Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/A0052342B4D911ECAEBA306DC4F9AE02.roa
File: A0052342B4D911ECAEBA306DC4F9AE02.roa (raw, json)
Hash identifier: l/X4kZ4JXizhcbFY2+n73oScN+CTpmDCQ0JUj68582I=
Subject key identifier: C6:17:B1:16:99:F8:B4:D3:40:28:9B:BE:F5:DB:CC:34:69:D9:9D:DF
Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial: 02C0
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/A0052342B4D911ECAEBA306DC4F9AE02.roa
Signing time: Tue 05 Apr 2022 12:12:13 +0000
ROA not before: Tue 05 Apr 2022 12:12:13 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 17557
IP address blocks: 103.166.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Validity
Not Before: Apr 5 12:12:13 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=624c321d-3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:52:20:31:c2:82:41:89:8e:04:11:83:b2:
3a:83:03:c0:2b:9b:f0:63:53:34:14:4e:48:d7:8a:
93:30:c7:2a:8f:aa:10:f0:1b:96:b0:22:1b:64:aa:
41:ee:a0:3c:4c:e9:c4:3b:4b:ed:bc:85:95:8c:22:
76:ea:5d:f9:29:e3:f0:36:14:bf:a2:e8:df:ec:bf:
58:d4:28:10:fc:28:c9:30:3d:fa:50:d9:05:5b:f8:
63:7f:a5:7a:85:87:7c:ab:46:70:a1:64:de:1f:20:
49:1d:8e:22:51:e9:8a:cd:76:59:a9:dd:88:07:27:
d5:6c:0f:42:db:34:45:56:f8:37:e1:49:a7:6e:d6:
56:82:14:eb:50:ea:02:05:c4:37:85:0e:3c:72:5a:
73:0a:cb:07:7e:77:3e:33:f4:e6:45:08:1d:40:b3:
76:df:cc:27:48:ca:b9:d7:6d:01:8f:c0:01:67:55:
bb:78:19:cf:4b:3a:4b:f2:42:fd:ba:f6:8a:56:d7:
57:b1:bc:f0:1d:40:a4:c4:09:90:76:9b:d8:72:00:
c0:78:67:b4:07:7e:06:fc:81:83:3d:c3:ca:c1:96:
e0:5b:9a:5d:ba:07:04:c8:46:43:93:48:29:46:57:
ac:2b:fa:ea:80:f6:f3:58:22:8f:ea:4a:8a:9a:c1:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:B1:16:99:F8:B4:D3:40:28:9B:BE:F5:DB:CC:34:69:D9:9D:DF
X509v3 Authority Key Identifier:
keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/A0052342B4D911ECAEBA306DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.103.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6a:81:6d:61:85:03:20:05:e8:70:74:3a:c0:64:e6:ed:8b:
0d:c5:0e:2d:6e:bb:1d:93:6e:3a:96:cf:1a:a9:c5:43:de:cc:
71:e6:1b:4b:c4:14:c2:6a:63:a6:2d:d9:e7:e2:bb:92:68:ec:
fb:4e:5d:cc:27:ea:72:d9:2d:30:00:7e:c5:8a:3e:4f:76:9f:
02:0f:74:ec:94:77:71:28:a7:ea:8f:d3:9c:81:cb:21:f2:2d:
4b:c4:f4:ce:30:46:64:d9:a9:31:2e:ae:9a:68:6f:61:af:af:
b5:37:96:de:89:d7:58:a2:79:29:a2:74:fc:2f:27:91:19:b9:
9d:8f:20:43:47:01:79:54:bd:0a:90:49:a7:80:44:5e:61:88:
53:b8:fc:ae:1b:a3:23:12:8f:85:d2:23:72:76:b5:11:c7:5c:
d0:4a:f0:cd:b9:53:a7:5d:28:0e:be:d8:f8:98:2e:e1:90:ff:
b8:2d:9c:93:f2:f1:10:19:32:5c:d8:73:ef:0a:a5:00:66:1c:
0b:d3:fd:01:1d:f3:6e:1c:a9:3f:14:90:52:60:4d:12:49:8a:
32:c1:82:18:3f:39:92:7d:ea:ca:4f:f5:5d:ea:83:f4:57:bc:
4b:38:8c:06:2b:28:9d:73:07:bd:11:42:7b:1a:f9:c0:63:75:
c8:04:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org