Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/D33700DA3C9411EDBDC49E31C4F9AE02.roa
File: D33700DA3C9411EDBDC49E31C4F9AE02.roa (raw, json)
Hash identifier: jA22woBm9LADcPAfEG74K5/Ya0lGKWEDnkCfSWMAOD0=
Subject key identifier: F1:0C:73:9E:8B:59:F9:44:18:B4:13:B8:5F:20:F1:79:C5:57:6C:97
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 0497
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/D33700DA3C9411EDBDC49E31C4F9AE02.roa
Signing time: Sat 03 Jun 2023 02:40:31 +0000
ROA not before: Sat 03 Jun 2023 02:40:31 +0000
ROA not after: Sun 01 Oct 2023 00:00:00 +0000
asID: 142162
IP address blocks: 103.167.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Jun 3 02:40:31 2023 GMT
Not After : Oct 1 00:00:00 2023 GMT
Subject: CN=647aa81e-d1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:55:a3:a9:03:11:e0:0c:67:b3:1b:21:e1:
a1:8d:ed:25:96:f2:56:39:a6:bb:d3:79:03:d2:5c:
0d:e0:ab:5f:5c:40:ec:3f:d1:2f:a0:81:0b:4a:76:
50:93:6e:ca:03:e2:8a:38:9e:6c:90:64:3f:67:68:
5a:74:0e:e1:4a:70:ef:b2:85:d7:16:fc:78:98:61:
1e:a5:73:b8:b5:4c:fd:d7:17:88:b4:65:0a:ce:52:
ae:a4:cc:79:5a:47:8c:95:b6:b6:b0:b1:91:75:0d:
98:48:58:6a:66:85:4b:b8:73:b2:98:c9:05:20:f7:
fa:d0:25:53:2f:10:31:e9:ba:a9:a9:be:b7:38:c1:
1f:b2:66:f7:3e:27:99:0b:18:7e:8d:51:a4:0c:a0:
61:d1:29:12:89:af:ca:e9:66:3a:47:74:37:db:36:
b4:ec:42:29:dc:bc:d3:04:3a:2f:d8:5a:49:91:65:
94:b3:6a:6b:c0:57:94:35:e9:c0:7c:a4:39:02:30:
12:e4:69:5c:98:80:4a:c4:bc:c4:1c:5f:1a:09:d6:
ff:d9:51:87:3b:68:93:3f:26:72:22:2f:32:5c:f8:
bb:d8:c2:6d:4f:7d:82:d7:63:09:7a:81:ce:22:2a:
aa:0b:08:bd:8b:55:9b:31:8c:02:d9:06:c3:b4:8e:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:73:9E:8B:59:F9:44:18:B4:13:B8:5F:20:F1:79:C5:57:6C:97
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/D33700DA3C9411EDBDC49E31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6d:9a:ce:2c:2f:91:ae:d8:ba:42:6c:32:37:4e:07:54:d0:
02:d6:16:9d:0d:5a:fe:9b:bf:47:ed:07:5c:34:35:81:69:28:
b7:20:d2:7d:67:98:36:87:38:c1:f5:68:2b:92:f5:e4:3e:ec:
72:a8:41:cf:89:2d:3c:df:d5:03:f8:a2:33:d1:e5:5d:5e:14:
ab:89:d3:84:ad:1d:04:36:f3:01:30:7f:04:a1:c7:fc:04:7b:
4a:6e:4a:ed:5a:3b:83:de:8d:f5:74:96:98:e0:0c:5f:40:ef:
f5:8b:91:54:ba:8f:90:b2:03:3c:5e:2b:03:df:83:51:ed:10:
7b:05:f5:b7:be:5c:2d:a8:4c:6d:f0:64:2d:de:bd:f7:e7:3d:
67:b7:8c:2a:df:f5:c5:89:39:a2:41:eb:5e:62:b5:d2:32:3d:
39:1d:a5:d7:75:32:e4:78:10:e7:16:af:73:93:97:85:d8:c0:
66:1e:9b:b8:09:08:e2:68:f5:5a:1a:1e:31:a0:f1:d3:00:61:
6f:e8:f6:1a:e7:d7:3f:15:36:0a:76:2d:9d:17:5d:b5:94:e1:
3d:c4:a3:3b:62:0f:7c:e6:67:d7:40:00:89:9f:20:62:b6:7c:
44:fc:76:f1:61:80:a9:7f:65:1c:17:0b:6e:0d:e4:70:89:6d:
cf:d9:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org