Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/D7B0870E4D8D11ECA325917CC4F9AE02.roa
File: D7B0870E4D8D11ECA325917CC4F9AE02.roa (raw, json)
Hash identifier: NMkzUzisnZAqAlQGpV9JB3xvAXQ0mZDcN9R8v3XBA/0=
Subject key identifier: 27:2A:32:8F:BC:66:16:55:06:18:C7:61:2C:65:A2:B9:C6:A8:D0:C6
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 04DD
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/D7B0870E4D8D11ECA325917CC4F9AE02.roa
Signing time: Fri 31 Mar 2023 01:31:58 +0000
ROA not before: Fri 31 Mar 2023 01:31:58 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 137455
IP address blocks: 103.2.240.0/22 maxlen: 22
103.74.200.0/23 maxlen: 23
103.74.202.0/23 maxlen: 23
103.109.112.0/22 maxlen: 22
2402:78c0:1000::/36 maxlen: 36
2402:78c0:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Mar 31 01:31:58 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6426380d-30f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:51:39:6b:5c:e0:06:09:6a:0a:dd:f9:bd:
c5:1a:5a:63:7a:37:09:f1:10:d2:b4:b0:15:40:16:
22:d4:27:c8:c5:9d:0f:3b:d5:95:fe:31:7f:a5:5d:
7a:bd:55:41:61:40:76:5b:20:e2:d4:d2:9b:7c:8b:
be:96:20:a9:30:4b:e7:17:52:4a:88:da:40:d9:7a:
01:7d:a1:03:c5:c2:c0:61:5b:58:db:40:7a:0c:58:
cd:2c:6c:44:9a:90:b7:6e:7b:14:70:8e:e1:c9:84:
6a:3d:0a:ee:4f:2f:a8:8e:e1:d1:93:2f:b5:b1:01:
5d:f3:89:d5:9a:8b:76:85:73:b8:0d:94:7d:db:fd:
40:58:79:a8:fb:ca:12:5a:62:1f:58:14:5c:b0:6d:
a6:66:56:ef:c5:e9:03:38:59:51:bb:c0:f8:0e:24:
9c:7d:c9:48:c6:56:16:cb:ed:91:b7:b8:97:fa:de:
50:2b:6c:9d:1b:49:7d:6c:bb:b9:7a:0c:2d:ce:53:
45:22:06:ac:5a:83:77:df:db:c5:cb:39:f2:82:9e:
97:5a:f3:8d:8b:38:4e:a5:50:fc:29:2b:8c:f8:80:
20:d6:4b:bd:20:af:ac:b8:f3:e3:90:e2:78:4e:78:
a0:fe:e4:bf:46:44:9a:6b:40:16:a2:f4:e5:4a:1f:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:32:8F:BC:66:16:55:06:18:C7:61:2C:65:A2:B9:C6:A8:D0:C6
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/D7B0870E4D8D11ECA325917CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.240.0/22
103.74.200.0/22
103.109.112.0/22
IPv6:
2402:78c0:1000::-2402:78c0:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:c9:da:b5:88:27:62:98:65:a4:93:85:21:1d:1a:21:55:cc:
ed:76:4f:19:2a:e3:48:80:36:eb:34:7e:34:51:b0:7b:5e:62:
3f:d4:fe:98:31:90:de:9d:00:d1:dc:a3:e2:17:b5:6f:72:e9:
ee:63:e9:61:53:14:6e:49:f6:1f:d7:4e:1e:09:ca:d3:17:ce:
72:cf:ea:d5:83:86:04:af:72:c5:35:a2:0f:c2:bb:08:c0:d6:
fa:02:3d:96:d8:42:37:80:84:02:b6:60:64:2c:fc:50:a7:e6:
08:b9:dc:65:91:c4:ce:24:36:59:60:f2:c4:1a:87:de:bb:6a:
f1:64:ca:cb:12:b9:c1:ea:20:b4:b1:1d:9f:4b:56:4d:48:b2:
94:03:b3:f0:29:da:27:0b:90:fb:f1:5f:a3:b6:95:22:58:39:
4a:98:f7:b5:0d:f0:57:2b:64:ab:69:12:58:c7:a1:02:fe:7c:
f9:b2:e6:6d:61:e0:2a:68:fe:a7:78:fe:20:a6:92:6d:b4:a6:
2a:40:85:37:1b:d3:b9:3a:40:8c:41:88:7d:b2:c7:a8:5f:03:
22:c0:5f:3a:2e:f0:91:9a:2d:51:ac:ef:2a:65:23:6b:ff:bb:
73:33:5b:ee:24:29:99:bb:b8:2c:4b:78:84:fd:78:f1:95:2c:
76:b4:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org