Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7057603AA0ED11EAAD5AB276C4F9AE02.roa
File: 7057603AA0ED11EAAD5AB276C4F9AE02.roa (raw, json)
Hash identifier: xoqVvdGlLTi+9SFiQiJTzJxyr8Y1XMWh55u7kxZ2IgM=
Subject key identifier: A8:FB:E2:A7:DC:00:3A:A8:43:95:A1:3D:6C:4D:7B:B3:83:65:8D:96
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 067B
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7057603AA0ED11EAAD5AB276C4F9AE02.roa
Signing time: Fri 21 May 2021 20:24:29 +0000
ROA not before: Fri 21 May 2021 20:24:29 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137020
IP address blocks: 103.137.162.0/24 maxlen: 24
103.137.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: May 21 20:24:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60a816fd-5ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:36:da:29:88:b1:5b:52:d6:48:c3:44:de:
5c:f2:18:2d:41:a5:a0:3a:51:24:10:45:e0:fd:b8:
cb:75:d1:57:7d:a6:5b:91:a8:f9:41:4b:4c:e2:eb:
e4:78:17:d5:c3:b7:32:c8:85:4c:a9:11:79:80:45:
7a:76:50:a6:f3:13:4e:7e:b5:22:36:81:28:17:cf:
71:40:12:9c:9d:e7:f8:6a:89:64:2e:c9:98:8e:c8:
f1:25:aa:df:f8:3b:f5:d1:e8:71:aa:00:b4:2c:41:
3a:58:5b:28:33:a8:13:84:f2:6e:9b:3d:6b:08:b8:
37:12:35:7c:b5:9e:32:e5:5e:7e:b3:08:35:ba:00:
3e:1b:0a:09:34:f7:12:b0:30:20:86:28:a8:c2:b0:
d0:2e:6a:b8:84:48:e4:2c:56:0c:cf:97:38:9a:1f:
e5:97:00:1f:a5:f4:30:66:72:e0:db:6d:7c:c0:85:
85:78:dc:ce:f5:a1:fb:cb:55:06:5f:93:16:22:c1:
81:eb:6e:49:09:d4:20:39:c3:6b:a6:fc:e7:af:1f:
b2:e7:96:2d:8f:ff:8f:92:55:cd:5d:a5:c2:3c:f9:
f1:d1:94:af:46:db:2f:29:e6:a0:b2:4a:e0:61:c4:
2e:94:30:5d:8c:a6:81:ec:a2:c3:65:82:13:7f:45:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:E2:A7:DC:00:3A:A8:43:95:A1:3D:6C:4D:7B:B3:83:65:8D:96
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7057603AA0ED11EAAD5AB276C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/23
Signature Algorithm: sha256WithRSAEncryption
96:9c:58:37:0d:62:56:f6:3c:af:6c:68:25:07:7c:99:eb:06:
9e:17:06:82:14:a9:fa:d2:28:b0:98:dd:55:7b:8d:d6:fd:18:
07:2e:a4:cf:76:11:62:e0:53:a1:78:97:5e:d2:55:a8:66:95:
94:a8:ce:63:d7:d7:83:05:3c:1a:1b:d1:5c:af:1c:69:11:d2:
1e:9e:e8:97:b1:93:db:ec:f1:4e:e5:5e:21:c0:57:78:90:21:
cf:09:b2:c3:dc:90:eb:96:cd:6d:1f:c0:e6:7a:4f:10:0a:f5:
82:56:be:ee:6b:dd:8d:58:05:e1:59:84:85:f5:75:6a:e7:48:
89:c3:22:e9:d6:a0:4e:c3:89:8e:95:9d:93:77:13:0d:5a:f9:
f7:0c:82:da:cd:2f:89:6d:41:be:84:49:07:01:fc:e4:77:ef:
6f:34:53:18:8a:f5:e3:3c:98:f4:0e:1b:b3:02:d8:e6:9c:d9:
24:cc:da:2e:97:a6:27:7c:49:43:6a:f0:e5:12:cc:4b:f6:13:
60:16:01:ad:d3:c0:d6:00:38:60:83:0a:a0:1a:bb:ac:dd:ee:
24:15:ee:f4:91:3d:cc:fc:0e:4e:38:b9:85:1c:d1:93:5c:6a:
7c:0f:2d:02:d5:da:5a:f9:39:97:32:a0:83:38:3d:d2:60:f7:
d0:6d:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org