Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/6C4738E2ED9011EDB03AB075C4F9AE02.roa
File: 6C4738E2ED9011EDB03AB075C4F9AE02.roa (raw, json)
Hash identifier: 0yTpH7wzMcCUNmrjqAMRU4rZ3ooo1VxbeYs/5f5s/7s=
Subject key identifier: 8D:27:40:48:92:01:92:0F:80:33:5F:6C:FA:D1:A8:70:21:4C:51:2A
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 3E
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/6C4738E2ED9011EDB03AB075C4F9AE02.roa
Signing time: Thu 15 Jun 2023 04:45:08 +0000
ROA not before: Thu 15 Jun 2023 04:45:08 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 17941
IP address blocks: 103.71.92.0/24 maxlen: 24
103.71.93.0/24 maxlen: 24
103.71.94.0/24 maxlen: 24
103.71.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Jun 15 04:45:08 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=648a9754-4a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:4d:c3:cc:6c:9a:20:2e:76:c4:53:ef:c5:
fc:8e:a8:29:07:90:0c:23:90:ab:4c:c3:41:da:43:
7d:23:1d:5f:22:62:79:ad:f7:d2:db:58:30:95:1b:
1d:49:11:81:9f:96:91:f8:fa:e1:38:4c:39:34:21:
29:4b:ef:e3:f3:5a:92:74:f3:11:a6:ee:98:9a:fa:
54:27:bd:6a:ec:4d:c0:09:3c:ee:91:d5:f9:21:2c:
a3:25:e1:62:12:3d:8c:bd:5d:2d:dd:fa:28:c1:e5:
b0:bd:d7:4b:3a:09:6e:7a:36:6b:3c:7d:ff:7e:aa:
3a:16:55:55:3a:44:82:68:43:6b:02:9e:e9:96:11:
35:19:59:27:c1:ca:4a:c3:f4:17:0f:26:0b:52:b8:
35:89:0a:39:dc:51:7f:e0:2d:b9:84:3d:0c:db:b0:
85:d9:bf:bc:45:7a:29:ac:f2:c1:e6:ef:58:66:a5:
3b:c5:35:5e:3f:be:c9:9a:f2:13:47:9c:ba:c8:77:
07:e7:ad:43:2f:7d:5c:d7:5c:49:48:bb:ba:04:a4:
f3:0a:23:e2:57:19:86:aa:21:81:a7:ea:ce:db:f7:
95:b3:96:0e:ff:7a:b2:96:5c:cc:37:29:db:4d:f7:
19:3a:bf:4c:2f:3d:68:90:d6:b1:30:3d:15:22:55:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:40:48:92:01:92:0F:80:33:5F:6C:FA:D1:A8:70:21:4C:51:2A
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/6C4738E2ED9011EDB03AB075C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.92.0/22
Signature Algorithm: sha256WithRSAEncryption
29:42:39:62:67:83:03:d2:b0:90:ff:77:78:54:fb:39:e4:bb:
d8:56:5d:dd:ce:c9:e9:1e:6d:33:d8:c8:5d:94:40:38:61:3b:
4f:7c:47:56:47:3f:9b:9e:ce:6f:bd:a4:90:13:c1:77:4d:4b:
45:61:6c:3e:b8:89:7a:1b:6e:47:c2:66:88:82:a4:0a:15:f3:
75:68:52:1f:4b:c5:f4:a2:7e:5a:16:60:ea:0f:31:28:ec:c4:
4e:01:bf:e7:e7:86:6d:85:23:5e:af:23:33:1a:5a:96:85:2c:
a9:1b:66:4f:11:3b:d9:96:c9:55:5c:61:28:9d:e3:c7:17:81:
af:c9:0e:ac:83:d1:66:26:3f:62:c2:e0:e8:08:a0:43:14:67:
07:70:d2:33:5f:ac:49:cf:0c:36:90:ad:82:d5:f1:a0:d7:e4:
ee:a3:31:95:3c:07:bc:a0:b7:4f:66:4e:d6:d2:7c:73:f4:15:
fd:c0:36:db:92:10:dd:08:31:42:6a:74:a8:f1:25:c2:7b:ec:
24:d9:95:1d:74:6c:0d:72:f9:ba:27:c0:a0:5f:d7:48:87:c9:
68:d5:8d:20:ad:e3:dd:af:38:65:a8:3c:c2:dd:ff:9f:87:43:
00:29:0a:44:03:fd:5e:6a:68:e1:89:95:54:d0:83:7b:0f:63:
72:ee:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org