Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2C614ECE20A911EEBEC77485C4F9AE02.roa
File: 2C614ECE20A911EEBEC77485C4F9AE02.roa (raw, json)
Hash identifier: vN+0vU7+eZcSNS8zKCUsCGGi7/eF2B32P63j36ENKAs=
Subject key identifier: 2F:58:50:98:88:37:F8:6E:BE:1B:F4:AA:70:43:F6:4B:19:3A:F3:AC
Certificate issuer: /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Certificate serial: 0249
Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2C614ECE20A911EEBEC77485C4F9AE02.roa
Signing time: Wed 12 Jul 2023 11:42:26 +0000
ROA not before: Wed 12 Jul 2023 11:42:26 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 139248
IP address blocks: 103.182.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Validity
Not Before: Jul 12 11:42:26 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64ae91a2-a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:3a:46:49:75:f4:a9:b6:0b:b6:fa:52:81:
8a:14:1d:58:05:de:fd:6f:f5:14:57:25:90:63:1a:
15:26:d6:76:20:78:25:e1:26:24:b1:7a:77:20:3f:
ef:4b:74:96:42:11:9a:48:09:97:ff:b5:9a:14:78:
95:53:8a:0f:1b:4c:1f:ad:5f:9e:41:90:d3:f2:68:
8c:58:fb:e0:33:17:bc:82:63:96:5f:31:fc:ca:2c:
fd:f4:86:1f:63:39:a9:fe:19:da:c8:d8:1f:dd:d7:
84:51:c1:5a:3d:a1:1f:38:35:2d:16:53:fd:c5:32:
ad:ac:4f:a6:71:29:62:41:7b:ea:94:c5:82:1e:87:
fa:63:89:3e:12:02:3b:69:71:bd:4c:97:f7:27:45:
4f:48:ba:18:31:00:01:71:ec:08:a2:d6:c0:61:eb:
29:84:d4:5d:37:84:5f:9b:71:d2:8d:c3:d3:bc:30:
49:03:89:90:94:2b:a5:28:a5:fd:7b:d0:36:ac:f9:
c4:e6:7d:90:33:e0:18:e1:95:aa:18:78:7c:a3:4d:
a1:f4:25:ec:88:ff:bf:e2:0b:57:01:25:4d:69:b4:
b2:08:24:c8:ce:ff:13:0d:77:60:f5:24:cf:2a:a8:
32:5a:20:83:f4:e4:62:b7:95:38:43:09:9a:60:43:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:50:98:88:37:F8:6E:BE:1B:F4:AA:70:43:F6:4B:19:3A:F3:AC
X509v3 Authority Key Identifier:
keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2C614ECE20A911EEBEC77485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.247.0/24
Signature Algorithm: sha256WithRSAEncryption
69:17:11:6f:0d:16:90:e4:5a:d1:a4:f6:4b:5a:83:a8:0b:c2:
7a:02:b2:24:86:60:5e:3e:54:5f:48:cf:03:bc:5c:d4:5d:9f:
2d:4a:5e:ee:09:81:94:31:9c:e5:7a:c5:63:b0:33:03:61:18:
88:bb:93:18:13:e2:f7:a9:71:5b:54:e7:76:8a:4d:c9:f1:e9:
b4:b9:e1:79:3b:ef:83:21:83:de:c2:24:82:49:f3:f3:08:6d:
bb:02:28:f7:e6:53:46:9b:2d:51:b3:87:78:27:fc:d8:69:e9:
db:ef:11:e0:e5:58:11:8e:f9:01:53:dd:7e:02:b5:a7:11:af:
63:2c:45:a2:78:ab:3d:33:a9:47:60:7e:af:f3:c1:76:85:ae:
ec:38:76:23:a0:2f:4c:38:e9:84:73:51:a0:2a:ff:d4:81:e1:
90:38:dc:03:02:c1:16:11:31:2b:88:85:75:36:49:6c:d9:95:
b6:71:97:6e:d8:53:5c:28:62:d0:c1:fe:ee:6f:6b:a6:5a:89:
dc:5f:3c:70:cd:a3:7a:b8:36:9f:e8:49:d7:4a:36:ad:b4:14:
eb:d3:6e:9d:4d:4d:a6:46:c7:78:65:20:15:cf:11:79:06:76:
b2:46:6c:26:3a:a1:33:bd:93:f2:58:e1:eb:d1:4f:2c:b5:e6:
7a:c4:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org