Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
File: C27F6AA8044811EE93127287C4F9AE02.roa (raw, json)
Hash identifier: qc5JdnieT2dmqNvICk+ryycVSkAVpvkmNbsE6DrGspg=
Subject key identifier: 16:50:6A:6E:1B:98:7A:59:43:7C:86:AE:96:EF:A4:70:CC:70:89:B2
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 07
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
Signing time: Tue 06 Jun 2023 09:01:44 +0000
ROA not before: Tue 06 Jun 2023 09:01:44 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 56301
IP address blocks: 103.85.184.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Jun 6 09:01:44 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=647ef5f8-ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:b2:a5:57:2f:9a:c6:56:18:c3:54:78:e1:
58:1f:12:41:33:bf:6a:fb:2e:ac:60:0e:9d:8a:57:
75:5d:49:2d:f4:22:cb:3d:cd:a3:19:ac:4b:5b:c8:
3e:b9:f1:5b:ee:a7:84:3c:7c:c5:ff:7a:c8:12:f5:
ba:a6:7c:e8:1e:20:bb:30:64:a7:02:01:e6:02:a8:
f6:91:66:a8:93:c4:e5:6c:84:cf:19:68:90:b3:6f:
bc:15:0a:35:73:ba:33:e6:1b:4d:ed:26:af:a7:6a:
3f:3b:16:b4:7a:f7:5c:b9:b2:2f:49:e7:2c:c9:19:
9c:7e:d4:6c:0c:5a:79:da:e9:46:45:9e:0b:a2:fa:
21:63:c4:46:9e:50:df:fe:fb:1d:9d:8e:90:15:91:
c3:da:0a:16:f7:6e:97:7a:9c:cf:c3:d1:09:6d:02:
bf:b8:61:65:f5:54:70:30:d8:1a:07:70:db:e3:c5:
b5:f4:78:ec:e2:e6:89:e6:e0:67:ba:db:0e:10:4b:
c5:c5:e4:5c:cd:89:00:fb:2e:e9:76:57:c5:09:fe:
be:41:37:09:b3:39:45:bd:29:f4:97:60:8b:cb:45:
11:ee:65:d8:30:62:31:8a:72:ca:32:6e:fd:8c:f4:
e2:85:1e:4d:a7:ca:b2:bb:b7:21:77:6c:7f:ea:aa:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:6A:6E:1B:98:7A:59:43:7C:86:AE:96:EF:A4:70:CC:70:89:B2
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.184.0/23
Signature Algorithm: sha256WithRSAEncryption
31:af:f3:3a:f3:8d:1f:24:01:c9:80:3e:75:dc:9a:76:a4:97:
4a:78:ec:c3:59:9f:86:00:f9:59:a8:a7:8f:d3:f2:9d:7d:1e:
80:40:79:78:34:99:cd:1b:f2:94:31:f2:07:e6:04:bd:2e:ea:
c6:20:f3:70:96:96:98:18:bd:a4:7e:82:21:04:4e:4a:60:ff:
c3:02:90:34:e9:97:68:98:d1:0e:99:ca:bd:9b:31:d5:a2:56:
dc:66:91:68:5e:fa:fe:35:e3:b6:d4:c7:5f:6c:8c:cc:0f:14:
f2:fa:b8:64:4c:56:dc:92:a7:1e:eb:f0:86:3a:5d:6a:9f:9c:
e2:68:1f:d8:d9:3f:b1:ee:9b:85:6c:e9:88:5d:c6:f1:a6:78:
69:1e:c6:e7:4b:b4:0f:87:9a:eb:ec:ac:b5:03:2d:de:9f:a8:
07:58:e7:c0:56:e1:0d:b1:6d:37:ad:6e:0f:4b:61:92:30:42:
de:4f:8c:a5:f7:da:a9:7f:71:d3:8f:fa:04:ba:f3:9b:da:56:
f7:a7:e3:5e:58:b6:fd:93:d4:d7:5f:a4:10:ca:49:13:37:89:
7d:37:34:6d:d3:2f:25:5e:4e:a1:6d:fe:e2:ef:db:74:b9:c3:
f2:a5:5a:94:02:4d:30:c7:5e:14:5e:b7:a2:8a:91:39:19:d1:
8d:c4:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org