Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7B83C40CE18311EC9F76C50BC4F9AE02.roa
File: 7B83C40CE18311EC9F76C50BC4F9AE02.roa (raw, json)
Hash identifier: HChU9jt3xGdcgZ3xFXiA7MeDOXLNs+UhiK451h88l80=
Subject key identifier: 64:27:01:21:E4:B9:E7:94:9D:0A:3D:C1:F5:45:C0:7E:83:68:2E:32
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 09AB
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7B83C40CE18311EC9F76C50BC4F9AE02.roa
Signing time: Mon 20 Jun 2022 19:58:46 +0000
ROA not before: Mon 20 Jun 2022 19:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137020
IP address blocks: 103.137.162.0/23 maxlen: 23
103.137.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Jun 20 19:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b0d175-2e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:79:50:9f:d5:f4:c7:91:72:a6:9d:32:5e:
05:48:e5:89:ac:df:47:17:2c:61:e2:21:81:9f:a7:
eb:57:4e:1f:e5:8e:98:b2:c2:81:8b:9c:19:39:30:
5d:e6:37:4e:4f:07:7a:7a:82:ff:2c:b7:4d:6b:91:
92:3e:3a:48:50:0d:67:00:5a:a5:b7:f1:0f:dc:e9:
11:dd:1b:65:b2:ec:54:0d:b2:02:7d:a7:f0:9d:5e:
7c:54:74:05:4f:87:1a:06:bf:06:4a:f8:bf:15:78:
2c:74:c5:74:47:bd:68:0f:07:0b:d5:74:01:11:48:
a0:94:a1:86:5c:85:da:0e:55:22:9a:8d:fa:b0:24:
3a:2c:ae:e9:61:3e:57:0a:b9:23:91:88:f5:06:49:
e2:32:1c:4d:4c:cf:4f:b3:c3:9c:c8:bb:17:31:19:
0f:e0:50:e4:d0:c7:d7:7c:9d:ae:16:08:f3:20:60:
48:db:8c:2b:99:f8:ad:3b:d0:66:36:91:b2:57:2a:
87:4f:99:f6:3a:38:3c:12:01:36:0a:12:59:c2:0f:
5f:e3:d1:80:5c:cb:e9:20:0e:e9:08:40:71:57:a9:
d8:25:50:61:d5:2c:1e:8d:9f:29:66:6d:97:c8:8d:
26:4c:9a:9b:4f:4f:43:b4:7a:3a:0d:2f:c5:f4:ef:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:01:21:E4:B9:E7:94:9D:0A:3D:C1:F5:45:C0:7E:83:68:2E:32
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7B83C40CE18311EC9F76C50BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:01:5c:f6:fa:86:07:32:13:fc:f7:6d:a5:78:75:00:91:c0:
a4:ab:4e:38:98:8d:24:81:af:16:76:6b:ab:3d:26:fc:7e:ab:
3b:90:ed:25:71:0f:31:78:26:03:57:b9:64:2d:5d:76:97:b8:
9e:9e:70:c4:27:4c:73:68:6d:d8:d9:26:03:c5:a6:9e:3c:27:
a7:c5:8e:de:3b:47:8f:f6:c2:6b:89:51:d1:ac:36:69:23:fa:
d0:3d:37:3e:4e:08:04:95:03:48:ac:37:5d:a8:c3:3c:5f:6d:
df:01:11:21:e0:f5:a0:b3:f3:b9:a9:ff:4e:4f:4b:83:28:41:
9f:d3:cf:59:4b:ab:d6:dc:fd:d6:06:59:39:48:f1:42:85:d6:
97:e8:5b:11:3a:32:7d:ef:92:2e:40:6e:03:bb:e3:0d:8f:b6:
83:97:3a:ef:35:d5:ea:ac:68:b8:7e:83:05:cb:47:87:dc:5d:
14:6d:3c:e0:af:c8:48:60:7f:98:ab:76:ef:2f:aa:91:80:c1:
f9:e9:bd:4d:8a:00:fa:07:15:6a:cd:a4:59:1c:f7:2f:c5:ef:
07:69:4a:6b:04:4e:fb:1d:61:64:5f:75:1b:c7:c3:66:79:1c:
1c:e6:a9:a0:9d:12:a8:40:b6:25:53:f8:14:8a:08:ff:50:8a:
1b:80:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org