Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/4299F0F0D10A11ECA78C081CC4F9AE02.roa
File: 4299F0F0D10A11ECA78C081CC4F9AE02.roa (raw, json)
Hash identifier: rsP6bCKmVM8aZ5wsJT0TNKs7g4yZMqHXkcHtSIjggps=
Subject key identifier: 0F:86:9C:F6:51:59:0A:21:E7:46:1D:9E:BA:81:26:92:63:09:42:48
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0444
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/4299F0F0D10A11ECA78C081CC4F9AE02.roa
Signing time: Wed 11 May 2022 09:10:54 +0000
ROA not before: Wed 11 May 2022 09:10:54 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139325
IP address blocks: 103.158.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: May 11 09:10:54 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=627b7d9e-5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:85:60:28:79:ed:e0:40:28:69:b1:db:92:
6a:3c:d7:95:41:f9:b7:07:28:8c:eb:44:a0:95:be:
a2:65:6d:ef:a4:da:fc:2e:43:47:5f:a5:54:a0:36:
64:1d:22:43:d5:58:49:78:eb:a7:f2:cd:ed:5d:41:
44:6f:9c:24:40:32:32:b2:01:52:61:5f:23:77:9b:
b5:0e:d5:f8:3c:15:82:08:d6:48:67:0c:80:21:c9:
6c:2e:ce:ad:a4:5b:62:e5:c2:76:52:89:ab:94:4c:
e9:35:70:a7:f6:87:71:3f:f4:68:f9:f2:53:16:8d:
e4:4f:9d:18:65:50:9e:3d:23:99:d3:fb:e0:a3:45:
35:c5:66:21:25:73:ef:e6:04:98:93:d3:c1:ed:63:
03:5b:0d:27:60:c7:e8:d7:55:ad:c5:16:9f:6a:8a:
c6:c9:64:ed:9d:27:b3:dc:e3:68:8c:90:b8:d4:56:
56:2b:b6:30:36:56:74:7d:5c:fa:4b:77:11:4b:41:
67:9c:67:26:d3:6a:f1:d3:89:a2:de:29:68:d0:c7:
e8:6c:7a:59:fc:8d:41:5e:91:bb:eb:5e:46:1a:a5:
ba:8c:71:b9:de:11:93:a6:15:f4:70:a7:56:a6:a6:
82:98:fa:b3:bd:a9:88:6c:6f:12:12:94:aa:ef:07:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:86:9C:F6:51:59:0A:21:E7:46:1D:9E:BA:81:26:92:63:09:42:48
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/4299F0F0D10A11ECA78C081CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.159.0/24
Signature Algorithm: sha256WithRSAEncryption
26:90:02:c9:28:40:0a:34:67:e8:71:df:bf:5e:9b:3c:58:3b:
69:39:5d:64:22:06:49:dd:26:a3:0b:4f:82:a9:2f:07:f8:67:
74:55:9e:8d:07:d5:1d:78:cd:c8:a1:eb:15:8a:f0:15:4c:1a:
d5:9d:92:88:c8:c6:77:49:c5:4b:91:e9:ba:fc:13:5c:04:f4:
60:99:86:6c:02:21:c0:49:97:fb:bc:87:bb:14:38:14:a7:aa:
37:e2:11:19:0d:68:b0:4e:51:4e:5b:e6:e8:fe:f5:13:f8:f0:
8b:ce:db:36:51:6c:aa:c6:3d:38:5b:05:68:20:1f:e3:73:d1:
84:2c:10:a4:57:fd:33:a1:98:15:da:94:34:3e:52:d2:e1:4a:
17:e0:54:6d:a9:2e:1c:e9:04:2d:6c:5c:75:d0:f9:c7:02:05:
2b:31:a3:74:94:ee:b1:57:2a:c4:d3:0c:3a:f6:89:30:47:80:
7e:82:a5:44:65:d4:92:b5:d7:54:37:02:fb:79:59:1b:54:01:
07:7d:0a:51:63:5f:e2:8f:8d:a3:c2:78:8b:cb:b5:96:5c:f4:
76:12:a8:41:51:67:24:83:ff:0a:69:12:7f:89:15:2b:1f:70:
65:ff:76:ae:5a:09:ce:a9:53:1f:63:ab:1b:c9:6d:dd:35:73:
66:2e:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org