Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/DB43C3D00C1D11EF8B2F2974C4F9AE02.roa
File: DB43C3D00C1D11EF8B2F2974C4F9AE02.roa (raw, json)
Hash identifier: S1oB1FgYG6oRugS07bHj6v8e+0SoQobzoUjCWEJ1f9A=
Subject key identifier: B9:1B:F7:DA:33:23:36:4D:3F:B8:2C:09:C3:D1:B3:DB:CE:6F:88:9A
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 0C
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/DB43C3D00C1D11EF8B2F2974C4F9AE02.roa
Signing time: Tue 07 May 2024 03:06:28 +0000
ROA not before: Tue 07 May 2024 03:06:28 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 55649
IP address blocks: 103.215.40.0/22 maxlen: 24
144.48.216.0/22 maxlen: 22
144.48.216.0/24 maxlen: 24
144.48.217.0/24 maxlen: 24
144.48.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6
Validity
Not Before: May 7 03:06:28 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66399ab4-c11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:73:35:b6:33:56:cb:6b:9e:1a:65:9c:0b:50:
96:41:78:52:52:f9:d1:ca:1f:cd:37:65:e2:f1:cd:
34:3c:c4:7e:6a:ca:a5:7a:29:54:ca:c4:de:b0:1a:
46:1f:ac:b8:d6:f1:98:99:1f:00:04:0e:fc:1e:ac:
31:72:ee:bc:a7:7f:e9:f4:45:90:fb:f2:be:b8:40:
63:b4:75:34:ab:79:c4:16:18:a7:e1:ce:6a:85:e5:
34:52:6a:70:ee:27:e2:77:4e:ba:74:15:8f:5a:eb:
56:d9:56:28:d6:59:63:76:f8:77:f9:46:d6:2e:d2:
42:1b:65:57:f7:bf:67:1c:c5:d4:0b:4e:5d:3c:dd:
24:0b:a6:d9:b7:2c:b3:69:6e:69:e4:ab:b2:e3:9f:
8d:ef:c7:e6:f0:98:ca:ce:51:0a:a1:7c:08:5a:de:
71:f5:f4:06:65:ac:8d:ed:4a:cc:c1:3d:4b:41:7c:
a3:ce:f8:cb:fb:3f:0e:4f:ec:9a:6f:7b:d7:a3:7e:
59:df:97:85:61:21:21:cb:40:35:05:45:ac:c8:67:
6d:0b:cc:c3:35:74:c5:ea:29:08:5f:cd:4e:a4:8d:
5d:f0:a7:6e:89:52:8c:d4:d8:a8:13:48:2a:2f:4b:
07:24:23:b3:fa:44:18:e9:e2:9e:b7:a7:39:14:d7:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:F7:DA:33:23:36:4D:3F:B8:2C:09:C3:D1:B3:DB:CE:6F:88:9A
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/DB43C3D00C1D11EF8B2F2974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.40.0/22
144.48.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:65:66:d2:b1:6d:f6:14:5c:ae:85:2c:64:b5:17:6f:7c:a9:
f8:3b:c0:50:eb:1c:02:c0:f7:d1:d3:93:fd:53:82:f2:73:d2:
5e:82:2b:b9:e6:98:af:a7:eb:ac:d0:71:39:bb:94:41:89:16:
ee:00:53:7d:9d:34:d8:51:e1:8c:b9:34:28:41:44:35:44:54:
7e:d6:72:32:6d:a4:ca:aa:76:48:6f:5c:0a:9f:e2:cf:bd:75:
a2:30:2d:ed:15:4f:8e:b9:7c:57:4e:0f:75:6c:d2:c3:8b:84:
25:6f:a3:98:d4:6b:78:a1:68:82:60:d4:ba:07:41:96:bf:40:
26:a6:a1:85:26:fd:20:a3:19:5d:39:c0:88:80:de:42:08:da:
9d:9a:02:a5:cd:b3:02:c4:b6:f0:f6:12:d5:54:97:09:f8:29:
20:3e:33:ac:76:c6:43:10:51:d9:3b:3c:34:46:23:4e:42:f6:
5b:67:5c:79:a0:40:08:68:79:cc:97:65:c0:32:ae:da:fb:23:
2b:2a:3a:30:b7:93:b8:63:09:31:62:b0:4c:73:62:2c:de:ee:
26:c4:5b:10:08:58:70:0f:1b:f2:a3:7a:6b:40:19:dc:54:0c:
f6:6f:6f:a2:08:10:5b:74:0c:1e:a5:90:cb:12:9e:e3:00:8c:
bc:f9:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:18 2025 by rpki-client