Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/048B4DFA743D11EDB3D18909C4F9AE02.roa
File: 048B4DFA743D11EDB3D18909C4F9AE02.roa (raw, json)
Hash identifier: YYfcdDi2fyWyxIT4PAV2NVaMuQd4hlz6zG9zeAiphUs=
Subject key identifier: D2:05:8E:22:57:AE:EC:43:27:AF:53:26:E7:51:69:FF:7E:6A:5E:D6
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 06
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/048B4DFA743D11EDB3D18909C4F9AE02.roa
Signing time: Tue 06 Dec 2022 10:15:40 +0000
ROA not before: Tue 06 Dec 2022 10:15:40 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138687
IP address blocks: 103.86.121.0/24 maxlen: 24
103.86.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Dec 6 10:15:40 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=638f164b-6deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:63:95:a5:6b:17:b4:cf:26:67:37:e1:87:
7a:43:f3:17:2b:4f:f9:74:5a:09:0e:fe:3a:2e:87:
64:16:5d:92:0f:df:0c:e4:33:71:78:d0:9e:db:9e:
68:3b:56:48:af:53:30:cb:aa:90:3c:dd:04:92:5d:
c2:a4:7a:2b:0f:5c:02:7d:6b:84:1a:7f:b4:74:9b:
a4:60:7a:76:7e:8d:71:99:ed:c3:a8:c2:33:36:f5:
b2:75:fd:62:cd:73:83:47:f1:9e:74:80:c8:d6:d0:
27:22:90:9a:1f:70:48:b1:eb:1a:1c:7d:ab:21:34:
24:90:be:e5:db:c2:14:89:17:b9:76:92:b4:5c:c1:
38:93:ac:b0:78:a5:82:fc:b7:12:c9:96:b9:9e:b6:
d2:c7:55:6e:57:90:4b:6d:b5:ae:f6:0f:b9:e2:f5:
5c:2a:ed:e1:cd:c7:d6:70:1a:6d:f9:46:8b:c7:f3:
85:f0:d8:77:5e:00:0e:a6:03:fd:5c:8c:75:e0:43:
07:c9:a4:d8:76:b3:8e:a7:29:6d:39:e0:b9:9b:ea:
3c:ee:33:3e:b2:52:4e:36:5d:1d:13:6b:41:31:4f:
6c:0f:a0:87:6c:6e:60:87:d2:2e:ef:9d:00:d5:6d:
4e:83:45:9c:06:35:2b:d4:1b:5e:61:36:43:c6:c8:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:8E:22:57:AE:EC:43:27:AF:53:26:E7:51:69:FF:7E:6A:5E:D6
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/048B4DFA743D11EDB3D18909C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.121.0/24
103.86.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:81:3f:86:dc:80:85:31:03:b7:43:3d:a4:81:7f:45:db:1d:
66:b2:28:20:73:8c:a8:a0:09:5f:fe:3f:4d:14:ad:7f:e7:8a:
e1:b5:c1:d0:23:51:8d:5a:99:35:0a:eb:bd:a9:91:b8:69:3b:
9d:f0:7e:3e:23:96:21:f7:99:16:53:89:ea:78:fb:02:80:fd:
cf:a2:d0:9e:0d:5c:df:8a:d7:04:db:c2:5b:95:81:34:93:80:
0c:8c:3e:0c:dc:ab:66:c4:fb:3e:33:28:8a:91:94:ad:83:31:
55:ca:5c:74:ab:9f:9e:97:de:89:ec:fd:9e:a5:8f:db:a6:8a:
29:a5:a9:b3:ba:32:b8:82:46:c5:2f:a3:9a:56:38:65:60:15:
27:26:2b:25:f0:16:04:4f:df:61:f5:2f:ae:6f:85:9d:04:c4:
0d:0d:9f:f0:b9:cc:95:8a:88:81:93:85:b1:0f:57:3e:55:9c:
a6:8b:50:60:64:85:9c:6f:e6:77:44:91:18:ab:c0:46:b8:b5:
8d:c8:88:07:9d:66:7b:25:79:5a:42:53:41:03:c2:ae:a4:9a:
2c:7a:6f:9b:1f:21:ae:5a:45:1c:66:72:f1:a8:69:0d:a3:38:
da:83:86:4e:a4:71:d0:4b:70:a7:9f:d4:71:09:6f:de:1d:c4:
3a:27:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org