Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
File: B446F4C2B59F11ECBBBE6980C4F9AE02.roa (raw, json)
Hash identifier: BUzMrSVT3iexWP5w2BJqSyZvD2jz3ACAvm+RHTxh6Zo=
Subject key identifier: 3D:F5:F8:FE:C9:0C:0D:14:2C:C6:66:31:3A:03:BB:63:B0:4C:68:F8
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0455
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
Signing time: Fri 20 May 2022 00:46:30 +0000
ROA not before: Fri 20 May 2022 00:46:30 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 103.54.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 20 00:46:30 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6286e4e6-0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:88:3b:8e:4e:0f:ac:35:b3:60:e0:95:be:
37:a3:8b:fd:bb:33:ae:3e:ef:94:d6:df:e7:2b:2b:
6b:8d:68:a9:c5:52:4c:ae:2a:09:82:ec:7e:a5:27:
60:8e:ba:6f:1f:23:16:b8:5e:88:52:d2:36:d3:23:
47:9d:f1:e0:eb:b8:1a:07:fa:26:ed:cc:96:34:e8:
d9:c6:d3:7a:89:e5:0e:1d:fb:14:d0:c5:36:60:66:
23:73:ff:9d:17:09:28:88:47:3c:e1:fa:43:e7:2e:
38:5b:bd:16:eb:42:2a:69:ad:ac:93:cc:74:6d:55:
5d:93:ae:ab:7b:10:a3:b4:f9:db:a3:4f:81:da:b5:
b4:e2:f4:fb:53:d9:20:c9:8c:f9:14:33:98:c1:a7:
2d:09:41:c0:f8:1a:2f:15:6e:2d:02:de:0b:80:79:
4e:ed:7d:d9:99:e7:8a:cb:cd:f7:fa:a1:fb:d0:f4:
ec:4e:a5:95:1b:c2:6e:b7:67:e1:de:6b:8f:d5:aa:
70:b5:9c:d2:6c:5e:93:aa:9b:02:f0:15:6d:bf:59:
d1:60:38:06:fb:2f:67:76:1d:b5:7e:b2:b7:3b:0d:
56:48:a2:00:07:fa:0c:69:c2:e2:2c:30:c2:59:2e:
50:8d:b6:7c:41:98:7d:7f:3b:2c:18:29:5b:94:cd:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:F8:FE:C9:0C:0D:14:2C:C6:66:31:3A:03:BB:63:B0:4C:68:F8
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:77:4a:a8:75:52:b2:1f:d7:cd:f0:a2:c9:d5:81:db:6f:
42:9c:74:69:85:90:f8:d8:ed:72:0f:50:53:2c:07:f3:21:8a:
10:7e:c4:f8:4a:36:28:f8:dc:1a:a1:8f:3d:d1:d6:db:a7:18:
07:55:96:26:08:b6:96:7b:16:35:20:3f:98:e9:58:29:b1:43:
e7:cf:42:0e:2c:7e:a6:60:d0:6c:b1:a1:46:f4:d5:f9:de:e4:
e9:e5:59:32:cc:91:77:52:f3:c0:b6:98:7e:51:cd:d6:93:4d:
e3:8b:34:90:93:f9:e9:37:83:62:a6:ad:f7:93:7e:d5:1f:b1:
85:65:7d:09:2c:eb:e3:5e:e9:ab:9a:b7:99:33:1f:56:d6:f9:
7e:77:33:10:24:d5:8c:d0:1b:85:40:e0:42:4d:0d:d5:7e:f0:
9f:0e:7b:8c:09:4d:e6:de:2b:5c:34:15:13:42:92:f3:6e:20:
1c:da:8c:59:74:e3:65:9d:d7:59:ee:83:58:bb:c8:b9:0f:0d:
2a:1f:6d:93:32:23:82:a7:10:c3:b1:cb:c6:cc:1d:f3:cd:36:
73:84:e6:a9:58:9c:da:1b:a3:87:11:44:dc:83:42:0f:31:2c:
14:3e:2c:27:2a:30:14:da:b5:37:79:81:e0:e0:b9:ad:06:99:
92:81:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org