Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/F023F1B236DA11EE88D11B62C4F9AE02.roa
File: F023F1B236DA11EE88D11B62C4F9AE02.roa (raw, json)
Hash identifier: gOUGFINWGVYhpHDoFrZdqNQ/hEpeQgmeOSbF5PGn5kE=
Subject key identifier: A3:F1:C6:A9:CB:B7:25:04:57:1F:71:C2:66:5E:3F:6E:6E:E9:B6:C1
Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial: AD
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/F023F1B236DA11EE88D11B62C4F9AE02.roa
Signing time: Wed 09 Aug 2023 17:34:05 +0000
ROA not before: Wed 09 Aug 2023 17:34:05 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 136027
IP address blocks: 103.13.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Validity
Not Before: Aug 9 17:34:05 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64d3ce0d-5ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:2f:d6:f9:57:0f:1d:04:41:2c:6d:47:33:
84:fe:45:df:5f:90:cf:af:02:8b:40:7a:28:cc:12:
5f:7a:32:a4:f0:f9:ef:7b:ef:f9:cb:ab:15:c7:aa:
b6:2a:f6:67:aa:12:09:d1:b7:c8:4e:15:5a:a4:73:
9e:65:cd:5f:eb:c0:af:b3:14:d0:b2:53:aa:7c:7c:
a4:d0:af:00:ee:a2:22:68:33:77:4a:03:9a:01:ac:
78:b9:05:81:6d:27:b7:c0:ba:40:3a:1e:c0:3e:e9:
95:91:48:a2:a9:6f:4f:da:ca:e2:69:e9:10:05:24:
17:3e:37:8c:b7:cb:7c:a1:15:25:91:61:85:61:77:
ed:13:86:2c:3e:de:33:44:a2:71:f3:ab:fa:22:45:
e9:cd:24:26:63:08:d3:a9:2b:d6:a3:33:9c:1d:ca:
8d:0b:a6:15:39:c5:dc:24:a0:dc:d3:b3:a0:53:51:
ae:18:bb:7c:5d:1b:02:de:92:10:47:1b:3a:ef:16:
81:c5:a5:0e:c1:37:93:e8:ca:7d:32:1b:38:e1:f1:
d6:bd:1c:6e:a6:95:da:b0:b2:18:b4:6e:46:df:10:
32:d7:6f:61:9b:43:ff:2a:ec:84:8f:66:3c:3f:82:
44:dc:3b:a2:28:07:f9:0d:63:34:ca:bb:63:29:59:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:C6:A9:CB:B7:25:04:57:1F:71:C2:66:5E:3F:6E:6E:E9:B6:C1
X509v3 Authority Key Identifier:
keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/F023F1B236DA11EE88D11B62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.192.0/24
Signature Algorithm: sha256WithRSAEncryption
48:24:76:44:68:29:57:8f:99:6c:61:d6:af:fe:a7:b1:cd:18:
98:ad:b9:7b:03:ab:77:e9:2c:be:80:c0:4b:9c:62:c4:09:51:
81:4f:2c:df:14:70:c8:cd:8d:c6:2b:d5:95:ca:de:4b:35:f2:
27:3c:94:23:ea:2c:ac:9f:7f:a9:e6:8c:26:79:87:15:40:1b:
c4:0f:72:ca:7f:ef:33:d2:8c:5f:24:f9:e3:82:66:4c:bb:32:
c1:a7:fb:0d:7b:ea:c9:20:0b:e7:a8:57:e8:61:32:7e:b6:0d:
21:0b:a5:2f:b5:31:09:ad:5f:57:ba:0c:3d:00:22:cb:55:f8:
1d:45:8a:11:ad:23:9b:73:94:29:3a:98:3c:84:f9:62:84:f9:
8f:41:a3:a3:54:5e:8f:45:42:14:58:2b:e4:5e:d0:45:7a:a3:
83:26:53:d3:b3:77:58:d1:25:ac:7c:cf:15:c8:02:34:ae:a5:
2c:ae:c7:0b:48:ac:5a:07:9b:c9:7c:00:87:aa:f4:e9:bc:58:
be:03:18:07:e8:8e:16:0e:0f:59:f6:f1:b6:37:a5:f4:c0:a1:
6c:de:74:52:c6:17:4f:08:98:b8:e0:88:8c:b2:13:b2:00:69:
24:eb:1d:b5:d9:ba:30:37:f5:7b:14:1d:2d:4b:67:f8:9d:a9:
51:2a:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org