Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/8724FA06CC9511EA9A02C155C4F9AE02.roa
File: 8724FA06CC9511EA9A02C155C4F9AE02.roa (raw, json)
Hash identifier: DCtMhgTvRogx9/jhvDO0VyaENf2VaiwflIFpPkD3XQQ=
Subject key identifier: A4:F0:D3:03:7E:2C:E4:18:5B:A0:FB:D5:0F:3A:BA:2A:08:C3:EA:A5
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 0455
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/8724FA06CC9511EA9A02C155C4F9AE02.roa
Signing time: Fri 21 Jan 2022 11:19:00 +0000
ROA not before: Fri 21 Jan 2022 11:19:00 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136933
IP address blocks: 103.127.80.0/24 maxlen: 24
103.127.81.0/24 maxlen: 24
103.127.82.0/24 maxlen: 24
103.127.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Validity
Not Before: Jan 21 11:19:00 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61ea96a4-4b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:9c:2b:94:93:2f:0d:22:d2:98:04:b2:f3:
08:bd:dd:8f:80:92:a2:91:84:5f:3d:a1:e9:0e:7e:
94:38:77:d5:9e:21:f9:bc:2c:e6:57:d0:e4:4f:8c:
c8:7a:c5:2e:82:81:33:ac:f1:0d:ea:9b:46:b5:f6:
9e:f5:7f:c3:9d:d0:83:ec:d2:00:b0:32:07:92:ea:
39:d1:6c:58:e1:15:7a:78:c9:5f:c1:71:40:3f:22:
7f:0f:e1:76:98:83:8a:e5:cd:e6:06:e4:b8:f3:9c:
cc:ab:04:fb:50:27:ee:e0:c6:59:31:1c:a1:4f:de:
68:24:8a:0b:e1:49:5d:f5:80:ac:3a:cb:06:fd:96:
a1:27:61:d7:0e:18:12:72:71:1a:7a:5e:79:30:de:
e5:30:3f:48:8e:7d:5f:70:4a:51:a0:11:4e:4d:ce:
75:fe:62:08:bd:36:4c:30:0b:28:e7:54:1c:8f:04:
64:16:3c:02:b5:ed:88:be:d4:7f:f0:60:41:51:57:
cd:b7:97:f3:0d:f1:70:af:be:3a:9a:5d:b1:f2:f9:
6d:47:ef:0b:1c:e1:84:5f:18:5e:a7:8d:89:c7:58:
c8:e1:5f:0a:d9:1e:97:84:91:f6:f2:7a:bd:ac:d9:
3d:fe:c7:a0:15:f9:9a:ee:be:71:38:45:d0:55:ae:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F0:D3:03:7E:2C:E4:18:5B:A0:FB:D5:0F:3A:BA:2A:08:C3:EA:A5
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/8724FA06CC9511EA9A02C155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.80.0/22
Signature Algorithm: sha256WithRSAEncryption
00:92:c7:a5:27:36:d3:64:be:87:d6:f1:4a:7a:13:30:91:fa:
d5:18:df:4c:e9:cd:7b:27:c3:2b:44:43:12:76:6f:fd:02:ea:
0a:51:24:65:26:4d:54:fa:b8:34:43:c7:db:66:22:6a:f6:60:
8d:5d:41:21:c3:c1:a2:91:84:c4:dc:21:ae:fa:46:2a:9b:69:
3a:f5:b0:09:87:40:5e:9e:28:a4:52:be:c8:d1:86:68:d8:81:
91:f7:ae:fd:b8:28:b7:b0:e1:09:fa:41:6c:3d:d2:3d:2c:cc:
36:14:4f:b7:35:dc:b2:a4:35:07:50:74:43:7c:8a:40:28:b2:
b1:76:ce:69:14:0f:a4:91:e9:4c:85:69:a2:c8:aa:ff:92:d6:
30:53:fe:68:f8:57:c9:f5:3b:a4:c0:66:2b:dc:81:c0:f3:43:
a6:9b:27:7d:01:f8:19:c0:75:5f:07:66:c0:7e:4e:80:05:07:
0d:f1:24:4f:0c:2a:03:ef:51:0c:a9:f9:63:13:e0:48:ba:9f:
ae:01:08:75:90:aa:99:07:72:fd:a9:ba:17:d4:33:c1:3f:0d:
7f:8e:66:c0:8d:1d:f5:c9:fc:bf:87:9b:af:e9:62:41:03:2e:
64:53:b0:c3:53:74:1a:85:0d:2c:a2:3f:04:da:2d:f6:9d:55:
5a:4e:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org