Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7CAF65B6E18311EC9F76C50BC4F9AE02.roa
File: 7CAF65B6E18311EC9F76C50BC4F9AE02.roa (raw, json)
Hash identifier: olTXaT0jFzDyfj06ExDTfW7ssf+LyiUEmXBin3KILaU=
Subject key identifier: 29:4E:0E:82:D3:A8:48:24:3E:FF:AC:93:B9:37:8B:AE:3D:EF:80:00
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 0ACF
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7CAF65B6E18311EC9F76C50BC4F9AE02.roa
Signing time: Fri 24 Feb 2023 16:46:37 +0000
ROA not before: Fri 24 Feb 2023 16:46:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138954
IP address blocks: 103.137.162.0/24 maxlen: 24
103.137.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Feb 24 16:46:37 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63f8e9ec-4fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:e1:cb:1d:37:2f:ad:0d:4f:5b:e9:a1:93:
73:df:21:f9:2a:ab:b8:a9:50:95:d3:f6:32:db:ac:
df:cf:5f:43:19:5e:55:65:57:05:85:84:e5:1a:42:
eb:d3:b6:d6:d5:b5:4a:4f:eb:db:72:be:f5:31:71:
2a:f9:40:2b:84:dc:ae:74:43:f9:3c:a6:0c:dc:a9:
1c:12:22:a1:ee:ad:ed:e2:99:3f:0f:45:ed:5f:5e:
17:ab:2d:cc:fb:59:16:f9:cc:18:0d:3a:d8:74:3d:
c7:5a:11:77:00:c3:07:44:ac:e1:ac:60:24:41:9e:
54:56:ae:04:2b:e0:bd:56:21:cc:0c:72:0a:d0:ac:
84:d4:57:f2:ab:64:0b:e0:d1:84:5f:d3:e8:cf:86:
0a:fb:97:7d:b9:43:e2:5c:bd:3f:04:eb:f0:14:75:
46:ab:42:5d:6e:0b:28:5f:ef:62:dc:e5:82:42:8a:
52:43:20:76:ab:08:f6:f0:9e:b8:29:29:50:34:df:
31:75:1e:4e:9e:51:64:65:3a:d1:65:11:c9:1e:ff:
4b:18:e4:9a:96:ae:4d:4f:bd:fc:2e:2f:63:8e:8a:
14:f5:c4:d0:73:83:b2:15:78:8b:c3:a6:cd:b0:92:
1d:bc:3d:8c:ec:39:e3:d7:58:6c:06:37:eb:d0:4e:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:0E:82:D3:A8:48:24:3E:FF:AC:93:B9:37:8B:AE:3D:EF:80:00
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7CAF65B6E18311EC9F76C50BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/23
Signature Algorithm: sha256WithRSAEncryption
55:40:b2:13:2f:d3:01:51:95:3b:f6:00:37:f7:a2:76:27:3f:
36:8a:2c:37:e8:7f:f1:21:3e:fc:ed:76:2b:29:aa:10:f1:29:
8f:c6:80:90:93:b3:ff:35:ec:f2:92:bb:30:13:ce:b1:9b:3a:
93:62:8f:f9:d9:a5:2e:53:70:6b:69:40:14:fa:e0:b8:54:17:
65:da:40:17:92:ed:07:8a:a9:9f:1c:e1:d7:54:7a:fc:33:94:
0f:38:a7:cb:58:44:61:fe:b1:60:d5:bf:b7:11:1e:0b:2c:e5:
bd:08:0c:ab:13:8b:79:2a:2c:e1:b3:59:8e:12:d2:67:58:85:
14:c1:ed:71:d6:42:a4:00:ce:32:77:e7:0b:d7:c0:dc:f3:1f:
81:c2:59:a6:40:a8:f3:5e:e3:27:a4:ab:5b:21:66:b6:9e:46:
30:cb:88:af:09:37:85:8f:be:db:38:64:c6:90:1e:d8:15:fc:
97:77:e9:d3:1d:16:4b:03:b6:e1:c2:0d:7f:57:cc:6d:08:c5:
f1:28:1b:49:a4:d4:58:9a:58:c6:05:d9:db:bf:59:c4:08:c6:
a9:f7:f0:8c:21:14:18:f3:f6:0d:58:b6:b8:84:82:0a:d0:c6:
68:d5:0f:aa:ee:4d:7b:86:45:31:0c:7a:d5:43:be:bd:04:6e:
6f:dc:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org