Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/7EE46EC6845C11EE845EB417C4F9AE02.roa
File: 7EE46EC6845C11EE845EB417C4F9AE02.roa (raw, json)
Hash identifier: rRMF4V28brrjYoChzxi3SyJlUhWxGwx1AB0DHnlA7V0=
Subject key identifier: 4F:27:ED:AE:06:EC:58:FF:23:65:C5:99:63:93:24:CD:90:66:94:E6
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: FC
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/7EE46EC6845C11EE845EB417C4F9AE02.roa
Signing time: Fri 01 Dec 2023 05:16:13 +0000
ROA not before: Fri 01 Dec 2023 05:16:13 +0000
ROA not after: Sat 30 Mar 2024 00:00:00 +0000
asID: 150311
IP address blocks: 103.250.28.0/24 maxlen: 24
103.250.29.0/24 maxlen: 24
2001:df1:4540::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Dec 1 05:16:13 2023 GMT
Not After : Mar 30 00:00:00 2024 GMT
Subject: CN=65696c1d-6fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:63:40:e5:bb:ee:ec:6e:8a:0f:b0:b7:d0:
4e:a4:30:a8:8c:12:bb:8a:07:a8:d9:70:a4:83:61:
ba:eb:fc:29:64:34:45:e2:1d:fb:61:43:37:6e:85:
35:10:3d:0a:a0:ae:52:dc:e4:e2:75:da:f6:e3:7f:
b1:5f:2b:0e:ab:7c:1c:0e:cd:33:e1:7b:2c:01:3b:
5d:87:a2:26:36:4c:63:72:d2:a0:3e:f0:01:8f:04:
80:e6:36:cd:9d:55:52:a3:19:95:7b:73:92:73:88:
38:88:28:3d:3a:ca:9d:d9:04:03:bb:e9:66:a4:f3:
91:0c:47:c5:0c:32:ea:b5:21:34:b3:9e:7c:98:20:
6f:60:5a:d8:1f:4c:c9:e4:a3:b4:e7:d5:9e:46:03:
4d:e6:61:51:44:50:68:c0:66:a8:9b:69:bf:69:2d:
b7:9e:43:6b:46:f9:88:47:89:91:09:63:09:a9:ca:
29:69:fd:21:2f:65:87:74:f4:ef:20:f1:57:b3:58:
dc:65:8f:3b:b4:8d:aa:3e:36:c7:0e:b9:f9:c1:d8:
bd:02:42:1e:5d:c5:04:84:7f:ab:ae:0c:f2:8b:57:
7d:4b:03:0d:07:ba:98:d6:75:57:1c:8d:f2:03:cf:
4e:2a:ae:28:97:92:db:cb:42:a9:14:c3:71:86:0b:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:ED:AE:06:EC:58:FF:23:65:C5:99:63:93:24:CD:90:66:94:E6
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/7EE46EC6845C11EE845EB417C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.28.0/23
IPv6:
2001:df1:4540::/48
Signature Algorithm: sha256WithRSAEncryption
45:f7:5b:e1:71:e0:e9:3b:73:3f:f9:ff:c2:ec:72:34:7b:9d:
1a:d3:17:a3:f1:15:64:71:3e:2e:fb:0c:07:8f:04:46:0b:b0:
aa:09:bb:46:b7:0d:bc:69:7b:8b:56:1e:7f:fc:5a:20:86:62:
1c:57:07:68:61:b3:e2:47:e5:76:0b:5e:75:8b:8b:94:b1:07:
61:97:19:20:49:12:3c:c6:73:02:25:0b:44:cb:74:ec:97:67:
a1:8a:fb:ef:98:af:8d:98:0c:c3:fc:b0:69:ca:d5:11:d2:fa:
73:e1:16:ab:8b:e5:c2:39:1c:10:d1:e5:89:73:e6:db:dd:77:
6d:a9:92:9c:e2:f3:bf:0b:20:cd:c5:58:4d:3b:ec:3a:04:cb:
48:b8:23:26:b4:73:09:0a:b6:44:c8:a5:7c:58:78:cd:47:83:
96:1d:b5:e0:24:9f:a0:f0:78:5c:35:66:30:5c:f8:ce:33:97:
ae:b7:9f:47:b7:09:0f:3b:3b:de:c5:05:5d:b3:45:82:8d:85:
64:90:c7:bb:49:c6:dd:bc:8d:d4:a6:e5:18:cf:5d:cc:ad:f9:
e7:9b:4d:81:89:e3:60:9e:76:9a:3a:e3:56:14:3c:33:d2:2e:
81:56:54:30:fd:c1:17:3f:22:d9:13:e3:97:52:2d:68:87:47:
b6:a7:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org