Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/905025D8E74511EDA8642777C4F9AE02.roa
File: 905025D8E74511EDA8642777C4F9AE02.roa (raw, json)
Hash identifier: JJSVUFRbW6ijDXX5K5rnQSGiRTMJ8oOezQBiwun5ejs=
Subject key identifier: 37:06:17:31:6C:DB:B3:03:65:21:90:64:46:31:42:B1:47:4C:6C:63
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 0E30
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/905025D8E74511EDA8642777C4F9AE02.roa
Signing time: Sun 30 Apr 2023 10:55:48 +0000
ROA not before: Sun 30 Apr 2023 10:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138981
IP address blocks: 103.138.24.0/22 maxlen: 22
103.138.24.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3632 (0xe30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Apr 30 10:55:48 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644e4934-eac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:9b:12:cf:fe:7a:50:bf:c4:52:6d:7a:82:
3a:b0:fd:52:bf:8b:8c:cd:b9:a8:a0:57:9e:3f:6c:
cf:52:0b:6d:41:a0:eb:e4:77:15:fc:e5:2a:ff:0a:
83:ec:73:4f:c2:60:18:1b:1b:8b:7d:ef:3e:42:c0:
ec:fd:1e:ec:0b:17:fe:45:90:92:05:7b:6c:c3:3f:
f4:f0:51:02:38:79:3b:b0:f0:81:20:ac:7e:bc:5d:
3c:b2:c4:b0:d7:24:19:97:b7:05:c8:db:50:6f:f7:
93:34:4d:3f:2e:01:3f:ec:fd:21:83:cb:e2:d2:46:
bf:9c:16:c9:e4:cd:f8:8f:73:c0:1c:0e:9e:db:7b:
fb:60:e8:8e:f9:78:98:5f:00:8a:f2:b1:80:73:dd:
28:cc:ce:a0:b4:46:bc:5b:42:43:ac:57:04:01:10:
bf:04:5f:7d:00:81:17:87:81:92:34:f6:9e:dd:3c:
0f:9c:39:b1:42:41:8b:5d:41:b1:cb:bd:c0:84:af:
49:d6:3e:be:34:24:22:c9:c8:57:f8:d6:6d:78:86:
12:15:67:6f:77:c0:44:33:0f:81:72:f0:5d:c4:4a:
11:c4:40:1d:8f:04:34:1e:7d:13:87:b0:be:90:ba:
07:a5:d8:df:49:52:26:7e:94:b9:1e:23:70:8c:37:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:17:31:6C:DB:B3:03:65:21:90:64:46:31:42:B1:47:4C:6C:63
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/905025D8E74511EDA8642777C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:93:69:91:97:46:e7:15:4c:45:1b:48:a4:2c:3f:16:33:e5:
45:b8:71:e8:18:b8:16:d5:e1:91:16:65:4e:77:bf:e5:29:a8:
d7:42:43:83:ab:c7:6e:02:4f:80:65:a4:c9:4a:2b:9f:ff:cd:
ef:0e:db:e0:da:da:bb:36:8c:04:b3:75:80:7f:6b:a7:11:ad:
69:31:9e:6f:45:46:a8:75:11:a0:0a:f0:d0:61:6f:aa:83:c7:
94:28:27:39:a4:c8:d5:8c:1b:fe:cb:e1:bc:c7:b0:98:e4:1d:
01:cf:48:63:7f:a5:7d:e0:d4:4d:59:83:53:bd:5b:89:41:25:
b0:b5:c1:8d:2e:98:56:64:f3:52:f0:48:a8:d9:81:b0:07:08:
01:c6:26:1a:88:31:da:27:32:f6:f4:2d:2c:99:82:93:b1:b7:
d8:e0:9e:df:a3:ee:d9:3c:f7:ff:a8:c8:c9:d9:23:5a:2d:88:
e0:77:ce:fb:c9:09:ec:19:64:8a:62:1c:0c:6c:a1:47:79:de:
8a:84:76:e1:d5:87:1f:ad:9b:73:ed:62:06:96:fc:4f:0b:4a:
85:a1:41:7a:a3:3f:3a:7b:f5:f6:0d:29:00:4b:c4:07:d8:77:
38:8f:40:c1:37:ca:f5:1d:87:0e:4f:90:ee:52:eb:7b:4e:e8:
1f:77:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org