Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
File: C6AD9C5A53DF11EC87359D24C4F9AE02.roa (raw, json)
Hash identifier: brVhur4sFwK8KOObkl47Su9RWTh10VJbft/2GG4bLHw=
Subject key identifier: 0A:14:E2:4B:9D:E9:06:AE:D9:24:B9:10:1E:1B:BB:D1:D4:6F:96:FF
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: C0
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
Signing time: Fri 03 Dec 2021 02:21:52 +0000
ROA not before: Fri 03 Dec 2021 02:21:52 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 30058
IP address blocks: 103.172.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Dec 3 02:21:52 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61a97f40-c711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:11:8a:07:3e:a8:cf:1d:08:18:4c:35:11:
74:cf:0a:02:7b:bd:cb:7d:58:bc:fb:fb:e4:1f:ab:
81:33:97:60:4f:f2:15:b2:85:ee:d9:a3:78:56:04:
69:13:f4:7e:8c:d7:ec:26:9f:7d:c7:8b:c4:1f:b9:
02:a1:19:09:03:86:13:9f:ce:12:13:62:b9:9c:fb:
77:4a:b3:ce:4f:bc:41:d8:d7:32:10:ce:73:e7:ff:
35:b2:5a:a2:b1:5d:e5:88:d9:51:85:3c:f1:dd:f3:
42:83:2f:07:3a:1a:1b:9b:49:67:ab:6d:67:35:8a:
81:bb:d2:c8:35:45:68:d0:9b:c6:7c:81:60:eb:c3:
66:35:7c:e7:5d:f7:11:b5:87:0e:f7:59:82:ab:90:
a8:87:ce:1d:3e:ce:af:6a:4b:cb:49:5d:be:14:51:
ee:0e:ff:63:c5:f0:7c:ad:2e:15:32:e6:b2:ac:ab:
9c:f6:b7:79:cf:a0:f4:3e:6c:f4:81:ad:9c:ce:ca:
0b:bd:93:aa:12:2e:7a:55:7b:a8:e7:aa:fa:51:ef:
05:05:60:d0:ec:d4:d8:00:e5:92:a3:7a:25:b4:55:
6a:66:9c:19:57:f8:42:67:85:bf:c0:37:61:fb:0d:
fd:55:8d:70:9e:6d:35:3f:1f:8a:87:29:a6:0e:ca:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:E2:4B:9D:E9:06:AE:D9:24:B9:10:1E:1B:BB:D1:D4:6F:96:FF
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.135.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:46:08:0c:95:a1:29:e4:c7:a0:28:2d:3c:86:52:bf:17:0a:
ba:89:e1:bb:33:83:6a:db:69:cf:94:67:26:86:0f:b3:76:71:
1c:52:ea:4e:0f:8d:e2:bf:4d:54:21:4c:ea:70:65:f3:29:8f:
10:2a:49:d2:f7:9d:1a:a3:93:5e:bb:16:20:50:17:ba:d4:d1:
d2:5c:10:9a:9a:d7:96:d4:78:04:b2:1f:94:bc:38:0a:53:0e:
c7:ba:1c:2b:da:62:c9:24:93:ca:03:14:ee:67:54:19:70:82:
c3:fc:e7:54:a7:52:37:42:9b:5c:aa:c8:11:f6:80:dc:d1:b1:
33:0e:e2:6b:09:a7:5e:1e:b7:4c:ba:da:62:64:7a:43:a5:a4:
a6:f2:d9:8d:80:8a:89:bf:00:b6:d0:ea:60:98:ed:13:83:4c:
56:53:d3:57:a1:ea:b1:72:72:05:ca:0d:12:7f:3a:03:69:bd:
d4:5e:71:fa:cd:1c:11:98:b5:b2:51:29:63:e2:5d:94:35:7c:
59:32:e8:e9:ee:2a:0a:19:bf:dd:d5:2d:f1:05:cc:7c:ba:e1:
8e:03:81:05:6d:aa:05:4d:c6:c9:d8:8a:9d:3a:3a:e0:cb:c1:
99:4f:7c:3e:0f:7c:bc:dc:75:0c:52:4f:fd:56:c8:09:1d:65:
fe:13:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:46 2025 by rpki-client