Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/603431BCDB2C11ECB151B40BC4F9AE02.roa
File: 603431BCDB2C11ECB151B40BC4F9AE02.roa (raw, json)
Hash identifier: iQ7QgX+zEdhuJzF4acjfVj6HtDzEbNZThu+EsvT+ftA=
Subject key identifier: 9E:C7:95:5D:FA:B8:A0:90:C9:41:D0:3A:B4:88:ED:A6:C5:4A:61:F6
Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial: 16BC
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/603431BCDB2C11ECB151B40BC4F9AE02.roa
Signing time: Wed 01 Feb 2023 08:43:55 +0000
ROA not before: Wed 01 Feb 2023 08:43:55 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136778
IP address blocks: 103.71.152.0/24 maxlen: 24
103.71.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5820 (0x16bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Validity
Not Before: Feb 1 08:43:55 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63da264b-0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:98:8f:ab:d2:55:5b:71:df:97:e5:41:cd:
44:8e:3c:fd:6e:6a:75:aa:f7:55:1d:97:c3:b4:7c:
9d:46:30:43:99:78:59:6c:92:b5:7f:8c:a4:ad:af:
fa:b5:06:ec:d2:8b:09:ec:7d:31:eb:2a:18:fd:26:
c5:c2:e3:a5:83:e2:65:0b:01:3f:25:93:ed:4f:19:
1c:59:c7:26:42:cf:ce:b0:af:8a:4c:ea:db:c1:39:
fe:5b:78:ef:5a:0e:8d:36:dd:f9:a0:a7:e8:f6:7d:
d2:6e:50:51:42:bc:8f:68:6f:87:d4:88:d3:2b:8f:
2a:f3:20:33:b6:d3:03:98:02:06:32:4f:26:34:e3:
c2:24:38:26:da:c7:e4:9c:89:73:b9:87:4f:04:42:
00:64:f5:31:ce:ab:de:53:42:af:1e:5f:a1:cf:02:
99:bd:30:30:9a:02:16:06:1e:4f:8f:2e:ca:50:03:
39:b7:39:75:b8:da:18:ef:e2:d7:21:b6:5b:0a:65:
44:a1:0d:53:6b:73:b8:b9:23:bc:6f:11:23:7a:f5:
12:d9:aa:0d:01:6e:ec:2d:04:b1:00:fe:3b:1c:d4:
bd:53:21:96:9f:fe:02:ec:5c:ac:20:7d:b2:ff:b4:
ba:83:c2:66:05:ab:c0:1e:af:7e:be:f0:77:43:98:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:95:5D:FA:B8:A0:90:C9:41:D0:3A:B4:88:ED:A6:C5:4A:61:F6
X509v3 Authority Key Identifier:
keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/603431BCDB2C11ECB151B40BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.152.0/24
103.71.155.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a3:69:80:32:e8:78:c9:eb:f9:42:39:6d:c1:4b:35:fc:c9:
40:96:9b:5c:fb:7e:33:8b:fe:c4:41:48:5c:03:ef:3e:63:cd:
2d:c8:43:a3:99:25:08:02:c4:d0:2b:e2:3c:29:cc:c3:67:3c:
26:3e:3a:46:37:57:3f:f3:d8:30:e9:62:5a:d9:e9:f5:98:50:
b7:d3:0c:2a:43:78:9c:20:02:0f:33:e1:b3:0d:a4:c5:3f:64:
a3:9d:25:0d:b1:9d:2d:e2:2f:46:8a:b2:8c:dd:70:97:fc:09:
69:74:59:8b:49:64:06:68:66:ce:db:04:3e:c1:30:3a:83:4e:
6f:e3:e6:50:81:e0:47:78:04:c8:07:e2:94:63:2e:70:b2:15:
98:99:90:8d:84:d3:15:6b:97:fe:97:63:65:ec:84:25:bc:49:
22:04:c4:7c:96:ed:c2:d3:8e:a2:09:1a:44:a1:52:b7:f1:b5:
dc:5f:62:0e:15:e7:d2:b0:2a:1d:78:db:e1:8b:fd:a6:7c:37:
64:9d:7e:56:5d:3c:1a:af:89:b2:a9:60:18:20:f9:b5:ab:31:
da:34:cf:fb:77:0a:54:98:5f:d3:d4:d3:6e:bc:fa:27:e8:4c:
8a:ce:11:54:5d:d7:91:d7:af:19:86:92:6e:ca:7b:08:e4:ce:
cf:ac:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org