Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/333A4504828311EC9A7C1D34C4F9AE02.roa
File: 333A4504828311EC9A7C1D34C4F9AE02.roa (raw, json)
Hash identifier: gzMFKzjVJs5lmgE6DSa2d8S6BWRcrbn2y9npqigEqXw=
Subject key identifier: 1C:F1:DD:0A:B8:4F:10:E5:46:50:92:B8:B3:CF:D8:E1:3C:D9:14:4A
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 047B
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/333A4504828311EC9A7C1D34C4F9AE02.roa
Signing time: Fri 11 Feb 2022 16:46:19 +0000
ROA not before: Fri 11 Feb 2022 16:46:19 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138917
IP address blocks: 103.137.40.0/24 maxlen: 24
103.143.148.0/24 maxlen: 24
2001:df0:1880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Feb 11 16:46:19 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=620692da-90aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:26:69:af:ef:2f:5f:9f:47:30:06:cb:28:
66:1e:be:6c:b1:4f:41:12:4f:1b:e3:eb:1f:4a:7d:
e7:30:57:18:cb:e7:c3:9e:83:22:08:c9:d9:e1:60:
2f:2e:93:4c:17:0b:80:ee:7b:f0:2e:55:af:ae:4c:
03:78:76:ee:85:a5:2b:8a:f3:f3:ac:77:55:4f:19:
91:e7:f8:36:47:63:65:53:98:70:2f:52:ef:a2:15:
23:08:41:a5:9e:73:18:f1:c9:06:86:f1:21:0a:67:
86:e0:b2:4f:3b:98:3a:1f:9d:45:57:ad:2c:45:25:
a2:d5:9d:b2:32:5d:85:61:a7:4f:d0:e6:19:6c:1f:
db:49:9d:66:3e:dc:ff:64:06:29:f0:a4:37:31:75:
05:f3:ca:dc:89:c3:f9:65:53:73:13:48:e9:91:34:
ff:08:b3:86:08:c9:15:b5:17:82:41:39:4d:ff:81:
0d:db:b9:17:5c:b5:81:2e:52:03:f4:7c:09:8d:aa:
1f:bb:8a:d8:87:40:c6:3a:4c:65:05:ad:60:a4:68:
8d:e7:f8:ea:76:ec:e3:6f:40:de:fc:f2:a7:7a:24:
19:70:80:c1:2e:a6:49:53:b3:e7:92:1d:27:bc:4b:
e6:d5:b5:cb:3d:31:40:a9:02:79:0f:d3:25:5c:3e:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:DD:0A:B8:4F:10:E5:46:50:92:B8:B3:CF:D8:E1:3C:D9:14:4A
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/333A4504828311EC9A7C1D34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.40.0/24
103.143.148.0/24
IPv6:
2001:df0:1880::/48
Signature Algorithm: sha256WithRSAEncryption
01:f1:32:2b:4f:5c:30:13:a6:7d:f6:86:52:fb:15:4b:38:09:
25:6a:0d:e4:8d:1b:a3:93:4e:f1:24:5b:ee:cc:25:dc:a7:89:
ab:e9:f3:4e:a6:32:41:46:27:b3:45:0f:86:17:4f:cb:b2:9d:
c1:90:03:1a:3c:0c:7f:7b:e9:6f:74:35:36:3c:12:70:9b:36:
10:d0:b3:3f:ce:27:83:2c:a7:62:e4:5b:9b:01:a5:1c:60:e7:
bf:9a:15:d7:6c:32:46:bf:bf:90:79:2e:f1:d0:7a:11:bc:a7:
99:b7:56:d1:3f:e7:36:21:9e:0d:00:8b:b8:c4:56:a6:d1:1c:
4b:38:82:0a:1e:72:8c:74:35:83:52:4c:c1:83:b9:01:8f:75:
d8:9b:91:0f:fc:01:e5:b9:d7:7e:b1:fe:16:c4:67:c0:ec:3f:
45:d0:0c:43:2f:eb:12:5d:88:c7:a1:9b:1a:ab:1f:55:88:dc:
07:2c:74:41:d8:fb:6d:f8:ec:88:79:e5:4e:b1:73:56:23:f7:
38:ea:eb:2a:31:70:56:51:ea:e4:20:61:38:97:9b:d4:08:da:
85:c2:cf:60:13:11:0e:6f:cf:f4:ff:53:db:b9:9a:ea:86:09:
42:4a:b5:bb:4b:fb:e9:22:0f:f4:4e:18:fe:ba:cb:56:e9:3c:
ca:43:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org