Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/57BE692C009111EEB4A39C0EC4F9AE02.roa
File: 57BE692C009111EEB4A39C0EC4F9AE02.roa (raw, json)
Hash identifier: DTxr07FePbfaJjyGNcNAYnW4vMQ7bjpkK7M+So+GTT0=
Subject key identifier: AD:F8:B8:DA:CD:82:A2:F4:4A:82:F4:22:9F:CA:E3:8E:2A:9C:52:65
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 03EA
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/57BE692C009111EEB4A39C0EC4F9AE02.roa
Signing time: Thu 01 Jun 2023 15:31:14 +0000
ROA not before: Thu 01 Jun 2023 15:31:14 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 398465
IP address blocks: 103.240.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002 (0x3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Jun 1 15:31:14 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6478b9c2-135a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:e5:b4:09:91:bf:bf:81:2c:68:ff:63:7c:
d6:18:1e:13:e7:bc:fc:09:35:29:df:76:b2:3e:a1:
25:2f:53:32:d9:f7:12:f3:df:ea:70:ef:f7:4b:a2:
f1:37:b8:7f:df:87:76:14:f9:d4:9e:09:e7:69:21:
be:40:4a:8b:4e:e4:44:87:4f:96:60:ce:a7:8b:6f:
2f:d9:26:49:ce:a0:2c:e8:15:5a:82:99:1b:d5:f3:
01:c8:2b:93:6a:b4:9e:a9:22:3c:c3:15:bf:ee:88:
d9:bb:41:0e:89:1c:a2:df:45:45:25:74:0b:fc:c4:
4f:cb:79:0d:0c:02:9d:ea:38:c6:4a:9d:14:ad:58:
c4:5d:b0:94:c0:97:28:cb:0b:5d:ad:43:87:3d:6c:
b7:d3:bb:51:c9:92:f1:c7:2b:96:86:09:75:0c:b2:
d0:2c:2f:15:0b:cf:86:37:6a:f4:3c:4c:39:5d:6e:
3a:2b:0d:e2:4f:75:92:1e:f1:83:f1:c5:ff:b6:c1:
bb:26:cd:e7:ec:a6:5b:2f:71:37:0c:c9:7a:82:9e:
8c:3e:55:ef:ff:bd:64:5b:e3:09:41:53:b6:08:49:
cb:be:25:a6:f3:9a:06:9a:85:55:4b:47:e3:08:4e:
42:8d:d0:c3:b1:c9:86:66:1d:6e:6f:55:d0:49:98:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:B8:DA:CD:82:A2:F4:4A:82:F4:22:9F:CA:E3:8E:2A:9C:52:65
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/57BE692C009111EEB4A39C0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.198.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3f:ea:3a:8d:b4:81:17:4e:d3:2f:0e:e1:08:c9:d7:2d:53:
3f:6b:12:47:bf:ce:d5:8f:7b:28:1d:83:ef:9c:03:b9:80:f6:
0c:9c:c4:3e:ca:6c:94:e3:0d:49:dc:7b:ea:21:73:0b:29:e5:
c3:9d:c1:80:8f:3f:63:3d:06:68:55:f4:4b:6c:0b:aa:79:04:
b4:e3:e0:e9:0a:ad:1f:0f:e0:54:b4:74:90:28:15:eb:2c:4a:
de:b6:4a:1a:73:85:7e:3a:2e:d0:11:11:24:eb:39:78:4c:56:
b1:43:35:19:2a:fc:26:2e:b8:e9:df:b0:b2:d5:1f:ba:c0:7e:
e3:f9:d1:1d:72:45:da:0d:e4:cc:98:2a:3a:d2:57:31:ec:42:
82:7d:5f:ed:7c:b8:8d:22:c1:3d:7d:2d:87:70:df:56:f6:52:
9d:b7:0e:f5:0a:c7:5c:e8:d3:9b:24:63:70:8e:f2:8e:5a:a3:
25:88:2f:f6:c9:aa:ea:c5:05:ac:6c:c4:f1:9e:99:e3:92:10:
96:e6:67:fb:31:b0:29:ac:cd:3d:29:86:ba:15:0f:9b:aa:5e:
22:72:c2:2f:1c:17:98:ab:72:cf:61:0b:bb:c5:bf:0f:b7:3e:
7d:d4:4e:85:f3:8f:ec:d9:00:eb:72:fc:25:4b:56:6f:24:16:
e0:a0:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org