Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BAA7F4D082CD11EAB1C3805DC4F9AE02.roa
File: BAA7F4D082CD11EAB1C3805DC4F9AE02.roa (raw, json)
Hash identifier: PI5CFQ7wFEbXetpFwRgkUZu8zheWuDTGVr6stlUiA8c=
Subject key identifier: B2:9E:0E:6F:98:A9:FC:13:41:8A:F8:26:A7:CF:63:43:EE:6E:0A:B2
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 23B5
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BAA7F4D082CD11EAB1C3805DC4F9AE02.roa
Signing time: Thu 16 Dec 2021 04:32:05 +0000
ROA not before: Thu 16 Dec 2021 04:32:05 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 10015
IP address blocks: 43.250.124.0/24 maxlen: 24
103.254.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9141 (0x23b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Dec 16 04:32:05 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bac145-1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:ab:df:a8:1d:c1:e7:f3:64:0d:f4:be:b6:
90:d8:16:93:da:93:3b:af:3d:f4:05:5f:7c:58:1e:
49:6e:3b:c6:2d:6d:3e:75:37:42:32:16:25:31:c9:
60:e6:62:fd:04:95:cb:62:63:05:50:2a:c3:8b:88:
37:1f:5d:fc:e5:73:da:46:a3:51:3a:69:61:8a:48:
07:ae:12:97:1b:2d:70:45:c9:a7:86:0c:b1:1a:fc:
0b:e6:5e:aa:3f:d2:b9:15:49:34:6a:38:f1:75:06:
f4:0e:41:4d:22:a5:ae:05:7d:12:fd:9c:7b:4a:98:
f4:da:46:a1:57:9f:be:43:51:ea:ff:20:13:df:8b:
16:b5:25:74:4d:ae:46:61:69:c0:1d:d8:1c:91:1c:
eb:47:0c:ba:fb:b3:27:68:2a:a2:91:cf:8a:a9:d1:
15:bc:6d:fd:32:21:bc:73:99:79:66:01:70:e6:49:
ca:e4:e3:04:ed:f2:30:12:38:c3:72:db:cc:93:75:
70:2c:b4:a6:c1:6e:93:bd:30:a9:a9:5b:e0:07:20:
25:e6:46:a2:43:73:59:dc:28:46:4f:6c:15:b7:7b:
9e:ba:0d:98:05:93:b7:fe:b5:87:fe:78:07:17:96:
56:bf:63:f3:b4:6a:ca:47:2a:fb:48:f3:90:69:d9:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:0E:6F:98:A9:FC:13:41:8A:F8:26:A7:CF:63:43:EE:6E:0A:B2
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BAA7F4D082CD11EAB1C3805DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.124.0/24
103.254.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b4:8f:ad:27:17:79:7c:5f:40:ef:cf:46:8a:24:f8:69:8d:
8c:a1:a7:e1:17:2a:d3:42:d2:f3:2a:13:06:f6:38:84:0e:8f:
5f:fe:e4:63:9b:92:cc:bb:f0:0d:d7:a6:da:25:70:e5:c4:67:
5b:84:4f:03:07:db:ac:03:87:8a:f0:69:48:cf:40:29:99:4e:
62:52:4f:99:80:42:7f:0f:e7:b4:05:09:39:16:19:69:93:4b:
21:6a:71:76:1d:07:06:dc:0a:d0:09:68:eb:6a:f6:63:43:97:
e6:5a:01:34:49:90:4b:0d:4b:51:f2:13:88:b8:ce:7b:42:e5:
e8:4f:16:35:ca:fd:e8:bc:2d:d1:8f:c2:19:48:b0:5f:05:3e:
f1:98:fc:ad:36:72:61:1d:50:30:92:76:63:98:5c:ce:df:d3:
f4:a3:13:fe:9b:4f:d9:ce:53:a8:59:d1:7a:c9:15:ad:31:8a:
ff:ae:75:f6:65:82:51:c4:24:d9:f8:08:4f:ab:af:59:13:21:
88:77:3e:f7:b2:3a:63:f1:7a:e6:33:6e:c0:d1:9d:1e:ec:55:
0c:59:16:9e:0e:85:2d:54:c9:7f:07:d6:be:fb:0f:09:de:99:
64:56:47:0a:44:f0:c8:47:66:61:52:26:57:b5:5c:9d:9e:77:
54:6f:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:37 2024 by rpki-client on console-ams.rpki-client.org