Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/6DA62B9CD2D011EDA8B71E23C4F9AE02.roa
File: 6DA62B9CD2D011EDA8B71E23C4F9AE02.roa (raw, json)
Hash identifier: 1/1jOZxMsPAq9IA9L8dquwVAXAVn/04Q9aOmQud3GIU=
Subject key identifier: F1:A6:C6:62:55:F4:FC:EE:A4:3D:90:BB:A7:1F:9D:DA:D9:64:13:4B
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 02
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/6DA62B9CD2D011EDA8B71E23C4F9AE02.roa
Signing time: Tue 04 Apr 2023 10:06:55 +0000
ROA not before: Tue 04 Apr 2023 10:06:55 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 134475
IP address blocks: 103.94.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Apr 4 10:06:55 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=642bf6bf-61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:30:0e:b7:8e:19:26:20:3a:92:f7:aa:e1:
47:94:69:25:21:b5:ec:26:c4:0a:a0:73:c1:32:41:
2c:b6:79:ca:54:ad:dd:7c:11:76:e9:88:d0:8c:0d:
9d:8e:ed:c4:1e:04:8b:a9:d4:06:55:df:ce:80:4a:
39:79:bc:0c:bf:73:d1:37:b6:37:d9:61:f3:87:f9:
08:a8:89:a8:0c:42:70:7d:01:71:fd:3a:b4:3b:4e:
43:d4:c2:71:fe:1b:ab:40:a8:14:a0:59:9f:7f:8d:
a9:d4:2b:b2:40:83:14:f5:0b:fc:e1:68:7d:74:17:
50:e0:ee:f1:61:7c:50:5f:cf:08:a0:cc:d5:9d:bd:
fb:22:dc:76:76:3f:f2:8a:f9:c8:f1:7d:e9:dc:98:
27:b9:ec:40:56:05:60:59:c4:7c:4d:78:ed:de:f9:
2c:11:2b:dd:b8:cf:20:9e:f2:40:ec:eb:3b:71:57:
d2:42:b7:38:1d:2e:90:e2:8f:cf:8b:c2:ae:b7:ca:
71:1a:43:1a:7c:85:fe:8b:e1:23:66:02:8f:64:47:
a5:04:30:48:1c:e4:7a:6e:5a:10:db:36:11:6b:99:
c4:6d:78:c8:0f:81:74:f4:66:17:bb:58:ac:a7:49:
96:22:72:47:6e:6e:4e:f0:44:ba:f2:5f:9d:bc:47:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:C6:62:55:F4:FC:EE:A4:3D:90:BB:A7:1F:9D:DA:D9:64:13:4B
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/6DA62B9CD2D011EDA8B71E23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.234.0/24
Signature Algorithm: sha256WithRSAEncryption
32:01:0b:4a:fa:d4:8c:1b:83:b6:0a:95:cc:56:97:5c:3e:02:
bd:9d:2e:ee:55:94:11:f9:69:73:8f:5d:56:07:6a:4e:93:0c:
20:c6:c4:30:05:24:ec:dc:02:4c:10:3e:14:9e:9e:16:11:e6:
7c:9b:7c:5b:73:44:66:71:5b:78:98:c1:40:23:9d:72:41:8c:
fd:c2:ba:56:3e:62:98:4a:cd:3d:30:d5:e9:c9:c0:0f:d4:9c:
42:21:12:10:f9:94:02:ff:52:78:29:e6:5c:c3:6e:97:dd:4f:
b4:ef:e6:2e:f7:19:df:ba:f7:16:18:86:39:3c:2f:fd:82:c3:
c2:23:72:81:6d:9a:6a:c2:af:21:03:c3:db:8c:17:8d:e1:30:
48:31:9a:2a:64:6b:ed:4c:fc:91:cf:6c:5f:00:f7:45:32:fe:
48:9a:5b:57:78:79:b9:2f:87:43:16:2d:6b:82:54:b5:76:bc:
89:5b:8f:04:c1:54:82:88:99:8b:55:f8:03:c8:74:b1:af:91:
b1:2c:da:8a:6d:37:a8:e8:7d:60:f0:5f:f1:11:45:e9:12:02:
15:13:56:b5:8c:94:c9:19:b4:09:60:a9:b9:4f:36:a5:45:ee:
21:75:a3:b1:81:57:0e:b8:09:fb:b2:a4:8c:0f:d1:59:64:8f:
fa:c7:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org