Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/853605D8D97C11EBA12D2E21C4F9AE02.roa
File: 853605D8D97C11EBA12D2E21C4F9AE02.roa (raw, json)
Hash identifier: FzsfoxoybaHHO8PELSB4VAGn7zNg8KlZn/803YH+Qz0=
Subject key identifier: 07:DD:6E:AD:DF:79:A6:5F:6F:2E:72:7A:BF:FD:66:81:C5:18:AA:1B
Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A
Certificate serial: 032F
Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/853605D8D97C11EBA12D2E21C4F9AE02.roa
Signing time: Wed 01 Dec 2021 12:20:01 +0000
ROA not before: Wed 01 Dec 2021 12:20:01 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.157.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A
Validity
Not Before: Dec 1 12:20:01 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a76871-5826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:04:e5:be:b0:d9:ef:9c:74:d2:1a:5b:96:
4f:b5:19:52:81:61:43:87:43:60:42:6b:3f:5e:d1:
99:80:6a:59:d2:82:2b:0e:f7:b3:06:c7:c9:62:1d:
82:67:f7:c6:f7:9f:00:fe:98:d8:a6:20:ec:3f:a8:
5b:4a:99:82:36:36:64:be:2b:85:90:50:13:b1:5b:
16:bb:2d:10:81:20:43:6c:77:d1:da:5d:56:e3:53:
e4:fb:94:57:d7:81:6b:41:24:1b:d7:30:42:af:0d:
ea:a0:bf:a5:01:1f:54:71:0e:66:21:da:eb:6d:6b:
66:f9:36:81:ed:54:90:b3:ca:b0:74:4d:6d:4f:d6:
d7:77:bf:10:47:7f:70:da:95:f7:d1:a9:61:fd:e9:
1e:ce:63:a3:b2:c4:e1:6c:ea:aa:3d:37:b9:24:97:
17:9a:e7:53:a9:c4:aa:61:2a:ac:17:06:c1:8e:ff:
e2:03:fd:6b:d4:b4:82:72:79:24:95:ab:ca:db:f7:
1a:64:c2:6b:df:e2:e2:68:97:ce:3e:63:ef:e1:25:
71:e6:f3:b6:6d:b1:61:aa:81:f6:72:42:86:8c:38:
1b:90:0f:ab:1e:28:0b:19:eb:a9:b2:04:89:cc:fd:
a7:d5:dd:cf:c0:31:36:f1:02:e6:d5:a9:d9:3c:17:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:6E:AD:DF:79:A6:5F:6F:2E:72:7A:BF:FD:66:81:C5:18:AA:1B
X509v3 Authority Key Identifier:
keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/853605D8D97C11EBA12D2E21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.136.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:44:6a:30:3d:1c:5d:12:5d:d1:78:a6:b5:15:21:ce:39:a8:
5d:81:8c:c9:57:25:94:05:a3:ad:b0:17:cd:15:71:77:a8:e9:
87:23:11:cb:8d:fb:30:d7:56:7b:06:9b:14:0e:df:9d:90:1d:
94:b7:36:76:db:5a:12:a2:90:32:22:e4:11:c8:6c:c5:cb:ca:
91:d7:e0:1e:4b:7a:89:11:9b:e2:de:08:b7:75:62:5f:df:f3:
63:30:23:7e:6d:46:17:da:c9:99:1b:4d:34:d2:ba:60:4e:26:
32:ab:ef:92:09:21:98:04:fe:58:41:c7:f7:bc:61:f0:9c:53:
ae:ea:f9:0a:33:01:7e:4a:30:2f:44:5b:79:ba:82:db:81:c3:
73:92:ac:f5:84:1e:55:e3:bb:04:80:e6:0b:33:3a:3e:18:51:
99:cb:0d:e7:b9:28:f7:a5:2d:75:2f:cd:30:52:01:1c:43:e3:
bf:1a:23:bf:c9:88:5c:fc:c1:4a:dc:86:98:26:23:f1:7f:a7:
1c:d2:56:93:02:be:24:94:94:a0:58:18:ec:07:f4:7b:29:f6:
68:9d:f4:fb:f1:b4:9b:ff:c7:f0:06:21:c6:62:6a:40:7e:ff:
34:5e:69:4f:5e:bd:35:d8:c9:d6:b8:1e:71:4b:31:8d:2a:69:
a4:f9:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org