Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/E9DA5C5AD82211ECB9E0375AC4F9AE02.roa
File: E9DA5C5AD82211ECB9E0375AC4F9AE02.roa (raw, json)
Hash identifier: 5DLDv1BgAxL7IUnJ4EAPNc8H170licBF8oP6NSKrfmQ=
Subject key identifier: 5F:45:2E:BE:C6:B9:46:1F:8E:EA:E8:F5:92:32:C1:F4:CA:32:45:06
Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial: 12
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/E9DA5C5AD82211ECB9E0375AC4F9AE02.roa
Signing time: Fri 20 May 2022 09:55:01 +0000
ROA not before: Fri 20 May 2022 09:55:01 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 134371
IP address blocks: 103.187.98.0/24 maxlen: 24
103.187.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Validity
Not Before: May 20 09:55:01 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62876574-ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:5e:87:e3:86:31:2b:0e:22:e7:a4:61:fa:
03:bf:97:0f:35:b2:49:2a:69:be:e1:2e:0d:33:7e:
6d:5c:b7:f7:55:72:b2:a9:62:88:41:1a:86:5c:50:
cd:43:ee:ab:97:8e:26:ed:dd:fc:50:a0:32:8e:ce:
39:49:d0:49:49:a8:c3:eb:cf:34:8b:31:df:d1:a1:
0e:85:1b:84:1b:10:6a:ee:36:62:f5:1b:e4:dc:b5:
c0:34:d7:7c:c9:d2:58:44:56:11:93:02:0e:8b:52:
c5:c1:90:12:ef:24:be:ae:2e:65:17:97:31:d4:e1:
97:4c:a5:cd:98:94:23:fc:20:3f:d2:ce:67:fe:5d:
85:19:df:96:c0:83:95:0d:21:3d:e5:d1:f1:99:41:
31:58:21:ca:c6:fe:f0:d1:cb:e0:72:c5:10:48:da:
48:35:b7:35:5d:f4:17:93:b2:ed:4c:ac:08:1e:d4:
de:f2:ec:a6:2b:34:1f:0c:ba:04:ff:ea:01:ed:79:
9a:8a:1e:49:84:ad:ff:a9:04:1c:c9:a2:07:35:b8:
5f:95:76:e2:79:b0:56:92:e4:60:20:87:20:29:fe:
94:b5:0c:fd:2f:97:74:42:c0:8a:89:be:29:5d:ca:
d7:16:1e:9c:0a:be:65:3d:90:33:38:3c:21:c7:64:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:2E:BE:C6:B9:46:1F:8E:EA:E8:F5:92:32:C1:F4:CA:32:45:06
X509v3 Authority Key Identifier:
keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/E9DA5C5AD82211ECB9E0375AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.98.0/23
Signature Algorithm: sha256WithRSAEncryption
21:87:7c:e0:2c:7f:6e:79:d2:ad:09:bb:5c:c6:0b:89:e1:4c:
e5:6a:82:19:3b:d6:35:96:6c:4c:cb:e3:f9:39:68:7e:04:f1:
ef:d9:80:39:f8:a5:2b:30:f5:18:d2:bb:60:fe:40:55:a9:41:
5a:27:db:a5:ea:b4:0c:8d:f5:1e:c8:e1:04:db:64:9c:07:37:
07:a6:ab:7a:b3:20:5b:76:db:c0:5b:4d:27:d2:ca:f9:a5:e9:
b5:cc:75:7d:49:f0:76:d0:2a:c6:cb:3b:da:9f:3c:7d:5c:94:
44:12:98:ca:88:d9:e6:85:4e:ad:4f:fa:ba:95:cd:e2:f8:49:
68:bb:bf:bb:1c:89:46:84:80:54:1c:7c:78:ed:30:aa:89:7f:
ec:a9:26:53:45:4f:06:8c:9a:54:fb:61:0b:bd:51:d6:52:74:
87:09:92:0c:30:a5:7c:e3:f0:c6:75:e0:4c:2b:b9:e7:c6:0c:
e4:cb:aa:f6:08:07:7e:52:60:35:88:4b:81:7d:16:f9:f1:6d:
dc:f8:56:be:36:45:ef:80:ac:86:ce:81:22:15:25:97:2e:36:
6a:bf:27:11:7d:56:7d:96:bc:bf:c7:24:3e:92:7e:02:d8:d1:
ba:1e:24:11:92:53:12:4c:c3:e0:d2:0a:54:93:12:d5:c4:18:
69:89:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org