Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/127FB23C468711EC8CC2B882C4F9AE02.roa
File: 127FB23C468711EC8CC2B882C4F9AE02.roa (raw, json)
Hash identifier: Yuga9wlYYrvJJMWJII9i/chZ335hHXyNqCygwkVKSwM=
Subject key identifier: C3:A3:85:09:9A:51:06:22:77:23:52:35:81:51:07:48:4E:9A:42:BE
Certificate issuer: /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial: 12AF
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/127FB23C468711EC8CC2B882C4F9AE02.roa
Signing time: Thu 02 Dec 2021 17:53:49 +0000
ROA not before: Thu 02 Dec 2021 17:53:49 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 2914
IP address blocks: 103.104.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4783 (0x12af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Validity
Not Before: Dec 2 17:53:49 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a9082d-bdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:25:ce:5c:41:bb:ad:51:40:db:fe:13:77:
bc:ed:60:f3:8a:30:c0:e3:5b:10:5c:f2:5c:ab:a3:
59:78:17:ac:7d:d3:d7:5f:fe:62:d4:1e:bb:f8:96:
2b:15:34:75:b3:e4:1c:8a:54:82:36:c0:3f:fc:77:
be:cc:78:4d:4a:6f:0e:17:50:73:87:80:81:f6:1d:
29:a5:92:3f:a8:31:c0:3f:42:56:10:0a:2e:ee:53:
79:c8:52:6e:3f:a4:fb:e3:b0:f5:6b:5a:62:37:58:
34:0e:44:9f:19:d4:24:08:ce:1a:13:68:3c:5b:2c:
6b:9d:29:0a:60:b6:cd:42:92:c9:ed:70:84:02:c2:
79:3e:72:3c:a8:0d:43:00:fc:14:ff:d6:e6:ee:c1:
f3:2b:aa:11:60:55:a8:c4:39:e5:ef:64:10:ec:4e:
0d:a5:f0:c5:15:25:9d:bd:e3:a3:46:54:28:6b:27:
fb:56:e3:8d:a7:87:e9:2c:8e:d0:d8:89:6d:58:0c:
c9:d3:75:92:d9:51:5b:e3:76:39:b7:6d:cb:58:77:
37:34:14:ec:96:a9:c7:64:86:f7:13:3b:18:2a:c8:
fa:6f:4d:ea:56:67:21:f0:7e:af:02:7f:ae:95:6c:
b8:c7:ae:9d:74:9a:27:e2:d3:54:3c:74:1e:3a:bf:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:85:09:9A:51:06:22:77:23:52:35:81:51:07:48:4E:9A:42:BE
X509v3 Authority Key Identifier:
keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/127FB23C468711EC8CC2B882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.60.0/22
Signature Algorithm: sha256WithRSAEncryption
85:17:b0:4a:92:e3:65:3d:4f:46:0b:ce:db:77:e8:c6:dd:3b:
f9:81:d7:76:10:35:07:67:4c:e3:fd:b4:35:5e:0a:13:2e:48:
53:bf:45:6e:c0:31:b9:1b:2a:aa:11:35:e2:9e:31:c4:aa:b1:
9c:6a:75:8b:0c:05:1b:df:6e:0c:29:fe:b9:6a:6e:a3:e5:51:
31:18:03:90:36:9f:5f:a1:60:7b:9e:91:06:e4:d0:e3:bb:56:
bb:c7:53:4b:92:22:1e:ee:12:29:f0:3b:53:e9:b6:4b:de:07:
04:58:f3:62:7e:e9:18:bc:c4:20:f8:3e:2b:e3:36:38:bf:37:
e3:1c:53:6a:3c:86:43:84:cf:9a:19:eb:f7:3c:40:a5:1b:18:
47:0e:4c:1a:fd:bc:26:80:e6:e4:b1:a8:4b:f4:a6:19:8b:7f:
1a:61:11:4f:9c:40:da:f8:f1:fc:fd:58:8f:b0:a5:d2:c7:ef:
21:05:86:67:83:05:c0:01:2c:06:5d:d5:34:22:31:75:10:42:
d3:cd:af:41:4d:98:67:77:e6:ca:7f:1d:73:45:a3:cd:3b:5c:
78:54:96:97:87:f8:6d:88:47:b1:3f:c9:d4:a8:cd:6a:d4:70:
da:b4:2e:e4:b0:71:6a:c2:64:9a:e6:37:8b:13:a8:6a:ba:0c:
d9:a8:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org