Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
File: 6C6B925CA13F11EDB4BD4A36C4F9AE02.roa (raw, json)
Hash identifier: kXT4U3z7UQiCXO1/1E6pAjFNTmNYvthFBtyelFJaKNU=
Subject key identifier: ED:C1:73:C6:AE:54:F4:FA:B4:BA:B9:84:B9:93:D1:CE:B5:73:7C:80
Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial: 19
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
Signing time: Tue 31 Jan 2023 08:15:29 +0000
ROA not before: Tue 31 Jan 2023 08:15:29 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 150697
IP address blocks: 103.59.216.0/24 maxlen: 24
103.59.217.0/24 maxlen: 24
2001:df1:bac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Validity
Not Before: Jan 31 08:15:29 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d8ce21-8605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:31:9b:6c:40:00:b5:2d:1c:5a:98:e0:1d:
a0:4e:a5:ae:aa:1f:34:05:39:de:95:96:cc:b4:79:
ae:40:60:ad:a2:d3:5a:ef:f8:21:38:13:7a:40:7c:
dc:90:74:11:34:fb:c6:cd:53:71:47:96:7b:cf:f1:
7d:00:81:80:be:fd:8c:fa:81:b4:27:ba:5c:5b:82:
41:d3:82:5e:2c:b7:92:36:de:2b:96:8c:e0:66:d6:
b4:6e:2f:81:8b:ec:ad:ce:cb:41:03:e3:28:9a:eb:
43:b7:08:5c:14:13:ac:af:3a:b2:7e:9a:15:eb:42:
07:f1:b4:12:4e:31:85:da:f3:fe:26:73:34:9c:6c:
92:29:ac:8f:5e:3f:5f:b7:3e:ad:07:6e:74:3c:2a:
93:2c:06:fc:79:4e:1c:5e:9f:bb:e1:2c:c4:32:49:
26:5d:65:bb:09:20:6f:8b:f1:49:1e:0a:69:e1:cf:
fb:55:85:31:11:6b:1c:09:cd:ff:24:2b:d1:b6:ba:
ea:47:c8:a8:06:14:94:0f:88:fa:0e:52:ee:9e:e4:
76:4a:e4:dc:78:2a:d7:64:5d:8a:d3:4d:20:43:8c:
f1:30:8a:4c:1b:a6:3a:89:a3:71:1c:98:f8:e3:52:
c6:21:5b:58:48:07:77:8c:47:49:f0:70:f4:e6:2c:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:73:C6:AE:54:F4:FA:B4:BA:B9:84:B9:93:D1:CE:B5:73:7C:80
X509v3 Authority Key Identifier:
keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.216.0/23
IPv6:
2001:df1:bac0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:6c:91:2b:08:56:5b:ca:fa:a0:8c:e4:9b:f2:54:e1:7f:02:
d3:da:38:ab:e7:f4:97:ce:dc:f1:f3:12:18:ee:98:66:7b:72:
d7:44:01:de:56:f4:cd:c0:78:70:8e:bc:3a:28:9a:2e:8d:fe:
25:30:b5:3a:93:f4:53:f3:3e:cb:f2:59:78:b3:67:03:b3:96:
f1:9f:be:be:30:0c:81:94:06:77:09:18:01:b5:29:42:1c:70:
5e:bd:18:84:60:8b:ab:0c:2b:69:58:d7:1f:47:ec:dc:43:f5:
cd:48:09:49:4c:ff:61:3c:25:49:94:87:df:79:c0:06:18:94:
2f:aa:a4:13:ef:86:e9:85:ee:ec:62:5d:de:d6:d6:c7:1f:c7:
9d:d9:e6:91:82:29:96:2a:a3:db:98:39:ca:c7:c9:0b:e6:18:
c6:46:3b:4d:6c:63:df:78:48:35:2f:c0:25:b2:a8:cd:62:62:
29:f5:75:ef:da:f7:b4:52:b0:55:7f:df:ce:33:6c:54:a3:e8:
b0:f5:c6:56:5c:33:91:d5:8e:db:22:90:7f:9d:46:30:da:d3:
1a:75:ca:69:f0:43:b2:4f:47:02:14:7a:89:52:4f:ed:e1:19:
06:e6:24:56:22:90:14:75:2a:83:36:3f:d6:7c:06:17:c2:a1:
c7:7a:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org