Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/93FF0F7E724B11EDA156B97BC4F9AE02.roa
File: 93FF0F7E724B11EDA156B97BC4F9AE02.roa (raw, json)
Hash identifier: 751N4UthSzVJZqQvXdrO9PSlVXXD5BUDHjXJs4qzKOA=
Subject key identifier: 81:D4:88:E0:FB:0E:D5:D5:8E:21:84:50:BC:9A:5B:14:4D:FA:32:AC
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 01C2
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/93FF0F7E724B11EDA156B97BC4F9AE02.roa
Signing time: Fri 27 Jan 2023 04:53:43 +0000
ROA not before: Fri 27 Jan 2023 04:53:43 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 17557
IP address blocks: 103.159.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Jan 27 04:53:43 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63d358d6-1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:a3:b5:24:4c:9a:ef:c3:6e:46:31:cd:ee:
d6:7c:dd:3b:5a:84:61:b8:c6:db:78:9c:ce:a9:66:
85:6a:e5:90:d6:45:5f:24:36:a5:09:8a:70:98:2b:
e8:c5:5b:27:3f:24:96:36:b5:da:2c:23:b9:a4:d3:
d2:31:05:6b:f1:44:c9:ca:c9:61:78:c8:84:48:fd:
58:20:f4:cf:42:32:be:a8:1e:cb:7b:4e:fd:3b:3e:
12:27:1b:70:1c:aa:f8:b7:35:db:09:fe:a4:5d:50:
cf:68:3e:d3:c4:f2:91:f0:cb:6a:5e:b2:84:2d:e5:
14:1b:41:f3:12:0a:51:9b:ad:c6:79:83:16:20:bb:
24:a6:75:5f:bc:57:c2:a4:5a:b0:05:bf:b7:da:3f:
fc:80:c6:e9:36:da:b4:9d:75:c7:da:42:79:02:0f:
ee:1f:ec:6f:6e:e0:c9:99:4e:cd:5b:1e:7f:e6:0a:
bc:b9:7a:ca:89:e4:76:e6:60:bc:f5:47:ab:07:45:
d6:da:81:a1:86:1e:19:c9:b8:a4:42:8c:b2:03:4f:
bb:e2:d6:95:08:18:1d:aa:69:6f:73:57:10:c7:d7:
6e:cc:bd:21:cb:fc:9e:fe:ff:04:bd:40:b5:f2:e5:
d5:df:89:68:dd:fa:78:2f:ef:9b:7b:67:bb:43:c7:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:88:E0:FB:0E:D5:D5:8E:21:84:50:BC:9A:5B:14:4D:FA:32:AC
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/93FF0F7E724B11EDA156B97BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.78.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c2:f8:ae:e2:0e:2d:e7:3e:71:9a:6d:f6:07:5b:98:ab:37:
ac:e1:a4:9a:79:af:0f:bb:08:fa:c2:6e:5d:b0:d6:2e:f3:5a:
21:3c:62:9f:86:eb:e2:89:34:41:e3:a3:f4:61:a5:a1:55:bd:
43:33:94:d9:e8:a9:76:a8:4d:3a:f7:f9:50:ae:dc:4a:f8:d1:
09:31:85:a7:10:07:c4:e1:8f:26:bc:3a:b3:c9:7a:3f:1e:ad:
79:2d:38:bc:85:a2:dc:08:32:5c:04:ef:4e:58:6b:6f:1b:7b:
78:ea:69:a8:c3:1d:4b:17:dd:ed:8f:56:4b:b0:d0:a5:31:2f:
a5:da:47:78:f0:0a:3d:74:c4:f4:69:7d:f6:e1:ab:44:b1:66:
f5:99:60:e9:f6:98:e6:07:d9:aa:83:6d:77:26:8a:c8:d5:18:
d5:b1:d0:e8:e7:f1:7d:92:21:81:23:40:f3:38:54:df:dd:25:
64:90:01:68:f7:8e:50:be:84:7d:72:82:2b:b6:ac:4f:ca:da:
94:a2:dd:94:df:3d:b7:28:a5:b1:ce:cb:e2:3c:62:d5:d2:c9:
7e:97:7c:2b:ff:cf:19:3a:05:0a:81:84:3d:3a:d2:4c:bc:f8:
db:6c:23:37:08:4a:20:3f:cd:9c:ee:db:34:d2:51:22:d3:1b:
2a:ec:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org