Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/9106AB34973911EDB1E3C460C4F9AE02.roa
File: 9106AB34973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier: GNZ3KuSzZ9epL6GbWpy2mMATFth9mPb6ucN9PD5HXU0=
Subject key identifier: ED:1B:21:9F:A5:4E:7F:35:91:56:54:B6:65:29:D4:60:C5:38:4D:27
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 23AB
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/9106AB34973911EDB1E3C460C4F9AE02.roa
Signing time: Wed 18 Jan 2023 14:08:22 +0000
ROA not before: Wed 18 Jan 2023 14:08:22 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 65507
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9131 (0x23ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Jan 18 14:08:22 2023 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=63c7fd56-71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:73:30:3b:59:08:b7:4c:38:cc:a9:7b:90:
bd:16:fc:27:a3:71:6d:cb:72:35:7d:7a:9f:54:f4:
1f:e3:0d:84:93:68:71:35:b3:a5:68:53:7a:43:47:
0d:31:8f:4d:8f:1a:c0:1b:3a:e9:13:5e:13:4c:f3:
3a:4e:8b:88:90:0d:da:65:6a:e2:9b:b8:ea:c6:d6:
7b:43:c1:53:f8:db:2c:91:5f:40:b4:b8:7d:a3:ad:
d5:44:36:f0:c9:89:4e:b9:d2:6d:31:54:f0:e8:4b:
8d:2e:9b:48:09:21:09:18:11:10:4b:1c:cd:f7:26:
12:9a:94:50:57:d5:d4:e6:5a:16:da:03:41:06:0e:
8e:6d:49:cd:6b:db:18:29:44:e5:88:67:64:0f:ee:
f1:47:95:ec:43:6f:5f:19:88:64:e7:ec:8e:21:a7:
23:e7:fc:cb:ef:dd:99:b1:6e:56:99:27:6a:f5:34:
a7:2f:75:ce:38:25:6d:f3:80:8c:06:87:a1:c9:77:
37:e4:31:0b:41:03:e9:9c:2d:df:7e:33:6b:16:f5:
e0:00:79:60:31:d2:db:7d:59:fe:35:dd:4a:1e:e8:
ea:ec:eb:1b:6e:12:38:e7:ce:ef:33:6d:e1:18:19:
e4:95:61:56:d1:08:a6:79:79:e1:1d:58:3d:6b:b2:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:21:9F:A5:4E:7F:35:91:56:54:B6:65:29:D4:60:C5:38:4D:27
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/9106AB34973911EDB1E3C460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b3:f7:b7:9c:75:f5:1a:ef:0e:05:5c:c0:a2:59:5b:d2:1f:
b5:fd:b0:30:5d:38:52:b2:34:7e:38:5c:5e:92:58:72:ca:5b:
0d:1c:56:ba:9c:81:59:4e:b4:50:47:e7:da:4b:50:81:ae:d6:
47:41:07:5b:9e:8b:59:9f:fa:e9:94:60:f7:cd:8d:04:90:45:
f1:b7:f3:be:7d:fc:da:c3:78:0e:73:3d:4a:96:bc:2a:40:b4:
37:74:7f:92:1d:ba:24:b7:d6:21:bd:69:d6:45:81:7f:13:36:
92:f7:2f:c2:87:bc:9f:0f:4b:02:60:71:fd:54:20:01:a4:da:
e7:d7:e1:4d:62:3e:ec:99:93:41:6f:d5:06:9b:86:c0:47:cb:
06:b4:09:95:59:a0:6c:0d:c5:b5:e1:b9:11:7c:d3:c9:a6:72:
4f:1c:1e:ce:40:7e:e2:e4:ce:ab:e6:d0:73:45:33:ff:0b:5d:
4a:95:59:b7:02:d2:a7:15:c7:67:02:9b:b0:ff:26:a7:d4:a5:
21:e6:ab:0c:be:22:85:b8:e7:73:be:77:18:5e:d1:99:e0:a1:
9b:0a:28:3e:3a:ae:f5:aa:f1:04:0a:33:2e:e3:de:37:0d:21:
80:2b:ee:bc:47:68:ed:99:08:56:7e:7b:16:54:22:ac:ac:0e:
54:65:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org