Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7743F2ACBE2011ED9E80730EC4F9AE02.roa
File: 7743F2ACBE2011ED9E80730EC4F9AE02.roa (raw, json)
Hash identifier: ULuvxbUBLdIJA4UsZdbfQME6fxpTEf0FTzhBvfA8Gi8=
Subject key identifier: 9A:13:9F:47:18:90:D4:62:13:3C:CC:15:31:02:A4:94:B6:53:A9:C0
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 03
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7743F2ACBE2011ED9E80730EC4F9AE02.roa
Signing time: Thu 09 Mar 2023 02:16:57 +0000
ROA not before: Thu 09 Mar 2023 02:16:57 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 3507
IP address blocks: 103.71.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Mar 9 02:16:57 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64094199-77ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:77:0e:9a:26:34:5c:e5:bd:b0:e0:1c:aa:
3c:dd:1c:dc:65:5b:71:41:db:90:24:9f:35:74:7b:
dc:ca:ab:a1:6c:dc:63:48:c5:de:2f:b9:d2:1f:0d:
f4:a9:8f:b4:9c:a9:99:e3:2e:ee:08:55:a7:c5:07:
d5:70:59:9d:9a:c7:b5:4d:17:b4:30:07:28:f3:53:
87:e9:b3:58:4a:e4:41:f3:0b:8d:48:45:d5:34:5c:
38:98:0d:9d:88:fe:5d:00:64:62:07:8d:3b:e8:6b:
bf:7a:2f:1f:d7:b8:d7:34:db:0d:0f:5a:61:02:51:
11:01:4e:77:d8:0c:b3:2a:9e:8b:bb:a9:3e:9d:f6:
03:be:9f:a9:41:25:0e:cd:f9:bc:28:02:97:54:0e:
09:a9:7c:82:ae:6a:6b:36:68:4a:3c:8c:a6:da:46:
e4:d9:cb:25:d8:4f:df:d4:9a:22:1f:5a:70:e5:43:
e0:20:44:39:4b:eb:43:73:8d:cb:8c:a9:e2:cc:fc:
4c:d5:1d:ae:b9:51:62:69:9e:60:c7:7f:4e:36:7d:
b4:08:9f:ea:d4:2b:12:63:cc:b5:d5:3a:43:de:3e:
8c:62:04:4c:c8:95:e6:a6:77:8f:05:03:a9:a3:90:
25:b2:cd:11:6f:f8:28:30:72:60:2f:2c:d4:6e:f3:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:9F:47:18:90:D4:62:13:3C:CC:15:31:02:A4:94:B6:53:A9:C0
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7743F2ACBE2011ED9E80730EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:59:90:a8:52:40:fa:36:b5:e1:d3:dd:37:fc:91:f4:73:8e:
d7:81:ed:70:97:ba:fe:86:d6:d1:28:3c:55:3c:3f:63:be:ed:
6d:05:2c:6b:10:88:03:9b:b2:c6:38:ed:40:ee:78:3f:19:e8:
4a:e1:b7:15:07:a4:03:b6:e9:84:a6:97:31:07:99:a3:20:49:
1c:68:c8:74:53:12:0f:45:9b:31:5b:06:44:51:89:00:d4:01:
04:2c:0a:73:72:96:82:e4:37:8f:71:6d:b3:93:67:b7:00:9d:
b4:1b:65:5a:0f:05:eb:cf:d0:bb:7b:8c:82:c0:1c:7a:ce:22:
7e:57:7f:0d:8d:6b:f4:1c:9a:f6:60:4e:0f:eb:1f:f5:9f:8f:
79:b9:4a:07:75:c8:f3:2b:a1:c9:c4:c9:ca:56:b9:f3:d3:4f:
c2:c1:37:2c:f0:8a:f7:a7:e6:52:dc:d0:0f:f9:04:5c:bb:24:
3e:93:58:e7:67:6f:59:d3:d8:21:a7:94:7f:34:1f:c9:61:2b:
21:17:3e:84:c5:70:d0:c5:19:be:44:41:3b:8f:b4:c2:52:26:
f4:e8:57:07:01:18:87:f7:b2:4d:8d:4a:2f:3b:73:82:7c:fe:
57:24:47:a6:c8:77:68:97:9e:35:77:b4:9c:15:85:5e:47:1a:
8d:b8:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org