Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/F543B9A689B711EC852F8221C4F9AE02.roa
File: F543B9A689B711EC852F8221C4F9AE02.roa (raw, json)
Hash identifier: sXcczTFxfOFY9ikPJSOW/zdgYvMY/XXIEd5Ww7Hf47c=
Subject key identifier: 8E:0D:11:33:31:58:5B:FF:C7:CC:76:88:B8:7E:4B:88:55:C4:3B:37
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 0219
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/F543B9A689B711EC852F8221C4F9AE02.roa
Signing time: Wed 09 Feb 2022 14:52:53 +0000
ROA not before: Wed 09 Feb 2022 14:52:53 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137449
IP address blocks: 103.167.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Feb 9 14:52:53 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6203d545-d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:b5:af:64:eb:b6:c1:b5:ba:4c:a2:54:03:
c4:49:c4:1b:24:6b:63:12:fa:98:45:90:69:2e:8e:
a1:d2:f8:de:04:19:9c:02:7d:a7:f5:9b:56:8b:00:
26:12:b9:bf:4a:ad:0e:58:23:8e:07:51:14:0e:99:
99:58:b8:95:d5:c0:35:f2:4a:8d:db:a8:bd:da:39:
95:c0:7f:92:08:c0:a8:5a:37:4d:aa:0b:0d:89:31:
10:c3:95:46:cf:ba:54:98:ee:04:84:2f:bf:36:1a:
f0:34:53:9f:a0:ac:f1:b4:ba:65:3d:1b:6a:81:ac:
ec:0d:92:1b:b1:17:04:67:6c:75:c0:09:8c:f7:b8:
01:90:ad:66:1c:df:d9:bf:47:3c:a6:c8:ec:53:16:
cb:67:c2:8f:d6:56:76:94:4b:cb:6c:7e:44:44:01:
85:bf:82:41:b0:77:dd:ed:3c:7e:b0:92:67:78:c3:
0b:b9:b4:ba:8c:2d:91:f3:14:86:7f:2e:93:a4:61:
bb:69:74:f2:61:85:d2:26:4d:3f:1d:3e:18:25:7b:
a9:eb:91:83:25:43:a0:98:4b:6d:d6:05:ab:7a:d6:
ec:77:48:2d:11:85:f2:22:9f:c3:7c:06:52:e7:46:
42:48:b2:21:9d:ad:7d:7c:e3:f6:7f:ce:42:ca:f9:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:11:33:31:58:5B:FF:C7:CC:76:88:B8:7E:4B:88:55:C4:3B:37
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/F543B9A689B711EC852F8221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b7:62:4c:2d:06:7b:32:ec:39:20:cc:8f:8a:a5:a5:d5:89:
df:75:e0:8f:c6:98:99:f6:d2:c0:66:3c:9d:9f:f7:b8:35:43:
ff:bb:d7:f0:b2:65:ef:da:66:93:52:97:a7:5f:fc:52:01:cc:
72:bb:8e:b5:45:b3:01:f8:d5:4c:ad:94:59:ca:c6:ad:dd:a8:
3c:7b:33:bf:f3:98:1c:19:cc:3c:f3:42:9f:f9:19:e2:81:65:
5a:aa:96:dd:cb:b5:c8:96:bf:81:28:7c:52:6f:6e:3c:b1:1c:
56:b1:84:90:c5:1f:ac:be:fe:ec:3e:ab:cd:64:b1:4c:b9:44:
d1:3f:d9:cd:e5:1f:9e:a5:7d:ca:69:3f:f2:d3:0e:39:99:98:
3a:01:6c:9b:63:b8:32:23:14:7d:bc:c4:fe:d7:3e:ec:9b:0e:
09:90:c4:05:82:8b:f1:e9:23:79:30:34:52:0e:98:91:bd:5e:
b7:c1:17:d6:e1:d2:ee:ad:ed:dd:e6:35:d0:21:8d:86:81:af:
54:f2:05:9b:77:5f:49:06:9b:cd:df:86:ea:9e:92:89:8b:98:
bc:4e:ac:73:fa:32:b2:1e:f5:f3:3e:ae:03:4d:11:e6:0d:5d:
90:00:c4:ea:44:a2:26:f5:40:65:47:aa:f3:b6:d5:c1:4f:b4:
e5:8c:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org