Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/3F46C154D32B11EBBAE9AD75C4F9AE02.roa
File: 3F46C154D32B11EBBAE9AD75C4F9AE02.roa (raw, json)
Hash identifier: 4tDKaFzIlSrRFoYMERdOEqOwsGEdg6+GN/Cf/PHEb0M=
Subject key identifier: 56:35:D8:E7:5B:87:EE:E5:E4:C9:BD:6A:D0:A8:1E:B9:43:78:23:FD
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0839
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/3F46C154D32B11EBBAE9AD75C4F9AE02.roa
Signing time: Sat 13 Nov 2021 12:25:48 +0000
ROA not before: Sat 13 Nov 2021 12:25:48 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 135341
IP address blocks: 103.109.94.0/24 maxlen: 24
103.214.200.0/24 maxlen: 24
144.48.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Nov 13 12:25:48 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=618faecc-3c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:83:08:2e:be:ee:68:a8:09:47:26:a3:67:
9e:50:45:fb:63:6a:99:6b:c4:c6:66:b6:5b:1e:0f:
a6:5f:12:88:68:af:38:26:47:f9:c6:de:5f:14:5a:
6a:e0:d9:e2:06:ed:eb:86:0e:bc:22:f8:6f:0a:06:
c6:10:48:53:9d:39:79:01:f2:8e:7a:56:3c:fb:6f:
9b:0a:f0:c0:f2:d4:8f:dc:12:60:69:cb:1d:01:9c:
d0:97:03:58:91:fa:ea:03:1e:f0:dd:2a:9c:58:9b:
94:5d:56:21:04:f7:b6:2c:21:83:e2:31:31:b8:b8:
0f:2a:ea:1d:68:03:75:3b:02:99:83:2b:8d:4a:86:
50:39:1e:0a:04:c0:7b:c0:60:50:62:2a:be:e6:31:
cb:2c:91:35:c0:2c:be:59:f8:7d:70:a1:4c:11:e1:
2b:c1:9a:ca:d1:13:97:1c:55:b1:8b:7c:1d:07:01:
2b:e5:81:52:e5:60:b1:f0:79:93:f3:25:a4:24:14:
4b:48:d0:dd:84:d5:38:03:0c:b6:ad:8f:ad:75:19:
0f:77:3b:44:8e:cd:58:f2:e3:d4:08:6c:90:05:e8:
bb:a3:13:0f:3f:b2:10:16:b4:38:2e:97:fe:f6:a4:
76:41:e5:6d:2f:1b:7a:37:65:71:84:f9:3e:6a:03:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:D8:E7:5B:87:EE:E5:E4:C9:BD:6A:D0:A8:1E:B9:43:78:23:FD
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/3F46C154D32B11EBBAE9AD75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.94.0/24
103.214.200.0/24
144.48.150.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2c:50:9d:a2:f3:6d:96:0d:8c:79:4c:bc:a0:fe:e4:08:f9:
47:5b:7e:fe:67:aa:34:b0:b2:d8:48:ff:c0:55:5e:ff:2c:a7:
3f:c7:ed:43:d2:90:9b:91:50:80:54:f0:23:a8:a1:aa:a4:da:
c4:a6:cc:6f:bf:67:f6:ed:8a:32:92:c1:36:65:45:16:3d:d8:
fb:6d:c6:da:79:b7:3f:6c:50:d2:7f:e4:96:28:9c:ae:71:0f:
3e:6c:7b:58:16:05:9c:8b:30:96:a2:cf:71:57:15:16:28:4b:
e5:00:67:b1:79:e4:5e:4c:7f:d4:6c:c1:c1:9b:cb:20:08:cc:
76:e3:f2:6f:a4:26:72:78:9d:da:55:cd:6f:77:78:fc:be:c1:
b2:fa:bb:eb:07:b1:b8:33:b1:ab:2a:b9:d8:53:31:42:6d:39:
bf:98:0f:5d:c8:e5:5d:ab:d3:88:1e:44:e4:e3:83:df:f4:8e:
2f:a5:83:76:dc:ac:e0:83:56:8a:2c:80:1f:0f:c2:ca:e7:18:
8c:79:39:60:34:1f:be:2a:48:eb:ec:a2:a2:4f:cc:2f:d0:7d:
3c:44:dc:c0:16:61:63:2b:37:e7:74:aa:40:e8:b7:3c:04:bd:
7e:d6:01:9b:39:bf:1e:18:87:f4:26:c0:9c:e4:64:19:93:52:
dd:c4:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org