Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C0F3E50C992A11EEBDE4AF84C4F9AE02.roa
File: C0F3E50C992A11EEBDE4AF84C4F9AE02.roa (raw, json)
Hash identifier: oDGI55KGHUoNp5tIZxKSw0KML7yiYlr8LZZiPV2aA3U=
Subject key identifier: 72:E1:41:8E:C1:89:0C:5B:74:F9:5A:43:86:AC:99:37:94:03:EE:BE
Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial: B6
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C0F3E50C992A11EEBDE4AF84C4F9AE02.roa
Signing time: Tue 12 Dec 2023 20:12:20 +0000
ROA not before: Tue 12 Dec 2023 20:12:20 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 135069
IP address blocks: 103.54.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Validity
Not Before: Dec 12 20:12:20 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6578bea4-67b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:78:25:26:8c:5d:73:62:b3:e0:82:53:c7:
d9:8e:ad:e0:8b:df:e9:85:ed:4a:fd:e6:bf:2d:91:
37:0f:5b:33:7b:cc:1a:8f:82:16:fd:4e:ff:cc:1d:
f6:79:ed:b0:fc:2c:d5:34:dd:fc:75:5c:b1:f9:7b:
f1:ee:75:18:31:5c:3f:8d:e1:2a:31:4b:cf:71:97:
0f:aa:a3:0c:9b:af:78:73:51:4c:8b:4a:a8:87:02:
5b:b8:df:c4:06:5d:8e:1f:9b:cc:88:12:d5:74:e6:
70:b1:22:d1:b7:d5:24:c5:d7:6a:0f:02:95:64:63:
9d:a8:ae:32:85:b9:84:15:2b:ca:a1:d1:db:35:fb:
59:b4:f8:d7:09:69:8d:2b:9c:7e:04:4e:fe:81:fd:
55:95:7a:f9:a4:62:aa:cd:09:a0:2f:66:2e:87:db:
a2:44:c7:2b:fc:63:4f:17:75:fd:50:9b:02:57:e9:
cf:95:4c:ff:9b:90:79:68:91:56:c2:12:b1:67:04:
60:ac:34:ad:31:e0:94:ff:f5:8b:4b:e7:6f:d3:ed:
58:70:a8:42:cd:1a:14:67:42:2a:4f:b5:b2:d2:b0:
22:03:94:c3:3c:62:c8:e2:63:ca:32:36:34:02:3a:
95:ee:a5:47:02:7d:39:a1:7d:ef:d2:4f:0f:13:5e:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E1:41:8E:C1:89:0C:5B:74:F9:5A:43:86:AC:99:37:94:03:EE:BE
X509v3 Authority Key Identifier:
keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C0F3E50C992A11EEBDE4AF84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7b:91:58:71:a8:6c:05:e7:1b:17:7b:21:f2:51:28:23:a7:
13:33:50:52:da:c6:d3:dd:87:1e:b2:a2:09:c7:1f:13:3e:ed:
c0:7f:c3:f2:fc:e1:41:67:b6:fd:89:00:5a:15:11:e4:7d:87:
75:fd:25:04:71:9d:37:64:83:47:ac:86:fa:11:9a:06:0a:6f:
56:2b:49:5e:0a:0e:c8:e7:8c:ee:e6:98:20:e6:27:a5:a1:28:
42:e1:06:42:0e:26:65:af:ef:88:eb:22:17:82:22:e1:cc:1f:
1a:74:d9:0e:5c:26:95:66:0e:13:5f:83:b6:bb:f3:9f:6e:34:
57:7b:20:ac:35:59:bc:dc:2a:45:15:eb:de:7b:5c:d1:d9:17:
8b:91:32:8a:fd:44:dd:c5:d9:c4:0b:ba:76:b5:ff:b4:66:e9:
ad:b2:86:27:1a:39:6c:ae:97:6b:db:4a:20:7c:01:4e:22:04:
7d:a5:94:76:b2:bb:28:a1:2b:7b:31:4d:61:77:05:a6:61:91:
50:1f:08:99:f8:e3:c1:8b:4f:54:d6:08:ee:e8:41:04:d8:8c:
33:9e:ed:52:c6:68:77:6a:14:2b:02:c9:9c:b7:93:89:d1:cf:
7d:49:b7:ac:2d:c6:f4:6c:96:31:a7:35:7e:69:5a:28:59:57:
24:ee:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org