:b7:2f:33:63:5e:6e:51:
1a:1b:b5:d2:b5:29:9d:67:8f:a8:53:94:94:dd:91:
bf:eb:e5:0b:71:2b:bf:35:42:91:39:2d:e2:f2:36:
d3:e2:f8:3f:b5:a6:64:ed:60:6f:94:87:1e:8b:99:
f2:7b:07:b9:1c:36:18:27:01:24:49:31:f3:0b:f0:
f7:98:cc:61:7c:22:86:ab:3d:b3:4c:cc:d5:9c:ed:
2c:fc:cf:86:da:13:90:b4:39:5a:69:bf:ee:fb:ad:
72:e6:68:58:3a:2d:c6:e0:f4:8e:91:37:85:43:98:
ff:26:43:9f:6e:77:07:fa:79:a4:82:a8:4d:48:b3:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:2F:D4:7E:3E:35:20:74:EE:E0:E8:FB:15:97:7A:37:86:A1:D6
X509v3 Authority Key Identifier:
keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E9E9D8F4CAC311EC910B8C20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.214.0/23
Signature Algorithm: sha256WithRSAEncryption
34:ee:c7:03:db:c4:b5:ae:21:be:09:5d:f3:b1:ec:53:58:7e:
67:04:ea:b4:ee:1a:ad:d0:d5:e0:00:5e:b2:96:b6:06:0a:bd:
b5:32:ab:4b:32:19:fd:a4:09:f3:f6:48:ac:f8:5a:49:26:6a:
cf:27:4e:f5:bc:8b:6c:0d:5e:dc:87:24:d9:18:4e:8a:6f:3e:
35:12:45:8b:cd:1d:0d:f6:2c:c5:02:f9:e1:ad:35:11:40:89:
46:99:d7:50:39:14:55:69:94:8d:b2:e9:90:52:ca:9a:15:a3:
af:99:8e:67:b5:08:bb:87:ab:9e:1f:b5:72:67:d0:08:d3:c4:
9a:e7:7d:3d:23:c7:48:fe:6c:c7:c7:41:fb:6b:18:5d:f5:17:
c7:03:1d:af:04:e8:ff:9c:6d:92:2e:78:bb:47:c5:da:cf:82:
e3:86:d6:70:9b:65:0b:22:b6:fa:f9:00:b4:e1:df:b1:01:a8:
83:c2:8b:15:1b:91:7f:7d:d9:44:e9:2e:8c:be:f5:d2:bc:5d:
46:88:96:c1:16:bf:8e:a6:b7:2f:cf:b3:2b:75:05:3c:a1:7f:
ad:4b:40:62:ee:2c:f5:07:7b:64:16:0d:e6:10:65:fc:84:96:
61:d0:ef:1d:88:b8:7a:0c:b0:7b:03:3b:95:26:9f:b7:f7:9e:
f4:ce:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org