Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/3D5865F0871F11EE80F22965C4F9AE02.roa
File: 3D5865F0871F11EE80F22965C4F9AE02.roa (raw, json)
Hash identifier: ZPw6ZYzpantyuOl/HKshFOTF4634RZVnzaDrsqKne1c=
Subject key identifier: DE:BE:6F:A6:09:5D:D8:8F:2C:44:C7:BC:9B:B9:49:48:8F:B0:20:F6
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 0389
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/3D5865F0871F11EE80F22965C4F9AE02.roa
Signing time: Sun 19 Nov 2023 21:04:34 +0000
ROA not before: Sun 19 Nov 2023 21:04:34 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.175.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB
Validity
Not Before: Nov 19 21:04:34 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=655a7862-975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:d5:cb:6d:ba:e6:5c:ca:80:64:a9:ed:c0:
42:eb:a2:7d:49:b1:16:8c:80:31:cb:d1:07:f4:69:
0b:dc:44:0b:87:5a:b2:ff:ab:d1:0b:90:fc:8c:cd:
2e:d9:f6:b8:3b:14:86:e4:cc:95:e6:fc:41:c4:f9:
c8:ff:20:ee:26:3e:96:0b:ca:e3:4b:e6:68:68:c6:
b1:b3:26:31:19:d1:ae:4b:9f:9f:8e:e7:e6:fe:a2:
e5:13:f7:28:c3:c0:84:81:03:26:a2:8b:4b:32:a8:
3f:24:48:35:64:2b:5a:48:b4:11:1e:50:44:a5:34:
cb:48:17:af:8f:07:dc:c4:a6:79:25:19:66:e5:1d:
01:13:2d:42:bd:f8:47:da:56:41:49:cb:8e:e2:1f:
b5:0b:d0:10:d8:a7:ac:cf:aa:06:6f:48:68:ea:35:
dd:3f:42:3d:74:3a:79:2c:8d:38:9b:78:5b:ed:2e:
ff:6b:4e:79:a0:59:6c:e7:9f:71:6a:49:6d:a0:53:
bd:44:4c:6e:aa:1b:11:ab:cc:bf:9f:4e:13:f7:2e:
72:13:2e:75:14:ff:75:cf:96:32:f6:00:5a:f4:3d:
01:4f:d9:04:17:b7:60:f0:7f:57:e9:45:d5:61:2f:
43:bc:a6:d3:63:54:97:de:7f:c8:fe:a2:1d:70:13:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:6F:A6:09:5D:D8:8F:2C:44:C7:BC:9B:B9:49:48:8F:B0:20:F6
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/3D5865F0871F11EE80F22965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:81:4b:e5:cf:72:15:42:4d:e3:d2:e2:60:ff:85:a3:df:
16:36:6c:aa:dd:68:51:f3:c0:66:0d:a9:c5:05:ff:f3:58:6a:
82:3e:13:e8:b5:72:32:81:5d:d0:f1:d7:ec:f7:5d:84:d0:c6:
de:ce:88:80:d6:1d:74:f0:83:8b:66:17:87:2b:82:de:5d:7d:
6d:cc:3a:91:e3:55:c4:95:7b:35:e3:54:d5:3e:d7:cd:28:2e:
80:75:5d:c6:29:2b:d0:74:4d:05:0b:f3:2d:3b:4a:7c:31:9f:
88:66:85:ec:92:57:10:8c:b0:40:3d:4b:45:79:6c:c2:51:d2:
5e:fb:44:96:81:3c:22:3e:dc:61:8b:26:55:2c:bc:74:81:e8:
a3:10:32:88:f6:a8:9e:2c:67:34:8e:fe:7c:f3:83:43:d8:13:
e3:99:22:fc:06:4c:3b:c3:96:1e:8e:83:1a:79:3e:5e:69:bb:
60:51:62:e6:0d:bb:48:2e:13:53:7b:42:9d:76:c6:0a:79:6a:
45:04:e5:01:76:95:5d:76:0a:0c:39:ef:9a:0d:b6:4f:09:6f:
28:da:9b:f1:1c:3b:3f:08:52:7c:4e:74:80:0e:94:60:e8:15:
f9:82:c7:21:af:31:16:9b:43:b0:15:6d:37:6e:dd:53:32:6f:
a9:73:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:22 2025 by rpki-client