Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/163B766C850711EDB1865628C4F9AE02.roa
File: 163B766C850711EDB1865628C4F9AE02.roa (raw, json)
Hash identifier: lMvfrrxGNIIH+EDi7ULV8S5rzZ+4fPeguJdty3VcZdY=
Subject key identifier: 81:7E:C5:19:FB:24:17:90:18:C7:0A:96:1B:8E:53:91:18:F7:99:5D
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 0583
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/163B766C850711EDB1865628C4F9AE02.roa
Signing time: Mon 03 Apr 2023 01:11:37 +0000
ROA not before: Mon 03 Apr 2023 01:11:37 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.110.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Apr 3 01:11:37 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=642a27c8-04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:bd:a9:49:a0:5b:6b:31:3e:08:97:41:97:
63:01:77:93:14:e7:61:a7:9c:ab:7f:f7:6f:e9:32:
7e:2a:b0:e6:fc:82:78:21:d7:fb:15:70:0f:84:38:
b7:1f:76:08:dc:85:3e:db:4a:36:1c:af:d5:17:8b:
29:38:43:f5:57:da:df:63:00:ff:bd:0b:09:71:85:
dc:ad:a6:66:64:d1:4d:75:5c:84:74:2c:d4:14:2b:
c6:1e:42:ea:f8:ba:66:74:5c:93:aa:c0:77:8b:eb:
52:cf:d4:67:16:ae:37:64:e4:92:1f:4b:50:e9:5f:
7a:b6:16:fd:b5:b2:76:23:51:f7:b1:00:8b:5e:3b:
b2:84:59:5b:c6:b5:fc:5b:f1:9c:be:f0:ce:3e:5d:
09:77:fc:6f:d4:e8:4e:c5:68:16:99:d9:ce:22:a8:
22:7f:f6:32:f8:5c:2b:a7:47:d2:52:e5:da:f7:fa:
ca:36:f6:ca:dc:4a:33:0f:d7:88:61:7f:04:d3:99:
16:4d:89:56:71:eb:f5:aa:69:56:cd:46:5d:5a:27:
da:03:1a:49:37:0d:8f:cc:a7:ba:00:6b:34:be:75:
2c:97:b5:7e:75:34:c3:ef:f1:c2:b4:45:d2:d5:d6:
ce:a5:2f:dc:1d:4b:1a:fe:af:ed:2f:06:2a:94:3d:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:C5:19:FB:24:17:90:18:C7:0A:96:1B:8E:53:91:18:F7:99:5D
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/163B766C850711EDB1865628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:41:1a:8c:1c:87:d2:be:36:87:3d:11:b3:2f:3c:e9:6a:fa:
28:b0:08:c2:07:9d:d2:d3:03:77:ca:e7:12:64:21:69:e1:19:
75:ed:0a:94:c4:01:42:f2:f8:9c:20:af:3f:4b:09:20:1a:44:
8c:4b:88:c4:75:dd:bc:44:59:7d:ea:83:b1:71:55:a3:b7:78:
57:b6:ad:25:52:f9:8d:21:d5:2a:7a:56:6e:67:e2:2e:eb:b9:
89:7d:bb:66:13:c0:38:ea:10:e2:be:9e:ff:7b:df:c3:89:40:
a3:76:fd:91:81:50:69:30:fd:81:03:71:1e:75:0e:8c:9f:c1:
65:1c:ab:8f:3c:b7:a2:07:3c:6c:11:d3:43:aa:e2:59:2e:e4:
57:57:22:60:10:9e:a1:6d:57:5d:97:7f:e4:36:2e:fa:8b:d9:
32:aa:92:18:a6:24:a4:12:63:69:e6:6b:4d:91:10:49:f4:cf:
f4:cb:2f:f0:e5:5d:a0:16:9e:62:41:78:d6:b4:77:ff:d9:89:
b7:af:2e:16:70:d1:a3:55:14:01:59:c4:75:14:96:d7:97:7a:
3f:a2:31:6c:42:e9:55:64:36:6d:b7:ba:63:99:46:9a:28:3b:
be:40:cf:dd:f3:4c:ec:95:af:4a:33:98:4e:06:28:c5:45:d8:
8f:3d:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org