Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/414EC00CF94C11EDBB552547C4F9AE02.roa
File: 414EC00CF94C11EDBB552547C4F9AE02.roa (raw, json)
Hash identifier: NHIfzI7z/F/g9F9NWs1UW1EWyjjEMJm3NSbkuaduZl8=
Subject key identifier: 0E:02:A8:29:A4:C3:10:7F:48:94:FB:33:8C:51:4F:5A:88:32:75:34
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 36
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/414EC00CF94C11EDBB552547C4F9AE02.roa
Signing time: Tue 23 May 2023 09:29:03 +0000
ROA not before: Tue 23 May 2023 09:29:03 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 135124
IP address blocks: 103.81.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: May 23 09:29:03 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=646c875f-2269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:50:97:26:82:30:f2:12:3b:ea:23:84:55:
09:2f:fb:f5:1f:bd:ee:70:eb:7f:d2:2c:37:23:83:
98:8e:79:34:4b:06:96:ed:5b:78:43:04:60:d8:c7:
29:80:45:e1:f6:67:3e:07:1e:fc:dd:d6:6b:84:25:
4c:a4:da:b5:12:fd:a2:b9:25:ec:a6:61:9b:c0:14:
78:7a:3d:b5:da:07:9c:79:38:b7:57:a6:3b:15:2b:
d2:e5:a6:b0:3b:b5:72:2b:09:4f:f9:f7:8f:37:4f:
c9:23:b0:14:3d:83:6c:ff:d5:a8:2e:d0:2f:b1:dd:
e9:77:20:f5:86:b5:b5:a2:9f:93:07:ce:80:b2:d5:
5b:a2:96:24:64:3c:71:d5:7f:a9:b2:d6:c4:01:7b:
01:a0:37:0e:0f:59:4b:ac:0c:c6:84:c6:83:19:6b:
86:a9:90:9e:f6:58:48:31:60:62:94:f2:a6:0c:b4:
f9:e8:29:5a:72:ae:50:26:e3:0f:b8:f6:6f:e1:6e:
f9:93:80:61:c4:17:4e:fc:9c:5b:ee:97:2a:18:00:
21:77:bb:8d:7a:dc:ad:35:ef:38:f4:1b:31:5f:8a:
3d:0b:94:52:c9:4c:60:78:4b:ec:42:2a:30:e5:db:
9c:00:0b:39:59:37:d6:14:f9:93:60:88:7a:43:3f:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:A8:29:A4:C3:10:7F:48:94:FB:33:8C:51:4F:5A:88:32:75:34
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/414EC00CF94C11EDBB552547C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:50:5d:17:57:42:03:ad:8d:91:10:39:e4:e5:21:cb:5a:fd:
e6:6f:a7:6c:f5:36:1d:0b:56:7f:c6:c5:93:7a:7f:c2:8b:40:
d8:79:8a:17:df:89:6f:b2:94:8f:3f:75:9e:d8:82:76:5d:2d:
0d:12:95:f4:4e:eb:47:d1:95:4d:f4:6f:86:31:e2:0c:39:8f:
13:34:08:f3:65:7c:16:8c:67:a0:c6:8c:83:58:88:ed:1f:1a:
6e:05:a9:a8:04:b0:dc:15:e1:05:43:8c:e8:8b:6e:c0:e3:0a:
1c:a0:7a:a3:16:21:ca:68:19:ac:f6:05:ff:b0:8b:a3:fe:81:
76:35:51:8a:8e:32:ba:3f:6a:fe:e9:fc:8f:3a:9c:3c:e5:37:
a4:50:b9:ad:61:94:fd:ca:2f:74:f0:9f:94:07:be:96:ee:09:
c4:20:45:9d:16:44:61:f3:da:6c:56:5b:e6:93:90:85:fe:f2:
19:62:01:ab:5c:26:c2:33:3f:f0:16:26:28:0a:c2:fa:cd:e7:
3a:03:55:e8:de:67:99:de:6a:e2:8e:4f:65:8a:78:3a:60:2f:
35:78:29:57:93:0a:4b:c6:0f:ff:9a:19:f8:21:83:a0:0d:19:
ea:ef:dc:9b:f6:47:1d:8a:3b:f5:e1:f3:f1:1b:0c:68:01:74:
c8:de:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org