Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/D9537B7AB6AD11EAB3FD670AC4F9AE02.roa
File: D9537B7AB6AD11EAB3FD670AC4F9AE02.roa (raw, json)
Hash identifier: Wtw041tt9ovv6GG4HR5GsELytzEuG7C3mw3eVRmt43I=
Subject key identifier: 1F:63:3F:E1:93:DE:FA:65:0F:14:9D:F4:EA:24:64:2B:62:F5:F9:CF
Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Certificate serial: 0A6B
Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/D9537B7AB6AD11EAB3FD670AC4F9AE02.roa
Signing time: Mon 30 Jan 2023 20:47:08 +0000
ROA not before: Mon 30 Jan 2023 20:47:08 +0000
ROA not after: Fri 02 Jun 2023 00:00:00 +0000
asID: 139872
IP address blocks: 103.145.208.0/24 maxlen: 24
103.145.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Validity
Not Before: Jan 30 20:47:08 2023 GMT
Not After : Jun 2 00:00:00 2023 GMT
Subject: CN=63d82ccc-571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:ef:5b:93:c0:44:cb:40:54:9a:37:3a:2b:
b2:6f:e9:5b:63:87:4f:5b:28:03:54:83:72:f4:d2:
f7:10:d3:06:fe:37:ec:5f:54:65:74:fb:20:90:db:
65:e1:56:98:55:dc:0e:47:9e:5d:06:f0:03:19:4d:
90:fa:94:9b:6a:49:5a:8e:bb:5f:09:2f:55:eb:4e:
ea:ad:c0:56:0d:0e:e7:b1:f9:b4:5b:37:01:04:c3:
d6:c3:19:73:6d:ef:0c:87:b7:b0:e9:22:20:2b:a0:
40:eb:58:5d:c2:6c:37:21:7f:96:aa:28:ea:bf:5a:
0c:8e:e8:bc:30:eb:7c:86:b2:1c:f1:7d:4e:d0:f8:
10:c1:26:eb:38:f1:cd:19:09:67:20:46:1e:f6:20:
96:c4:13:d2:e6:c7:06:3c:78:31:0b:f0:6e:fa:90:
07:5f:89:8a:ca:38:98:4f:ed:b7:59:8b:cd:b7:35:
a0:98:06:3b:0b:4c:47:ad:a7:6c:9c:12:79:60:15:
6f:5c:c4:9a:c6:4f:55:5b:47:98:7b:41:d9:1a:05:
19:92:68:4c:49:b3:cb:5a:b0:66:51:df:f3:07:a8:
d5:64:dc:7c:11:b7:36:ba:af:82:38:42:1b:d0:4c:
31:b2:ef:9c:03:37:9d:63:a6:23:9a:69:a0:d5:ea:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:3F:E1:93:DE:FA:65:0F:14:9D:F4:EA:24:64:2B:62:F5:F9:CF
X509v3 Authority Key Identifier:
keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/D9537B7AB6AD11EAB3FD670AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:92:87:85:87:c9:51:c3:e1:db:85:bd:03:ec:f9:80:d9:c3:
1d:76:c2:ed:50:cd:fa:bf:70:dd:3e:fc:92:f8:42:5c:7c:6d:
d1:5d:46:7b:d2:d0:25:e4:e6:bd:39:1b:5f:62:0d:ae:3b:d6:
f5:46:a6:d6:83:d7:a8:ab:72:b0:31:ed:be:63:b5:1d:a8:30:
cb:d4:a4:e9:4f:ba:c3:1f:1f:71:55:e3:59:bb:7a:79:a9:73:
89:6d:67:dd:1f:72:61:44:a6:20:14:8e:4e:27:f9:c1:55:e3:
90:19:de:f3:ee:57:7c:1f:8f:a1:fc:cb:94:75:bc:3f:3f:98:
02:42:82:53:b1:0b:15:33:07:f1:e5:5c:eb:63:d4:3c:3d:62:
20:a8:76:2a:9c:9e:30:b1:b8:ab:01:95:de:b2:3c:a5:5f:5c:
00:d0:8f:2f:cc:0b:0f:54:80:54:c2:00:8d:55:f5:a1:cb:d3:
e3:2c:f6:b8:c8:00:18:b7:78:68:3d:0b:e3:6a:04:ab:80:50:
29:37:0e:94:44:15:d6:09:f9:64:56:7f:83:6f:c4:98:58:1d:
fd:ff:c0:68:b8:98:d8:a3:fd:52:56:f3:a3:d2:b6:52:bc:4c:
42:e0:17:f5:f0:4d:03:b2:c8:72:b2:92:6e:0f:83:82:f5:da:
17:e7:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org