Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/A463B5E8DA5D11ED80FF4843C4F9AE02.roa
File: A463B5E8DA5D11ED80FF4843C4F9AE02.roa (raw, json)
Hash identifier: P/tG9CHrT+B7xTrbjoyP/y6t+T5NlgwKcSDXe856NgM=
Subject key identifier: 40:30:61:72:D7:D1:53:DC:A8:35:67:79:70:A2:AC:28:24:39:13:8A
Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Certificate serial: 92
Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/A463B5E8DA5D11ED80FF4843C4F9AE02.roa
Signing time: Fri 14 Apr 2023 00:45:25 +0000
ROA not before: Fri 14 Apr 2023 00:45:25 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 10080
IP address blocks: 103.143.156.0/23 maxlen: 24
2400:a2e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Validity
Not Before: Apr 14 00:45:25 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6438a224-e617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:6f:d7:4b:35:27:bc:9a:3a:94:e9:1a:c7:8e:
6f:73:d2:43:9e:d6:51:57:37:67:0b:33:c0:40:9c:
33:aa:7b:02:51:04:0e:03:35:d3:26:b8:52:82:3f:
23:44:9e:0a:40:6c:f4:be:00:b8:56:9d:c5:20:5f:
6b:12:06:3f:74:b7:63:27:1e:eb:9b:1a:84:51:62:
5b:37:bb:9c:0c:6b:31:0c:4e:b9:7f:06:4e:0e:4d:
77:02:ff:79:f1:29:7d:7c:b7:41:1f:ea:98:49:b5:
07:32:5f:b9:e3:4a:c6:6d:57:be:84:7c:b6:e2:b7:
22:49:37:ef:df:4b:42:a2:36:70:83:6b:29:d0:7b:
ae:f6:e8:64:da:ba:13:6c:f8:3f:8f:3c:c9:32:8e:
0e:0f:96:c0:97:c0:f5:fa:83:a1:dd:ff:d6:69:63:
a5:d2:44:e6:f7:d3:11:53:5a:3a:fa:9c:f0:8a:94:
ea:1c:19:4b:56:40:a0:bc:32:6a:28:e1:e9:b2:4e:
3f:35:b7:f1:a4:c5:56:d9:72:11:75:54:8e:66:b2:
9f:8c:f6:67:05:9e:f3:0c:d3:96:bb:93:12:27:cf:
1f:94:77:d4:d3:30:0e:87:ea:7e:0b:16:93:a1:1c:
6d:bd:1f:e0:df:b0:bc:cf:21:16:28:5c:5e:16:82:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:61:72:D7:D1:53:DC:A8:35:67:79:70:A2:AC:28:24:39:13:8A
X509v3 Authority Key Identifier:
keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/A463B5E8DA5D11ED80FF4843C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.156.0/23
IPv6:
2400:a2e0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:6b:b1:ab:34:13:0e:c3:8d:8e:1b:0c:c3:00:ea:1f:31:9a:
60:84:38:86:2a:1b:55:cd:b1:eb:ac:1a:5c:58:b1:85:82:e2:
21:97:df:0e:30:3c:55:c7:c1:e4:19:56:b9:9d:1c:5d:40:9b:
c1:4d:ba:81:02:7e:6e:f4:52:45:3c:d0:90:9e:5c:90:57:19:
9c:54:43:31:9f:1a:58:2c:df:94:70:f5:e3:ef:ae:05:f1:cd:
8f:af:84:a5:ca:52:8d:b7:4f:c2:3a:5e:df:8f:13:42:b5:2c:
3d:8a:a8:ef:0a:58:4f:1d:ce:75:06:55:81:fb:70:85:79:2d:
de:9f:91:16:e0:8c:16:b5:de:09:90:0f:46:bf:5f:1d:02:54:
d5:67:1c:f6:69:a7:b3:23:6b:88:34:4c:19:dd:b5:c9:9c:7c:
e4:51:dc:3a:15:b3:5d:bf:0d:27:da:fb:90:7b:b0:e8:59:d0:
e7:be:48:00:3a:37:91:82:42:d5:90:b4:da:56:c7:dd:f0:c6:
b2:92:d1:56:21:9a:64:77:fb:e1:f3:68:61:7f:a2:11:6f:a6:
c8:a9:3c:89:7b:f0:19:da:e4:05:8d:82:3e:47:11:5f:4b:d1:
98:48:18:ab:9d:d9:46:4f:61:5c:68:9d:1d:03:1e:46:f6:f4:
1c:57:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org