Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/A5AC53EABA8E11EDA956E90CC4F9AE02.roa
File: A5AC53EABA8E11EDA956E90CC4F9AE02.roa (raw, json)
Hash identifier: 2fb136s9xO8qTxn7C66ahaWESgDLUKL7nux5yIVA+Ho=
Subject key identifier: DC:33:A5:17:FE:AC:03:03:9B:AA:C3:56:3F:DA:F1:BD:F7:D1:9E:C4
Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial: 0D
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/A5AC53EABA8E11EDA956E90CC4F9AE02.roa
Signing time: Sat 04 Mar 2023 13:15:35 +0000
ROA not before: Sat 04 Mar 2023 13:15:35 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141421
IP address blocks: 103.84.56.0/23 maxlen: 23
103.84.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Validity
Not Before: Mar 4 13:15:35 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64034476-0505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:c9:63:91:cf:3b:c7:15:d2:4a:a1:30:36:
90:6d:35:e9:a0:8b:35:eb:3b:67:bf:c2:bd:da:9d:
97:f8:66:04:cd:fa:1e:2f:89:36:e6:e8:1d:3d:f3:
e6:79:a6:47:c1:2f:85:4c:28:44:d2:90:02:d7:57:
ae:f2:b5:fe:f8:64:0c:3c:c2:c6:16:ac:c7:25:50:
00:41:92:10:10:1c:03:59:13:88:2e:ec:f4:bf:fe:
4f:90:90:8a:75:f3:64:88:70:e9:b3:4c:9b:5c:bd:
be:2b:69:62:35:ad:ce:e1:3b:b3:bd:ff:66:ce:06:
4f:16:41:3d:36:20:d3:2d:3b:5e:82:85:ee:cf:7f:
04:22:37:e8:71:d9:e9:cc:62:b6:35:1c:d3:01:66:
16:a8:de:7e:ef:44:c3:ce:1f:3a:c3:c9:7b:67:a3:
65:a4:5a:df:73:45:8d:f9:bf:9a:aa:e6:a5:03:ff:
ad:1a:dc:5f:9d:bc:3c:a4:c9:cb:4b:53:fc:d2:7a:
0d:e5:01:09:d6:04:af:3e:c7:59:2f:50:bf:37:3d:
78:70:fd:a2:e0:e8:0c:25:27:c4:27:fa:30:81:a1:
cd:07:1b:5b:2c:d2:25:f6:d5:12:8c:4a:43:01:d0:
07:fe:52:2f:37:5f:9a:fd:57:f4:9b:05:27:80:38:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:33:A5:17:FE:AC:03:03:9B:AA:C3:56:3F:DA:F1:BD:F7:D1:9E:C4
X509v3 Authority Key Identifier:
keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/A5AC53EABA8E11EDA956E90CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.56.0/23
Signature Algorithm: sha256WithRSAEncryption
56:3c:cb:01:8d:53:a4:74:ac:62:7b:82:0b:f6:a6:e4:ad:1f:
4e:7c:da:b4:67:98:83:79:11:a9:5c:7e:d0:47:da:36:4f:1b:
5e:40:fa:e6:7d:d8:24:42:e9:a9:bd:21:54:4c:03:f9:3c:30:
ee:84:b3:af:f0:ec:b7:f8:5f:a4:2b:93:3b:56:62:13:4a:fb:
44:71:85:89:75:e1:f4:cc:99:ce:f9:0f:16:ff:d0:b4:52:84:
57:d0:3f:ba:e7:b5:0e:89:ee:bd:e8:29:be:8e:d5:5f:65:2c:
85:dd:5d:f0:18:f7:c0:1d:7c:4f:7a:e3:76:3c:25:41:ce:63:
fe:93:b0:03:90:e1:10:60:b7:4c:18:49:e5:db:35:38:eb:03:
fb:58:1b:2d:e0:d9:e0:ea:39:72:d6:78:d1:d6:01:cf:02:e4:
79:aa:23:c4:9d:10:b1:6e:8b:df:15:f4:a7:fa:41:4e:29:f0:
9a:4a:fa:b9:ff:da:8f:fd:e4:49:de:3a:65:08:6b:6b:76:d4:
d2:eb:7a:9b:23:f1:6c:78:d8:e5:d8:06:a1:32:81:aa:b4:ff:
6c:4b:26:23:65:10:bb:78:a1:e8:4a:39:0e:50:b8:0e:1a:b7:
f8:1f:44:c9:6f:16:dd:01:89:2b:0f:aa:38:c9:87:60:22:4c:
cc:82:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org