Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/C7448E5A74C511ED85E0ED7DC4F9AE02.roa
File: C7448E5A74C511ED85E0ED7DC4F9AE02.roa (raw, json)
Hash identifier: uRSZIMyjb3u9FB5DXpMkAu2QtDEme9D2FnKFb0inros=
Subject key identifier: E9:6D:D0:81:68:75:18:8E:67:9D:F7:9D:97:24:48:3C:85:92:B8:72
Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial: 7D
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/C7448E5A74C511ED85E0ED7DC4F9AE02.roa
Signing time: Mon 05 Dec 2022 17:53:52 +0000
ROA not before: Mon 05 Dec 2022 17:53:52 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 150168
IP address blocks: 103.193.10.0/23 maxlen: 23
103.193.10.0/24 maxlen: 24
103.193.11.0/24 maxlen: 24
2001:df1:2c40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Validity
Not Before: Dec 5 17:53:52 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=638e3030-3f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:04:c4:9f:85:15:81:86:3d:fd:ed:56:cb:
59:55:aa:2f:e6:15:a9:d3:13:13:4c:b3:ac:e5:0b:
49:51:69:40:48:9a:2a:b4:b5:8b:df:71:ac:8e:da:
08:d1:db:96:05:44:83:c1:19:c5:9e:49:0e:0f:28:
bf:88:ae:c1:d0:d7:c4:45:9e:0f:f2:57:bf:7e:b4:
69:6b:da:33:6f:72:b2:d7:b3:6c:8d:ef:65:43:93:
66:e5:8a:d8:e3:ff:3f:32:7d:69:55:ef:2b:6b:cb:
d7:4a:e0:47:51:21:a3:e1:15:7d:f3:a5:f3:42:85:
76:11:d1:20:9a:dc:e9:d5:c3:d9:0a:99:50:2f:d1:
fd:99:b3:fb:7f:e0:c9:27:f8:53:cf:e5:20:c3:ff:
87:13:76:08:77:e9:fa:4a:fe:94:83:a0:59:ec:ae:
76:89:79:b7:8b:a7:41:58:a3:ec:9d:7a:a1:11:8a:
79:36:09:12:05:49:82:1a:8f:e3:02:87:88:f9:63:
42:9d:dd:99:77:c3:e5:f6:13:10:43:09:7d:45:b2:
65:0b:2b:07:ff:cc:61:ec:26:04:62:7e:dc:d9:a5:
9c:31:4d:4a:09:ce:bc:4e:69:e1:19:ca:68:ed:34:
0a:d0:2d:20:ff:1e:44:a0:91:8c:85:16:02:41:d6:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:D0:81:68:75:18:8E:67:9D:F7:9D:97:24:48:3C:85:92:B8:72
X509v3 Authority Key Identifier:
keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/C7448E5A74C511ED85E0ED7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.193.10.0/23
IPv6:
2001:df1:2c40::/48
Signature Algorithm: sha256WithRSAEncryption
84:b4:5d:30:87:b0:92:9d:79:20:38:4b:44:91:96:f0:c4:73:
02:d4:d8:0f:70:61:4d:6a:99:50:c3:d1:31:9a:82:0a:bd:d8:
0d:09:fa:f4:38:10:d5:14:ff:aa:54:ee:5e:4e:99:ae:91:5f:
51:86:21:12:8a:84:d9:35:b2:62:d3:d3:d9:53:b3:32:e7:16:
59:5e:6b:81:c5:0b:3f:b5:42:e5:70:f0:67:1f:89:cd:37:9f:
02:42:95:7c:24:95:df:dc:f7:d6:d4:07:5b:f2:e3:5d:a5:fd:
01:85:e5:c5:24:78:97:56:dd:71:f4:b2:d2:d0:73:0c:9c:0f:
01:24:57:44:29:9b:48:d6:51:0a:3d:f8:33:c7:bf:14:b4:28:
5e:10:ef:cd:bf:68:c6:61:e2:a5:1c:9b:6b:4b:24:71:0e:7a:
0e:3f:a8:3b:1d:b6:e3:f8:1d:46:c7:a7:bf:e4:f0:a8:8b:36:
b8:f4:72:c1:38:d0:6d:85:31:37:e3:41:aa:26:19:a7:46:e0:
62:57:b3:4c:c6:f8:e9:93:b8:fb:5d:03:9d:9f:7b:17:02:1d:
51:1d:37:7d:b9:63:30:01:f2:7f:13:48:a5:b6:6a:b5:4e:64:
8a:37:d7:62:24:a9:d5:4d:d2:d4:0a:66:13:57:9e:63:ed:eb:
52:f4:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org