Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/81D44A062C4211EE8CAE2D76C4F9AE02.roa
File: 81D44A062C4211EE8CAE2D76C4F9AE02.roa (raw, json)
Hash identifier: hKT0Pzy57RnmN5HrrF9KqHuiyVFTTCsxkZGybDrxwho=
Subject key identifier: 14:3A:89:44:37:3C:DB:01:CC:FD:22:20:D0:65:D5:14:A3:50:0E:2A
Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial: 1AB4
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/81D44A062C4211EE8CAE2D76C4F9AE02.roa
Signing time: Thu 07 Sep 2023 09:27:50 +0000
ROA not before: Thu 07 Sep 2023 09:27:50 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135882
IP address blocks: 103.78.252.0/24 maxlen: 24
103.78.253.0/24 maxlen: 24
103.78.254.0/23 maxlen: 23
103.78.254.0/24 maxlen: 24
103.78.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6836 (0x1ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Validity
Not Before: Sep 7 09:27:50 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64f99796-2524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:5b:d7:81:a0:a5:c8:48:cb:1b:c4:76:00:
92:a1:f2:4c:93:2e:8b:cc:24:46:36:63:2e:99:df:
2c:82:1d:ae:7b:e7:08:8a:ec:c5:e9:1b:66:95:72:
73:fd:a2:61:d5:29:a8:81:7a:7d:6b:21:b6:78:61:
9c:63:bb:49:61:ed:38:72:87:66:7a:17:19:ab:fb:
a3:39:fb:a9:5b:3e:3e:10:5b:ef:93:bc:38:35:07:
38:c4:8b:42:85:25:38:e8:b1:23:d5:71:46:99:5f:
c6:32:94:a9:2c:f5:94:77:8a:9b:e2:6b:27:f8:50:
0b:3f:a6:b7:cc:7d:e2:3d:0d:ee:bc:c7:e5:4c:c4:
0f:63:62:39:05:74:0d:5d:7e:de:27:d9:1b:a0:08:
b0:09:86:4f:00:2b:54:5b:4c:13:8d:27:76:91:24:
9d:67:0b:34:7f:bb:ad:9f:c5:4f:1e:bc:7e:b7:b5:
fa:a1:cf:bb:db:68:06:0e:ec:59:fc:4a:7c:ce:85:
1d:24:09:e1:b6:68:e4:c7:80:4e:f8:a9:95:2d:6c:
63:ec:99:d1:dc:40:d1:33:67:b1:82:2d:f3:fa:51:
63:7e:99:3a:1b:f8:47:8b:96:83:56:5c:5d:9d:5d:
14:4d:c7:20:1e:b1:65:ac:03:a4:77:b2:d3:f6:3e:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:89:44:37:3C:DB:01:CC:FD:22:20:D0:65:D5:14:A3:50:0E:2A
X509v3 Authority Key Identifier:
keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/81D44A062C4211EE8CAE2D76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.252.0/22
Signature Algorithm: sha256WithRSAEncryption
94:9f:7a:40:4b:34:77:3a:7b:3f:bd:d7:ab:68:9e:38:37:43:
d9:88:40:24:f2:92:20:0a:05:9e:b6:a7:90:1b:11:59:c4:93:
0d:d3:b4:12:4a:c9:d5:3e:2b:ae:bb:98:cf:7b:87:6a:61:bf:
54:64:63:b1:dd:4c:e9:95:bc:2c:e5:e1:b3:e2:37:7e:e7:f6:
50:42:1a:15:f8:97:3e:45:e6:5c:af:4d:b5:6e:82:42:a1:7b:
3b:13:4b:d9:a8:34:e8:f5:b7:4d:63:f5:6c:91:b1:58:9f:90:
b0:97:e2:8f:2b:1a:0a:db:ef:33:e6:bc:fe:3a:5e:23:cd:9a:
2e:98:2c:b7:01:11:9d:bc:4c:3a:52:ae:fe:3e:71:68:70:47:
34:65:8a:bc:5a:6b:98:5d:04:ae:df:d0:6a:2b:98:3f:c5:8b:
36:7c:11:a9:6f:9c:0c:4c:19:ac:d6:bd:8d:1d:c1:5f:2a:24:
bf:a0:de:bf:73:df:73:a4:95:6c:96:d6:e2:7f:43:36:c2:62:
58:69:8d:0b:db:b7:34:b8:9f:65:d5:54:91:c7:1e:fb:36:d4:
97:60:db:7f:52:dd:01:fa:59:64:6b:fc:9c:12:08:b6:3e:9a:
b2:6c:49:3a:8c:62:b6:4c:2a:68:06:31:4f:f6:5e:5c:ce:c4:
a6:61:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org