Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
File: AAEE51D4A9EC11EE800F7626C4F9AE02.roa (raw, json)
Hash identifier: zjLP8YcqehVgErJ8jrRVX2yQpUwpELIA2MJhS+gL/m0=
Subject key identifier: 10:AA:E0:DF:BB:1A:77:53:48:86:D3:C3:FA:48:5A:D1:4A:63:43:DE
Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Certificate serial: 04
Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
Signing time: Wed 03 Jan 2024 04:00:44 +0000
ROA not before: Wed 03 Jan 2024 04:00:44 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 139901
IP address blocks: 103.85.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Validity
Not Before: Jan 3 04:00:44 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6594dbec-3ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:5e:ce:95:57:75:64:05:e5:40:4e:01:f3:
fc:9f:b9:8b:38:40:40:d7:80:d8:1a:2e:00:91:51:
be:5d:82:07:92:d2:97:80:e4:b8:bf:a9:b7:2e:f4:
1b:0a:29:94:cc:63:8e:67:00:c4:98:34:73:5a:6a:
fd:af:75:89:73:f5:4b:f0:ce:4c:cd:1f:fa:a9:5d:
6e:37:1e:79:6f:7c:cc:ea:c1:dd:53:58:b7:4d:bc:
dd:31:d5:57:f9:c9:db:c7:6a:a4:f6:8c:ed:b0:17:
c0:75:51:d5:6e:07:5f:96:cb:bc:26:37:a8:ae:48:
e8:ac:81:6e:f7:08:5a:71:7f:fb:1b:d3:d2:ec:12:
fd:69:e9:6b:34:22:ac:38:fd:9f:b1:47:e0:f3:fa:
53:e8:d2:ce:d0:ad:2a:f6:bb:98:4c:a5:af:ed:1f:
52:ef:04:f2:e6:b1:65:09:7f:63:70:0f:da:21:4d:
3b:1f:64:80:6a:0b:e1:20:37:f8:46:c8:22:d3:95:
e5:36:f3:ca:5d:8a:61:45:75:d6:4c:72:c5:9c:33:
d2:4e:e9:e7:e7:13:65:0d:b4:44:9c:83:cb:ee:40:
6e:51:ae:1d:d6:f2:44:56:f4:9d:88:d7:72:ae:05:
ac:63:71:ea:9b:51:2e:1a:60:1c:e8:79:a1:0f:3b:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AA:E0:DF:BB:1A:77:53:48:86:D3:C3:FA:48:5A:D1:4A:63:43:DE
X509v3 Authority Key Identifier:
keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AAEE51D4A9EC11EE800F7626C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:90:d6:83:57:95:e3:84:54:b9:9c:80:e6:33:f3:4b:15:
ab:56:3a:81:28:02:32:5d:2a:24:13:6e:e5:5d:84:f3:d4:fe:
b4:bc:a6:14:d7:6d:5d:90:ec:5a:3e:4e:7d:92:7e:f7:c3:9f:
88:2a:9d:87:5e:eb:2f:c8:17:e5:41:15:03:53:13:13:df:30:
3d:b3:03:4d:15:01:3d:67:63:38:9a:ed:c6:b6:06:61:6c:a3:
f1:51:59:e1:60:53:15:5b:30:bd:64:97:08:56:49:d1:6d:43:
76:44:67:c8:bf:bd:7b:ae:22:20:5a:1c:1a:6a:a0:d4:92:82:
dd:17:6a:61:52:ed:aa:a3:cf:60:76:1d:ec:c6:6e:8a:b1:ec:
48:c3:bd:a5:09:01:8c:73:83:5b:4a:3a:d3:cf:be:a7:f1:7e:
9d:ea:c4:0c:c9:42:db:16:10:f7:39:ff:63:39:d8:d2:da:9f:
dd:8a:41:49:f8:d7:dd:4a:90:c1:c2:b0:06:ea:92:60:02:1e:
fe:ee:57:c9:a4:28:e9:41:ea:64:f0:4c:09:d7:a3:7e:08:21:
9f:e2:d9:21:1d:8e:45:25:9f:18:13:2f:57:12:18:9e:04:6e:
28:24:4d:48:24:08:3e:9f:7f:0e:72:0f:09:67:bb:07:d4:ed:
c5:d5:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org