Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
File: 80E82C6CE15611EC9E14513DC4F9AE02.roa (raw, json)
Hash identifier: QskQPS45tS1beEQw1w0Khy9tijhyyGY8zd1dWtwqq00=
Subject key identifier: 8C:60:6A:A3:89:7C:90:CF:7C:B7:93:BD:2A:0C:CD:25:5E:EC:FC:7D
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 0304
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
Signing time: Wed 01 Jun 2022 14:58:01 +0000
ROA not before: Wed 01 Jun 2022 14:58:01 +0000
ROA not after: Sat 01 Oct 2022 00:00:00 +0000
asID: 137449
IP address blocks: 103.167.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Jun 1 14:58:01 2022 GMT
Not After : Oct 1 00:00:00 2022 GMT
Subject: CN=62977e79-1904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:0a:bb:26:bd:63:a7:a8:ee:6e:7c:14:b8:
81:ba:50:c2:9a:03:ae:30:e4:4c:4f:ab:2f:6e:ad:
19:dd:67:15:d8:cc:65:e0:f1:18:e3:53:b7:10:b2:
e1:56:6c:23:ff:07:53:14:ba:58:7f:e9:7b:af:86:
cb:04:fb:83:35:77:b0:41:01:87:c6:58:5e:cd:ee:
69:22:2b:72:e2:a5:75:69:e6:af:49:f3:c5:47:57:
ed:45:11:16:92:a9:4d:4d:76:af:5e:f8:94:9e:59:
31:5f:3a:09:91:83:3c:67:f7:b9:4c:39:d2:61:0d:
2c:48:a4:cd:40:0d:c9:31:86:25:1e:1b:13:7a:4d:
03:25:bf:fa:e8:a0:ea:9c:87:37:67:7d:d1:88:82:
8a:cc:5e:9c:0c:b6:d9:bd:8b:12:6a:bb:28:bb:48:
64:6e:31:ac:a6:79:20:89:ef:82:57:27:26:f2:31:
4a:e9:4b:73:8b:5f:f1:28:53:66:39:a4:cc:28:df:
8e:9f:e1:9f:fd:e0:2b:89:f1:5b:94:8d:eb:b9:c5:
18:fa:38:eb:d6:14:31:f5:4d:6b:d1:fc:ce:60:47:
5d:e0:ff:a0:3b:a8:c0:60:e5:b4:73:4f:40:d5:54:
e8:a3:72:d5:e2:61:ff:f6:2e:04:b3:96:4f:fd:a5:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:6A:A3:89:7C:90:CF:7C:B7:93:BD:2A:0C:CD:25:5E:EC:FC:7D
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:84:f4:31:0b:7a:48:c1:7d:72:48:49:26:1f:1e:4a:da:cd:
fb:ca:9f:3d:28:fa:79:6a:2e:a4:59:d0:8f:ed:3f:ee:31:c4:
32:9b:2e:30:0b:54:8a:db:80:cc:a8:e3:78:f6:a6:83:a3:f4:
df:b5:1e:e9:f2:40:06:69:d0:62:30:50:37:65:a2:21:20:a8:
9f:6c:63:6a:03:b4:ec:23:69:be:94:24:23:df:bc:a5:35:0e:
c4:74:87:9d:3f:8d:61:4b:21:09:99:89:a4:67:34:e3:f7:32:
b5:52:79:00:1d:26:7f:fe:31:9e:9d:7a:78:ed:0c:05:88:43:
1e:5b:20:f8:a9:df:9a:20:5f:79:d6:4d:b4:bc:73:d4:c9:85:
8c:d9:e0:f2:ba:2f:cd:0c:9f:74:e8:b4:c0:1f:da:20:7d:88:
f7:12:c6:d3:ec:74:ca:5a:ee:1a:1f:11:2e:5c:30:48:df:73:
da:61:34:20:c8:9b:6b:55:a4:7f:92:55:08:16:14:28:41:1e:
81:49:90:e2:16:f1:e2:c3:84:2f:87:10:17:dc:85:4d:97:fb:
ac:9b:9d:f2:d2:37:71:84:88:e3:c2:3b:eb:61:a8:32:af:a9:
5b:c2:47:36:27:3e:e1:4b:b4:b6:c8:fb:c7:18:c9:e0:23:07:
5b:dd:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org