Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/338642FAB3EE11EC80E9531CC4F9AE02.roa
File: 338642FAB3EE11EC80E9531CC4F9AE02.roa (raw, json)
Hash identifier: +3UgT0NBpcFoJ04+YgWUDaoFEWG6jrYwdisnIq4ziXI=
Subject key identifier: 81:B4:E4:52:05:FD:C7:A3:94:35:39:D5:7C:5B:73:F6:60:61:84:CF
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 04EA
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/338642FAB3EE11EC80E9531CC4F9AE02.roa
Signing time: Mon 04 Apr 2022 08:28:28 +0000
ROA not before: Mon 04 Apr 2022 08:28:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138418
IP address blocks: 103.137.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Apr 4 08:28:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624aac2b-53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:19:1d:75:20:f7:d5:72:49:81:b3:bb:f4:
30:01:36:e3:cf:6f:3a:c5:d3:8f:5e:05:bc:e1:1d:
be:07:63:f3:f7:44:d7:fc:c6:e6:62:43:45:1e:de:
49:cc:66:b1:0f:33:cd:29:e5:de:73:ea:7c:ba:03:
ac:b6:2d:5b:dd:34:b7:34:72:48:c5:a0:c5:35:fa:
6f:0a:ed:90:97:a9:13:68:44:21:c9:1f:a4:25:84:
89:a2:81:1d:58:17:91:0f:e2:60:6e:77:77:47:32:
89:36:0f:fd:f2:ef:9d:d0:28:7b:40:50:ca:02:e7:
c1:04:44:58:6e:47:30:72:2a:9d:78:d2:27:33:88:
63:5d:c0:26:e8:a5:23:a6:2e:fe:b2:0f:74:5d:d3:
39:a1:c3:76:ce:50:0f:ed:ad:31:88:2b:5a:9f:54:
00:00:ae:2a:5c:69:bb:3d:fb:32:55:74:10:30:16:
a0:d7:fe:4a:f2:13:e5:00:2a:c7:ee:a5:e0:4b:30:
77:6d:18:74:f5:41:ab:d4:1e:d5:e4:b2:51:8b:8b:
f6:80:0b:09:2c:89:19:8d:b9:7a:4d:5f:07:70:03:
98:9f:26:fa:84:9f:e2:1c:26:d9:31:c5:18:88:2d:
bd:fa:da:c1:ab:71:e6:bb:46:3c:a5:b7:98:33:65:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:E4:52:05:FD:C7:A3:94:35:39:D5:7C:5B:73:F6:60:61:84:CF
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/338642FAB3EE11EC80E9531CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4b:84:16:55:73:67:aa:4b:31:3f:13:7c:ca:26:25:3c:ef:
97:0a:d4:8a:2c:1d:bc:4b:22:db:a7:69:6d:3d:6c:96:e4:61:
20:68:f9:de:20:bd:84:8b:72:b7:1d:26:4b:35:b2:8c:8a:9b:
74:e1:7c:e9:d0:28:a6:c2:21:e8:1b:90:c8:81:fc:8f:08:8b:
91:76:d7:d3:c6:25:51:8b:41:cd:58:b0:e3:dc:30:6b:d7:f9:
9b:73:8c:29:55:71:bf:92:fe:c1:21:24:70:40:a3:62:75:25:
67:2a:2c:cf:96:f2:d7:62:cf:37:80:10:bd:49:0c:5d:bd:c3:
46:c7:1e:a1:13:80:95:e8:5f:36:d7:42:2c:18:bf:9a:51:6e:
72:46:9f:8c:b6:7b:cc:d2:bd:54:f1:93:30:e0:d2:b0:d5:66:
c8:76:5b:84:e6:69:69:26:f4:c8:36:b5:1c:32:90:98:07:7a:
84:bb:54:d9:d1:9e:fc:11:1d:28:a0:41:1c:50:37:d8:87:a8:
7c:ff:7d:8e:70:ed:4c:51:9e:43:59:55:01:e0:8b:ac:14:dc:
e9:ed:77:0d:55:ce:86:ec:84:83:4a:e2:03:d5:01:7f:a7:e2:
0a:5d:df:91:14:e6:7c:20:60:57:b7:16:72:5e:95:35:5e:b9:
cc:f1:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org