Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
File: 03A227CC1BAB11EEB972495AC4F9AE02.roa (raw, json)
Hash identifier: tO7Ouafzk+qeKRTjpc2Vy9SuSXVtKlwiuNhuN6UrBYo=
Subject key identifier: 96:78:1F:EA:EA:D6:64:48:90:8C:E0:01:56:93:D6:2E:EB:31:49:AE
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: A9
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
Signing time: Thu 06 Jul 2023 03:13:01 +0000
ROA not before: Thu 06 Jul 2023 03:13:01 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 834
IP address blocks: 103.4.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Jul 6 03:13:01 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64a6313d-b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:3f:f1:59:85:5e:3b:26:62:ec:b9:e8:5e:
13:f5:aa:0b:82:6f:b2:e6:46:62:fd:72:71:56:5f:
c9:7e:c5:d6:db:1a:1f:79:36:2b:e7:f8:9c:f2:0b:
19:c0:5a:ea:a8:cc:49:91:86:97:7b:80:b9:95:1a:
85:2a:2a:58:52:f1:ae:8a:ca:88:41:dd:7a:90:a7:
09:aa:97:e2:5a:17:16:43:14:37:69:b7:8b:67:b5:
46:f1:0d:81:52:38:57:3f:8c:71:cf:6c:e6:4f:44:
97:91:44:3f:59:52:e0:7b:2c:78:41:be:5d:4d:e4:
d8:e8:2d:4a:a5:d2:04:d1:6a:15:1e:31:b9:bc:6c:
d2:b1:b8:32:ba:93:a6:9b:52:14:8c:a0:07:96:60:
7c:36:c4:13:67:72:95:b9:52:e2:7f:7d:32:c1:ef:
0c:4f:5e:63:ab:7c:ac:63:ef:25:36:d3:19:3c:e3:
fa:6b:c5:e1:b3:78:a5:6f:4a:9d:d1:df:47:8e:e9:
86:ff:05:a1:c5:b3:08:bb:a5:f9:74:35:b4:04:ff:
6f:1c:82:67:61:63:a4:e3:30:97:4a:e6:ac:da:36:
bb:3a:62:b6:1a:b2:91:f3:8f:fe:8f:dd:76:8b:18:
9e:c7:af:95:3f:6d:9a:c0:16:58:17:0a:ba:cc:7f:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:78:1F:EA:EA:D6:64:48:90:8C:E0:01:56:93:D6:2E:EB:31:49:AE
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:34:e1:4b:49:8b:1d:f0:09:9d:df:2b:e3:fb:bc:70:b1:ec:
1f:42:21:38:43:60:bd:fb:80:17:26:51:3b:be:51:75:8c:be:
c7:10:b4:a9:3e:c6:6a:6b:29:fb:c5:94:1a:a4:8c:8b:e0:26:
4c:27:f5:9a:5d:74:ef:3a:73:04:50:f0:74:d2:9d:ab:da:8d:
a8:2d:bc:5d:c4:df:17:42:b2:3c:13:7d:48:3e:40:e3:c3:24:
0c:ea:fe:bc:19:83:58:08:b1:df:33:6a:a3:7a:33:7b:fb:97:
e1:9f:21:f7:09:9c:98:52:7c:02:8e:59:07:99:55:be:57:5a:
0b:75:b3:8c:1a:3e:d1:be:47:a7:ce:87:88:f2:9e:f0:0a:64:
3d:a1:fa:e7:0f:07:1f:33:db:c8:75:46:cf:e2:ca:ff:c9:69:
3c:1c:01:04:4b:c6:64:42:b3:8e:61:9f:74:51:11:6c:3f:6b:
b0:97:ea:16:99:d7:bc:6b:5e:7e:74:fa:57:48:2e:0a:d9:43:
1a:67:85:0c:5c:6a:fd:0a:a9:d5:69:28:6d:29:5b:ab:dc:da:
16:a2:fd:5e:92:a2:eb:43:1a:96:17:44:25:eb:a5:b5:30:93:
e1:7e:d2:49:61:76:76:dd:38:07:12:86:46:10:2d:1f:96:d5:
0f:0f:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org