Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/A8A6AB8CB6A711EBA39F3529C4F9AE02.roa
File: A8A6AB8CB6A711EBA39F3529C4F9AE02.roa (raw, json)
Hash identifier: +S2Tnj+WjS2McUNoU0LGoLla1+XfxlD4OSAtD/L5UD8=
Subject key identifier: A1:20:F4:92:59:34:EF:EB:E7:F7:7C:F4:0E:D0:FD:0F:C8:56:8C:35
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0958
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/A8A6AB8CB6A711EBA39F3529C4F9AE02.roa
Signing time: Wed 04 May 2022 08:26:33 +0000
ROA not before: Wed 04 May 2022 08:26:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133895
IP address blocks: 103.46.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: May 4 08:26:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627238b8-8f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:ce:f2:1b:00:33:ea:7a:bc:70:8f:a4:bb:
50:83:7d:e5:0a:07:e4:5e:0b:4f:a7:e3:e7:ea:2d:
6e:e5:87:2d:31:06:57:c9:28:94:9f:1e:f8:1f:65:
90:cf:ba:0b:d0:1c:ec:e3:32:ae:30:54:03:39:06:
2a:ae:a1:a0:d7:e2:96:c3:07:cf:45:b3:71:d5:4d:
7b:92:34:79:be:b0:34:92:21:62:37:25:f9:9a:18:
a1:68:4d:bf:fe:ba:06:d7:d5:de:cf:c8:12:d9:78:
73:3f:ad:35:1b:58:2a:ab:7f:f6:25:92:16:7b:03:
c8:93:1c:db:60:81:8a:45:28:57:a8:7b:8f:5f:ab:
0a:42:ac:7b:c1:54:4b:c5:f5:71:26:bd:84:53:87:
76:9c:47:1b:67:26:bd:b4:c3:75:17:6d:56:07:f7:
c2:b5:6c:97:fd:5f:04:3c:d5:f2:ca:27:4a:ca:3b:
b0:6d:84:e1:a7:e6:e9:59:36:6b:56:31:50:12:8e:
fe:6f:5c:7c:e9:0f:60:54:ff:76:20:ce:4f:a3:9d:
c3:bf:2a:04:ae:65:8b:31:e7:73:9d:cd:01:a2:52:
3f:31:5d:65:64:50:30:9e:7c:4f:9f:5c:1b:0a:ad:
fd:ba:71:48:be:ee:99:57:57:0a:f1:80:7d:d0:e2:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:F4:92:59:34:EF:EB:E7:F7:7C:F4:0E:D0:FD:0F:C8:56:8C:35
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/A8A6AB8CB6A711EBA39F3529C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.215.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fe:f3:15:05:8a:f8:81:e5:8d:19:bb:99:a4:11:7e:05:58:
b6:08:b5:a5:f7:47:33:2a:3c:0b:d9:1a:c8:d1:b3:37:a5:a4:
3b:30:13:de:2b:5d:e1:44:bf:0d:0b:59:68:39:46:f9:e3:d0:
3b:da:32:92:f0:57:b6:e9:bd:83:6c:61:7c:f1:e7:7f:4e:36:
18:34:6a:e5:b7:23:19:72:24:dd:0b:00:1d:84:28:04:38:4b:
a3:cc:96:fb:b5:ee:8c:23:4e:9b:43:7b:4d:55:c1:9f:0d:ae:
ac:92:f4:e3:9d:75:5d:a7:e6:90:04:15:21:3c:53:12:4d:9e:
7f:19:8b:4e:bd:ef:09:5c:37:d0:4d:7a:c2:8e:ab:5d:0c:13:
11:93:c2:db:a6:22:30:9b:12:90:1f:9b:50:45:a6:08:f7:9e:
cd:82:34:b4:37:e5:9b:9f:5c:4e:2c:5d:4a:f1:b5:a3:ab:64:
c4:38:4b:14:f4:cb:63:42:8b:eb:20:62:dc:56:d5:d7:b0:df:
21:04:b1:49:cc:1f:fb:6d:2f:49:57:e8:d6:63:ed:8c:41:9e:
73:30:67:bb:ab:14:74:00:b4:7f:8f:3f:15:d3:ab:39:d5:9a:
49:3f:b1:cb:ba:79:5e:b4:1d:2c:3e:3c:6a:b5:fb:4a:86:c1:
11:fd:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org