Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/CDF784D8FEAD11ED81388D6CC4F9AE02.roa
File: CDF784D8FEAD11ED81388D6CC4F9AE02.roa (raw, json)
Hash identifier: szjnwXSJfSbSlh8md+x2iYtqaQW96Ny0tM9s+f4mLtA=
Subject key identifier: FB:52:61:99:AD:EF:65:4E:AB:E8:9B:38:FD:03:D9:F4:DA:A9:86:20
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0B28
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/CDF784D8FEAD11ED81388D6CC4F9AE02.roa
Signing time: Tue 30 May 2023 05:49:56 +0000
ROA not before: Tue 30 May 2023 05:49:56 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 38200
IP address blocks: 103.135.138.0/24 maxlen: 24
103.135.138.0/25 maxlen: 25
103.135.138.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: May 30 05:49:56 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64758e84-1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:a0:ef:a5:d9:b3:71:d5:13:50:4f:b1:c5:
5f:a9:d3:2e:a0:00:e3:d2:d5:36:08:57:de:6b:a7:
e6:20:68:58:bb:8a:a9:02:da:ca:7d:3b:3e:60:ee:
24:cd:e4:02:34:56:43:3c:d2:ca:3e:f1:1e:dd:92:
63:09:8b:78:d7:3e:2e:e7:8a:27:50:95:e3:84:c3:
c0:d3:7c:90:66:ad:ea:17:92:27:3f:f1:5f:25:9d:
62:06:9d:ca:f6:c3:98:fb:39:ef:18:bc:5a:d7:9a:
fe:a1:ee:5b:bf:7f:59:25:89:86:2a:69:03:10:79:
c0:d7:fd:d6:e0:ba:b1:74:f2:60:a9:58:60:60:ea:
5e:05:76:0a:f6:07:06:be:19:28:aa:ac:a8:76:5d:
f5:9a:bb:22:ab:e2:c9:98:34:50:bd:47:a8:eb:d5:
b7:10:35:c9:c7:a4:ad:78:82:eb:c8:41:e0:da:57:
b8:39:c2:97:45:ba:93:17:a1:54:40:59:44:65:e1:
ff:b2:ba:ad:13:89:aa:6f:d2:a2:64:a1:b0:c3:a2:
35:95:c2:42:23:70:0a:3b:49:7b:68:d3:e9:8f:ea:
f1:b3:1b:83:c0:9d:af:58:48:ee:e7:00:06:de:ef:
16:fc:21:d6:e1:28:8b:99:04:4c:34:45:30:82:f5:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:61:99:AD:EF:65:4E:AB:E8:9B:38:FD:03:D9:F4:DA:A9:86:20
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/CDF784D8FEAD11ED81388D6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:59:ab:aa:f8:1b:27:b3:81:0a:46:0c:b0:29:13:c6:f1:c7:
a4:17:d3:aa:0a:c9:92:57:ba:66:a2:51:a2:dd:3f:a1:3a:40:
18:4e:a2:6b:2a:35:1b:f6:2c:5d:00:02:5a:3f:88:bf:8b:7b:
d0:17:cb:e7:64:ac:e9:7b:5e:9e:55:79:f3:08:a7:86:8b:9d:
eb:9c:02:8e:40:fa:fd:b6:37:3a:4a:dc:41:c1:4a:a5:e0:cf:
f4:3d:e1:33:ec:8b:9b:a2:a3:31:8f:98:63:bd:d5:36:b4:04:
09:58:15:9b:1e:cd:18:5c:e7:77:5e:c6:d8:bd:db:dd:80:12:
81:66:1e:d8:a7:e0:f7:7f:70:70:b3:8f:39:e7:e9:b7:0d:1f:
8e:7c:c8:b8:c1:98:9c:aa:20:02:b7:4f:69:b9:df:d7:92:77:
b9:18:e4:c2:d5:58:05:2a:03:ed:f8:de:a0:0d:b1:6e:6c:c0:
58:c1:7e:22:90:41:0c:9e:03:bc:6a:57:de:cf:2b:42:7e:3d:
0a:57:e0:80:f5:78:2c:ca:bb:bc:be:a1:20:dd:f6:c7:80:fe:
6d:5f:9a:de:36:25:a0:1e:ba:2d:92:42:2e:0d:ed:67:c2:60:
11:5e:88:1d:8c:a4:d4:ed:56:ab:86:78:8d:da:31:f5:f5:c3:
93:a7:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org