Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/024F0406598B11EB9713487AC4F9AE02.roa
File: 024F0406598B11EB9713487AC4F9AE02.roa (raw, json)
Hash identifier: 4zdesBRkE71wcsJJXR5Zqti27/chueHmVcKFr9ilDwI=
Subject key identifier: 68:9C:9D:DB:CE:BF:26:61:03:8A:0E:0B:FD:F9:AD:65:9B:3B:22:64
Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial: 0374
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/024F0406598B11EB9713487AC4F9AE02.roa
Signing time: Mon 02 Aug 2021 10:59:13 +0000
ROA not before: Mon 02 Aug 2021 10:59:13 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 134371
IP address blocks: 103.153.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Validity
Not Before: Aug 2 10:59:13 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6107d000-1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:43:97:c5:2a:18:31:7e:56:84:7d:04:48:
96:62:54:be:3e:18:1d:6d:dd:bc:ae:5d:cc:c2:e2:
6a:4b:31:81:6e:c5:78:4c:c7:2d:36:8e:70:70:48:
20:92:78:0a:c4:0a:22:3b:3b:3e:7b:4f:88:f8:86:
9a:03:2a:e1:1f:e2:79:12:bf:88:f7:41:ad:5c:29:
a0:fb:eb:c0:ce:e7:28:66:de:ef:34:73:8c:a6:bd:
94:f3:4f:ad:3e:e2:94:1f:55:ec:4b:ad:60:0e:fa:
6e:27:d0:d2:8f:ec:2d:68:fc:a1:02:3f:e1:e6:bf:
07:d8:2f:58:77:4e:d4:87:5a:c0:30:0e:e6:d1:2c:
09:e9:6c:2e:b7:6d:58:4c:9c:0b:dc:14:64:d4:74:
7e:25:f8:f5:c2:c7:fa:d6:e0:0b:df:ec:f7:11:12:
6e:35:ef:13:cc:50:4b:d7:f6:91:cd:59:7e:0f:3d:
1f:c2:45:8c:6b:aa:d0:a7:f6:70:aa:3c:35:b5:ba:
f6:46:25:5e:d3:19:32:ed:0b:e4:38:d0:c4:e3:60:
b0:47:05:d8:8f:20:86:37:66:49:da:9c:b8:03:0d:
39:7a:dd:ef:9a:08:3d:09:69:c5:59:9a:44:67:10:
b9:9b:49:31:38:a8:30:6a:eb:73:6c:1d:c8:12:39:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:9D:DB:CE:BF:26:61:03:8A:0E:0B:FD:F9:AD:65:9B:3B:22:64
X509v3 Authority Key Identifier:
keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/024F0406598B11EB9713487AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:49:c1:25:05:23:77:e4:e2:41:ab:d8:a0:de:87:2e:08:90:
d9:8a:23:7a:58:e7:a2:5f:8d:03:af:35:39:c5:0f:e9:ca:ef:
68:71:fb:4a:fe:c7:d8:d3:5a:8e:64:84:ad:55:29:c0:71:6b:
78:ae:06:55:9b:e3:a0:2b:13:06:7e:3d:b4:3b:bf:93:3a:76:
a1:ba:b6:72:49:2b:76:52:be:f0:88:9e:3d:b8:98:cb:e1:f7:
be:53:80:06:eb:1f:c1:90:b2:10:92:5c:f8:82:86:4c:1d:1e:
c2:cb:fc:4a:e5:3a:aa:17:4e:05:db:35:cc:e2:8f:0a:e5:58:
1e:a9:09:9c:99:0b:5a:95:5d:10:1c:56:e0:f6:98:68:45:a1:
7e:04:57:fa:72:ef:53:35:09:f5:0b:cf:33:ee:55:5b:65:41:
d1:1b:71:bf:bc:f8:34:65:fd:a7:72:c5:5e:f6:ea:6d:ad:4a:
5d:29:42:5a:dd:8a:3f:87:00:77:d8:fc:0f:6e:63:ee:1f:3e:
bc:09:fd:85:03:08:f1:67:ab:9e:b5:bb:7b:15:39:5a:9a:d3:
b9:27:7c:24:3c:ec:94:b7:f9:b5:6e:ab:a3:0f:23:1d:6b:04:
01:10:83:f5:d3:84:f5:3c:55:4a:7a:bb:e2:b5:a7:d4:b2:75:
f6:5c:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org