Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/D18CEAB8A1BF11EB9353816DC4F9AE02.roa
File: D18CEAB8A1BF11EB9353816DC4F9AE02.roa (raw, json)
Hash identifier: MeV6VD1y4NGfYrs7j5TuqlfsZEWBpDYh2r4Xslomrps=
Subject key identifier: FE:C4:60:F2:65:FA:84:88:68:74:BF:5B:28:25:94:0F:C6:9D:96:6E
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 0268
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/D18CEAB8A1BF11EB9353816DC4F9AE02.roa
Signing time: Tue 25 May 2021 08:24:50 +0000
ROA not before: Tue 25 May 2021 08:24:50 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 63526
IP address blocks: 103.137.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: May 25 08:24:50 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60acb451-43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:bc:ae:0a:7d:ed:89:09:03:19:38:88:79:
72:33:ff:91:0f:b3:23:49:49:32:6b:fe:cf:1f:4a:
55:c2:1d:04:6e:0b:a0:21:65:a7:47:12:3a:54:1b:
77:16:e9:7c:42:08:c8:ba:a2:df:b9:bd:c9:52:0b:
1e:1b:67:76:85:92:74:be:ff:5d:a3:f3:bf:56:22:
4b:e4:b4:a1:1a:fd:a4:2d:4f:54:17:0d:c8:24:e3:
11:e8:cc:06:cc:25:ef:bd:70:21:7c:9a:33:b8:36:
2e:1a:12:48:7a:c2:0f:ea:98:5f:66:a7:66:c9:e1:
ee:e9:49:4d:a9:e5:22:32:47:9d:76:95:32:4b:08:
3e:da:8c:a2:b5:86:57:86:72:f6:15:a8:3d:b2:7f:
92:4e:6f:69:a8:5e:6d:5c:0d:89:30:5c:c8:55:1f:
0d:38:6e:5a:3d:5c:ee:80:4f:82:2b:cc:a7:88:b3:
59:93:17:03:67:dd:35:e6:f3:1f:85:de:cf:2a:01:
b4:bc:15:a5:bd:e5:39:1b:74:ea:a2:74:d3:b2:5f:
0c:30:62:b4:42:c9:2c:e3:00:e1:98:29:42:80:88:
7a:a6:d3:5a:d8:e4:ea:54:c5:59:4d:28:97:97:01:
60:98:69:00:7d:ad:1b:fc:7f:24:df:1e:c6:13:7b:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:60:F2:65:FA:84:88:68:74:BF:5B:28:25:94:0F:C6:9D:96:6E
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/D18CEAB8A1BF11EB9353816DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.40.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c5:4f:d8:26:23:22:be:11:2e:6b:33:f7:77:f0:ed:c2:47:
0c:44:7c:e2:ef:e3:03:b7:1f:aa:8d:1a:50:e7:29:6e:4b:3d:
90:b6:4a:b3:9f:6d:fa:0e:92:4c:85:30:24:50:9a:8c:33:ec:
bb:e5:3f:fd:88:03:ea:af:c9:90:92:3e:6b:de:1b:da:9b:19:
58:de:b8:2f:31:a7:75:64:fc:74:2f:ba:31:df:93:c1:e8:15:
91:48:3a:2b:b4:50:d8:2f:26:fb:df:d4:f2:60:f4:60:12:93:
a1:30:fb:65:f6:8f:42:f4:e5:b4:bb:e0:f4:ac:c0:4d:4f:cd:
5b:fb:7f:51:83:c0:e0:f3:68:f2:46:e3:23:ba:46:5e:c4:2d:
f7:c8:fb:3a:31:3f:c3:de:fb:52:b8:31:8f:4d:f5:55:19:9b:
0a:eb:4c:a8:94:1f:20:c0:43:5d:3d:04:a0:55:a2:78:f4:19:
55:28:e8:58:e1:37:81:d7:b4:fb:15:d8:38:dd:f0:99:b3:1d:
0e:dc:c1:e5:c1:ee:e0:57:23:bb:f7:8f:42:1a:b6:74:9b:1b:
c8:c0:47:01:ed:1e:3a:4e:9d:d7:fc:c5:37:ef:70:a2:af:12:
3e:df:3e:ef:d2:a4:01:43:49:38:b8:bd:44:15:91:42:f9:28:
b0:c0:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org