Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/F966F7EE91CC11EA9F413E65C4F9AE02.roa
File: F966F7EE91CC11EA9F413E65C4F9AE02.roa (raw, json)
Hash identifier: ZTiHJ0k5+mYbvNVxTs5Lo1TbMHvZWyNMST9n7Wde454=
Subject key identifier: 9A:1C:09:1A:74:BA:AD:46:4B:1A:51:30:4B:21:17:88:07:E1:FC:03
Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial: 0AC9
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/F966F7EE91CC11EA9F413E65C4F9AE02.roa
Signing time: Mon 21 Mar 2022 03:09:09 +0000
ROA not before: Mon 21 Mar 2022 03:09:09 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 55330
IP address blocks: 103.18.163.0/24 maxlen: 24
116.204.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761 (0xac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Validity
Not Before: Mar 21 03:09:09 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6237ec55-599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:30:e6:ac:74:b7:08:44:d0:01:33:b6:03:
29:16:dc:95:43:33:70:5f:7b:67:cd:7a:dd:11:32:
11:11:ab:d6:7d:15:31:16:a4:bf:14:15:52:9b:22:
1a:ed:e4:ff:bf:c9:90:f7:eb:18:b0:70:40:2d:dc:
b5:3a:3c:74:07:8b:12:db:65:5b:9e:f1:ab:54:63:
b2:a1:97:99:70:dc:34:bb:55:2a:c0:41:e6:8a:66:
c2:24:3b:40:c3:9e:03:01:7a:0c:4e:8f:5e:58:c0:
5d:9c:4e:76:fb:b8:40:07:4f:6b:48:f5:69:db:cc:
e3:be:45:a3:4e:e3:ec:fd:79:ab:26:6d:a7:55:e6:
3e:89:80:df:05:e0:8b:84:13:96:50:9f:d6:37:23:
7b:b2:c0:bb:00:6f:a3:5e:9e:48:e3:25:81:17:4c:
d6:79:45:5a:57:d2:c6:06:90:5f:ed:16:09:32:57:
b0:4f:24:4c:95:bf:3f:08:16:cc:91:f8:d8:59:f4:
da:e5:9d:b7:25:e1:12:c4:51:0b:aa:7f:0a:5a:cc:
a1:39:88:45:09:02:64:e7:18:1b:f9:12:f6:e7:04:
cc:97:b1:ff:94:e6:57:c1:bc:2e:9d:c7:22:95:ff:
98:86:79:7e:be:5b:1d:cf:3f:01:4d:9d:54:c5:6e:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:09:1A:74:BA:AD:46:4B:1A:51:30:4B:21:17:88:07:E1:FC:03
X509v3 Authority Key Identifier:
keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/F966F7EE91CC11EA9F413E65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.163.0/24
116.204.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:69:0d:8a:da:f6:67:0c:3b:31:98:83:6a:53:13:db:eb:03:
06:63:7b:6c:22:f1:a0:12:e7:15:44:1c:57:ac:b6:cf:58:e6:
5c:b4:b7:cb:40:fc:87:d9:92:d5:98:7f:0e:26:a9:e5:53:29:
37:c5:d1:84:c4:67:e4:83:92:14:3b:6a:85:35:d1:2d:c2:f5:
8e:9f:45:41:e2:e9:39:32:f8:51:dd:56:b6:5f:8e:a2:f7:ff:
81:81:f2:99:de:a0:5f:6e:bb:27:df:fd:17:c6:42:d3:5a:16:
e0:06:0b:f2:42:06:25:92:f3:11:ab:11:7f:fe:47:da:65:48:
90:16:4a:ad:87:30:8e:7e:8a:bc:23:f6:8b:2f:68:5c:34:a1:
2f:ea:ac:4f:0b:57:04:71:4b:1d:7b:b3:3a:59:8b:43:23:de:
67:75:e4:4f:f6:0b:82:3e:c3:f0:49:bb:a2:0a:76:72:bb:61:
e0:99:80:c6:bb:c5:ef:40:de:0c:af:7a:05:91:6a:ba:a9:8c:
25:30:f4:01:76:90:5d:89:1d:9a:c9:81:55:1a:bd:a2:f5:f8:
26:ed:2e:a6:94:1a:ac:56:08:8f:3d:77:47:d5:72:3b:81:91:
36:7c:07:fe:09:1e:37:22:bf:3a:ce:3f:cd:6b:33:ed:ca:ec:
7e:65:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org