Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6EA942D6197F11EEBC3E5750C4F9AE02.roa
File: 6EA942D6197F11EEBC3E5750C4F9AE02.roa (raw, json)
Hash identifier: kmljyGQ5rbrp4thZO+GHan47BfQt8lRo9gy45AkXlFg=
Subject key identifier: DB:6A:09:35:6D:AD:2F:40:43:F3:AD:C7:35:E5:AC:58:46:62:D3:47
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 02
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6EA942D6197F11EEBC3E5750C4F9AE02.roa
Signing time: Mon 03 Jul 2023 08:56:00 +0000
ROA not before: Mon 03 Jul 2023 08:56:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9232
IP address blocks: 103.144.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Jul 3 08:56:00 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64a28d20-e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:af:e0:ca:f7:64:87:0c:cf:2d:aa:68:2a:
71:c0:19:6a:e1:00:93:10:b7:bb:c1:f0:83:70:4e:
b2:c9:a5:2a:1c:7f:91:04:87:6f:92:4f:b8:af:ea:
de:d6:ee:f0:43:28:cc:b8:c7:5e:3d:2e:52:3a:14:
64:5d:eb:f3:de:3e:c4:74:a6:db:14:ef:d8:7c:5a:
cc:5b:9d:e8:6e:34:c4:90:bc:da:7c:78:7e:55:8e:
2f:d9:a2:e0:38:da:4b:cf:56:17:70:9b:dc:f4:45:
ec:75:db:f2:4f:ff:72:84:55:fe:ec:76:ad:e4:9f:
da:66:85:93:9e:86:5c:d6:9a:d3:3f:1b:04:08:87:
f1:69:c9:a5:99:3c:78:b5:e8:21:fc:34:b5:32:62:
2e:e4:65:08:2f:44:4d:4d:6f:fc:fb:50:c0:e4:17:
95:dd:20:77:92:d1:5b:7a:55:df:5a:07:65:51:a6:
a4:e2:1d:67:58:20:bf:16:84:55:10:e7:c3:4a:35:
83:2c:7f:00:18:a2:8c:fd:64:7f:68:71:d5:f6:ed:
2e:d7:14:8a:ad:f7:2b:4a:fa:21:dd:ec:05:ed:b0:
b3:36:ad:d1:be:64:61:d2:54:91:25:19:c7:1d:1b:
1d:0a:e3:73:78:f7:12:07:ed:48:d4:b2:0b:23:0a:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:09:35:6D:AD:2F:40:43:F3:AD:C7:35:E5:AC:58:46:62:D3:47
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6EA942D6197F11EEBC3E5750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.241.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b5:61:ec:4d:9f:79:75:a6:88:81:4c:b2:da:d8:68:01:16:
e9:f4:f6:f9:f9:35:19:73:09:5d:1f:53:bb:5c:2c:97:3f:1b:
23:9f:b0:c3:6b:ca:f4:6c:35:32:c0:81:f6:93:e8:c9:a7:ac:
86:d1:50:84:f8:c8:bd:c4:58:e7:78:a9:ee:0f:cc:2d:0b:cf:
6d:62:ee:47:19:ed:fa:ff:5a:c0:63:a8:22:3b:8b:b0:79:53:
0b:cb:fa:cf:fb:ca:aa:49:2b:cb:6c:dd:7a:b6:73:65:1a:cf:
9c:cc:2d:6e:ce:3d:27:af:df:3a:96:45:fa:43:4c:7b:ca:4c:
08:41:96:8b:bb:0e:3e:f9:4e:1b:0a:aa:20:5d:dc:0a:55:88:
82:a0:e7:97:f9:e1:be:52:df:14:bb:71:b7:28:2d:a3:f9:8d:
b7:5d:0e:30:68:89:6c:42:51:bf:f8:e2:e9:ef:e6:64:85:4b:
84:a7:21:de:c7:4a:ee:95:84:b7:80:ad:14:cb:6a:39:01:6b:
ca:24:f8:99:9f:8f:67:10:61:59:91:8b:8b:e5:5b:ac:2f:32:
bc:26:44:ac:5c:e6:a9:1c:31:7d:18:67:23:c2:23:03:e0:55:
ab:f0:b0:da:53:f4:3c:5d:c2:29:11:07:79:2b:a5:e0:35:56:
dd:a0:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org