Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ACA2AAC48DA611EDA6A5F926C4F9AE02.roa
File: ACA2AAC48DA611EDA6A5F926C4F9AE02.roa (raw, json)
Hash identifier: rJceCh42TI2gZkoenvnOn3b0/W9YYBBNvSAiYbNq3Gg=
Subject key identifier: C0:A2:C5:D4:99:D5:1F:F9:85:C9:67:3A:4A:B9:FD:1C:7B:B8:A3:DF
Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
Certificate serial: 0111
Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ACA2AAC48DA611EDA6A5F926C4F9AE02.roa
Signing time: Fri 01 Dec 2023 04:54:45 +0000
ROA not before: Fri 01 Dec 2023 04:54:45 +0000
ROA not after: Sat 30 Mar 2024 00:00:00 +0000
asID: 63473
IP address blocks: 103.69.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
Validity
Not Before: Dec 1 04:54:45 2023 GMT
Not After : Mar 30 00:00:00 2024 GMT
Subject: CN=65696715-7f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:02:f0:a5:8d:eb:fe:aa:3a:6a:d4:b4:0c:
e5:be:d0:9a:82:02:fa:bd:f8:fd:e4:16:2c:67:e4:
0f:73:fd:35:c2:91:30:9d:ad:cc:33:4d:d4:6c:87:
df:55:49:a0:16:42:1b:68:89:e5:51:54:86:30:0e:
58:a2:7e:14:89:3b:9f:11:f6:48:1a:d2:a7:e6:f5:
c0:21:84:d0:58:13:c3:14:c3:9b:86:a3:37:78:8a:
90:4c:f4:d3:01:aa:e9:78:d4:5e:6e:d7:d7:a3:20:
5e:0f:42:48:6c:57:0a:62:cb:32:be:5c:39:be:10:
58:08:6b:c0:6c:22:19:4c:a9:19:39:78:49:c3:4e:
da:82:75:d4:41:3e:3b:dc:d9:8b:9e:2f:89:c8:22:
84:f9:5b:7f:ed:4b:9c:b3:0b:8a:2c:7b:0e:83:59:
3d:85:36:a1:fc:82:11:f0:a6:3a:b8:4f:62:7d:54:
15:11:b5:0f:a1:84:f1:83:79:46:8a:d8:1f:12:b3:
2e:aa:52:f7:35:7d:f1:6b:a4:cc:4f:e0:fb:a7:c4:
b6:a7:0a:2d:32:ba:49:3b:4f:93:9e:f1:b0:02:c2:
02:79:ea:48:20:1d:5c:1b:a0:55:96:f0:ab:da:f5:
37:bf:6d:f8:cf:a3:85:ff:f1:37:0d:99:e8:ed:2a:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:C5:D4:99:D5:1F:F9:85:C9:67:3A:4A:B9:FD:1C:7B:B8:A3:DF
X509v3 Authority Key Identifier:
keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ACA2AAC48DA611EDA6A5F926C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:aa:78:da:90:c0:d3:6b:3d:3c:75:48:93:ce:54:0f:15:cb:
b6:3e:cd:fe:a5:b0:5e:de:2a:64:ac:c0:3c:99:ea:cc:29:13:
10:5c:6f:b2:5d:07:44:41:e1:d9:8f:8b:00:21:41:1d:15:49:
20:e9:a3:9a:99:de:7a:2e:85:71:cf:af:32:5a:65:6e:bc:71:
d5:b9:2f:99:7b:49:84:d0:e6:12:d6:5c:2e:a7:40:40:46:fe:
ba:62:e8:68:10:4f:12:b0:80:c8:c8:cc:97:4f:96:5f:44:26:
c3:f5:f1:e9:15:f4:5c:1f:d7:ee:75:f0:33:61:e9:3f:76:cf:
7f:28:ac:5f:57:d8:68:3a:3a:62:bc:f0:5b:94:1a:9a:d1:77:
ba:60:3d:20:a0:12:19:76:ea:d5:06:75:25:2d:da:77:f1:14:
18:77:2c:93:2c:f2:48:38:1e:f2:fa:ea:c6:4c:46:87:19:c1:
cc:45:32:18:36:52:04:25:fa:ed:39:ca:d0:2b:f0:2f:99:96:
fb:1e:c3:7d:3e:e3:6e:f7:2a:c4:2e:8a:d6:91:f4:4b:74:b9:
11:0a:1b:63:9b:df:f5:3a:57:b3:f7:43:ce:1a:2a:11:7b:ea:
f5:b2:43:32:85:24:1a:52:fe:60:28:52:f8:aa:13:9b:af:d7:
f6:79:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org