Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/9F90B8DC9A3D11EDBD51E120C4F9AE02.roa
File: 9F90B8DC9A3D11EDBD51E120C4F9AE02.roa (raw, json)
Hash identifier: UgcnSNiQtDaKG9L0Oxen65bUxSI1ibw8SFk34FPz+L8=
Subject key identifier: 50:9A:46:8A:A6:BC:BC:BE:B0:2F:F6:47:FB:00:D1:AE:B9:B3:BC:76
Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial: 02
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/9F90B8DC9A3D11EDBD51E120C4F9AE02.roa
Signing time: Sun 22 Jan 2023 10:14:58 +0000
ROA not before: Sun 22 Jan 2023 10:14:58 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 137449
IP address blocks: 103.72.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Validity
Not Before: Jan 22 10:14:58 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63cd0ca2-b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:01:09:48:64:a2:e7:e5:35:fc:6c:55:df:
12:4c:42:bd:22:98:e0:aa:db:85:cc:ef:b6:cb:53:
4f:e1:c3:3e:81:3f:c4:ee:35:90:95:59:45:28:3e:
ff:22:9b:a8:52:ea:6e:bf:03:92:13:56:ec:17:d2:
16:ba:50:c2:bb:75:3d:db:91:7d:9d:81:28:e4:12:
99:a1:a9:ff:c7:7d:33:a2:a6:3b:4e:68:82:82:d2:
6b:8f:6c:b6:bf:92:84:16:b9:6c:89:ca:a3:ed:1e:
6b:e4:0e:d3:12:d8:55:49:d3:01:f5:03:3f:ab:3b:
b9:a9:8a:77:e9:16:69:ef:12:2b:21:ec:ab:23:13:
df:fb:f0:45:54:8e:d6:56:38:58:ac:b3:84:58:99:
9e:2f:43:42:30:62:81:e3:6a:61:13:0b:d0:fe:3b:
9f:ad:61:e4:3e:24:9d:1d:af:9f:4b:78:d8:6d:c8:
de:30:56:50:69:4b:58:ed:7d:4c:5f:a8:d0:65:0e:
ac:3a:ea:4c:88:4c:17:8f:31:33:80:9a:a3:f8:a9:
eb:48:2b:ab:0d:96:a5:5b:be:cc:be:55:a1:57:35:
5d:d2:f4:6b:25:26:8e:8d:03:f4:10:76:cc:cc:b8:
10:0d:72:04:9c:9e:1a:cf:6f:72:8b:d0:7b:6b:db:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:46:8A:A6:BC:BC:BE:B0:2F:F6:47:FB:00:D1:AE:B9:B3:BC:76
X509v3 Authority Key Identifier:
keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/9F90B8DC9A3D11EDBD51E120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.198.0/24
Signature Algorithm: sha256WithRSAEncryption
21:11:9f:db:5c:b0:f3:25:5b:a2:d7:65:bd:96:0a:7e:54:91:
84:b7:4f:de:99:4b:e2:ff:87:28:39:74:a7:3e:e5:14:dc:7f:
07:2c:56:7d:d3:be:5c:41:03:35:15:cd:b1:eb:e5:5a:a3:16:
04:6b:a6:db:4e:db:80:37:6b:6f:bd:b3:3c:df:3e:ba:e9:d7:
6d:21:8e:b1:8f:85:7b:82:39:60:c3:4b:ce:ce:c4:b8:21:28:
c7:74:10:17:e7:d9:e7:70:8e:3c:07:4c:9b:4a:8e:1f:72:ac:
18:03:1c:bb:d6:d3:d7:3a:7c:12:c9:56:92:b0:20:90:c1:49:
ad:19:a4:43:5a:75:a8:96:95:2c:50:10:92:b6:99:21:f8:f6:
18:97:7f:84:75:b9:c8:be:48:df:44:10:2a:e2:fd:6e:58:61:
11:53:7a:1e:5e:2e:7f:49:ab:b3:14:02:23:97:4b:33:28:eb:
e0:83:45:fb:87:15:e7:d7:7b:b1:cb:ef:87:cc:95:a8:86:a5:
8e:6a:89:98:2a:db:5a:6b:77:02:9e:1a:68:dc:c8:26:7a:16:
ff:03:18:95:d1:92:f4:ef:50:0f:f1:d3:12:a8:e9:fe:e9:9b:
26:6d:bd:6c:84:f9:59:9a:83:b3:39:8d:a2:dd:aa:95:f8:a8:
18:a4:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org