Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
File: 36D76E5CD5F911ECA822DD1EC4F9AE02.roa (raw, json)
Hash identifier: B2aZo+eGxJBXPTmrhRt3dTdObw0yqw5TC0cWoTLZT0c=
Subject key identifier: E4:45:CB:82:93:5D:5B:41:B9:C5:00:38:89:48:94:CC:8B:8D:1E:63
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 038E
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
Signing time: Tue 17 Jan 2023 19:31:45 +0000
ROA not before: Tue 17 Jan 2023 19:31:44 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 135271
IP address blocks: 103.210.244.0/23 maxlen: 23
103.210.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Jan 17 19:31:44 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63c6f7a0-dc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:fe:68:a0:89:a1:25:c3:3b:22:70:70:16:
09:c0:f0:84:35:41:98:48:6c:cd:f1:e5:ce:bd:80:
68:5d:db:3c:ab:98:c8:9b:4c:d7:39:df:f1:f5:d8:
a6:1c:22:a8:73:a5:da:ba:8f:c4:d1:60:da:10:b6:
c6:69:78:de:46:6f:cf:f2:d7:50:9b:8b:b9:e3:05:
b1:e2:85:3c:70:66:b2:56:cf:16:9f:be:d5:20:e0:
32:b7:04:bb:63:b2:66:df:35:f4:2b:4f:80:ea:02:
3b:d8:d8:f2:27:7f:a5:c1:8a:e2:68:77:93:a0:81:
7a:3a:c3:21:40:04:89:c3:81:6e:f4:d1:3c:b2:26:
16:e5:8b:64:0d:31:80:6e:2f:ce:f1:93:08:ac:3d:
c2:97:88:26:c9:c1:db:fc:fc:5c:a0:0f:f5:52:f7:
0b:6b:66:0c:76:64:7a:41:b4:fb:d2:f8:b6:6a:68:
be:38:80:a5:05:6e:40:b4:73:c9:83:75:fc:4b:ae:
3e:c8:12:1e:e2:8c:c2:3a:98:98:b5:f3:92:57:20:
67:81:c3:e6:dc:16:7e:74:06:4f:4e:cb:bf:60:29:
5d:a8:f2:c2:37:82:66:82:81:a2:1c:db:9f:0e:6a:
ef:75:22:05:e9:c9:bb:ca:fd:cf:dd:e7:7e:83:02:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:CB:82:93:5D:5B:41:B9:C5:00:38:89:48:94:CC:8B:8D:1E:63
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:a7:84:84:64:95:1a:37:8f:fd:c6:f2:5b:76:c8:e2:df:b8:
45:99:bf:bd:6b:b2:90:be:45:2d:d7:97:13:34:58:42:91:ab:
c8:cf:7a:a0:42:bd:36:bf:a1:43:ed:a6:31:61:d9:61:21:68:
83:79:ef:0e:46:f9:de:ea:2b:19:eb:fa:40:9a:15:9e:b5:48:
f1:00:1e:db:32:5b:b0:8b:f7:ef:75:f9:6f:a0:b3:03:33:98:
7b:50:51:ff:55:09:bc:8b:5a:9d:a9:f2:eb:7f:bf:89:82:5a:
40:22:9a:8a:27:d0:7a:35:3b:e3:a7:3d:62:40:ed:ad:4b:25:
6f:b0:75:9d:f0:b1:f3:8e:af:53:d1:97:6d:a6:78:4f:15:f4:
1c:01:34:c3:1d:c7:4f:c7:1b:94:dc:52:11:d7:07:00:54:ec:
ae:5d:ff:b8:09:e7:10:e2:5c:ae:a9:dc:8a:54:7a:ba:71:5b:
6c:5f:85:97:d5:5a:8a:a0:b8:5c:37:41:c0:b0:85:d2:23:1a:
9c:b3:52:2a:a0:99:b9:3a:68:f6:b9:13:4c:86:6d:ea:45:11:
ea:c4:8b:41:a3:79:b7:ff:8c:04:57:3b:6c:68:62:1a:73:f9:
07:09:43:48:8f:50:3a:a6:b7:93:73:23:fd:a7:ec:48:77:54:
db:b6:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org