Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/A6E141F263E611E8A071AC1CC4F9AE02.roa
File: A6E141F263E611E8A071AC1CC4F9AE02.roa (raw, json)
Hash identifier: Ht3U+XMNVGQyJDroc3IWloqx39tQjJaG1id0YuIFvcQ=
Subject key identifier: 9A:E6:78:D8:10:A6:38:D5:0F:9D:C5:28:E7:AB:C2:67:D0:52:F4:CF
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 101B
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/A6E141F263E611E8A071AC1CC4F9AE02.roa
Signing time: Thu 21 Oct 2021 06:23:58 +0000
ROA not before: Thu 21 Oct 2021 06:23:58 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 135106
IP address blocks: 103.209.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4123 (0x101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Oct 21 06:23:58 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=6171077d-dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:ba:8a:77:61:c5:bc:ae:fc:18:82:98:8b:
ec:4b:0f:e6:86:18:5a:77:2e:3d:7b:93:fe:7e:c1:
5d:1a:b8:00:4f:8f:19:1a:32:20:80:72:3d:2d:a9:
49:1c:96:ce:8d:29:b6:00:80:90:de:8d:31:28:76:
5c:8a:1c:18:ee:74:fd:04:c7:cf:ca:6b:84:b3:01:
6e:0c:9a:dc:e4:82:1b:ca:df:03:51:73:f2:c8:40:
0b:38:40:a7:7c:97:bd:18:cf:46:8a:ce:6b:b6:2a:
cf:5d:c5:8c:28:12:8e:1f:ea:24:24:09:db:15:68:
8d:d2:af:d4:4e:f9:12:67:f8:03:35:28:33:0a:0e:
94:15:5e:5e:db:a6:44:22:1f:2c:a0:b6:05:54:cf:
05:fa:ab:a6:e1:f7:30:8c:6f:ff:94:b4:71:c9:ce:
ed:33:27:ef:80:15:be:5a:67:9b:28:37:d1:a4:13:
4c:a2:25:7b:9c:37:b3:de:18:ea:2b:75:d3:66:40:
67:a7:29:09:53:a5:67:19:cc:59:e3:47:2e:fb:38:
51:d7:fc:2a:d9:be:c1:2d:42:52:d8:53:5c:d5:6f:
62:d2:a3:37:05:45:37:2f:71:49:af:ff:0c:ff:bd:
ed:9a:39:d2:c3:fe:01:78:b2:5c:39:bd:29:b7:44:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:78:D8:10:A6:38:D5:0F:9D:C5:28:E7:AB:C2:67:D0:52:F4:CF
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/A6E141F263E611E8A071AC1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:4d:d1:eb:9b:8e:61:0d:d6:c2:4a:ed:03:75:6a:16:71:72:
42:8d:a0:f9:e6:da:96:2f:12:1c:fa:d0:c7:ef:2b:e9:c1:d4:
4b:a6:56:92:6b:70:91:b1:bf:9e:4d:0d:9b:42:5c:3d:92:8c:
a7:e8:07:95:c6:63:b8:c0:67:be:c2:4b:91:0a:4a:a2:d3:8e:
87:ea:15:6c:ae:9a:e3:31:f3:d4:ed:7f:8d:f2:d0:6c:db:13:
d4:37:22:f0:e8:33:e8:66:47:63:bb:3c:6f:bd:fc:47:50:8b:
69:c0:55:00:fa:e3:1a:34:26:ac:0d:61:93:46:77:a2:e4:0d:
d8:a8:f4:51:eb:41:47:f9:71:fe:c0:41:e0:f1:56:e2:1e:57:
15:c5:f0:7c:0d:6e:8b:d9:4b:08:4d:0a:2c:78:5f:08:d3:35:
1e:d1:60:1d:c7:8e:a2:00:27:c8:66:b1:35:35:79:40:85:6d:
27:47:f2:92:b6:e6:e9:ed:ae:bf:21:ec:6a:df:c5:e0:ad:b1:
1b:fb:a6:de:6a:a1:9a:f8:7a:d4:0d:d2:f1:63:89:f1:66:ab:
d1:a7:b5:e0:5a:94:01:d3:85:2c:4c:8a:2d:8c:5d:64:30:46:
b0:f2:21:c9:87:36:07:82:01:e6:6c:bc:1c:e4:83:41:e3:94:
d3:ee:f0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org