Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C37587EC081011EDBC3C4374C4F9AE02.roa
File: C37587EC081011EDBC3C4374C4F9AE02.roa (raw, json)
Hash identifier: O6+xh9DNW/4WDfza0R40ijC+Nfxcb/iD+UuYdkzKqbg=
Subject key identifier: 55:34:58:2B:A4:5B:AF:AB:F6:EB:2D:F5:82:A2:2F:1B:F3:F2:ED:E3
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0B03
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C37587EC081011EDBC3C4374C4F9AE02.roa
Signing time: Wed 19 Oct 2022 19:26:00 +0000
ROA not before: Wed 19 Oct 2022 19:26:00 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 59239
IP address blocks: 103.109.93.0/24 maxlen: 24
103.109.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Oct 19 19:26:00 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=63504f47-284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:3d:16:91:b6:07:70:ed:d0:a5:dd:34:f5:
e4:c9:ef:83:01:77:cb:56:71:1c:3c:9f:90:f3:f7:
e3:eb:6e:8a:fb:4a:93:0b:7a:03:48:4e:88:4c:b0:
61:13:f1:fe:4f:14:67:6c:28:19:f6:3c:b5:86:61:
8c:23:d5:a0:6f:98:37:f3:fe:f3:d8:ad:3e:10:70:
bd:71:1a:0e:91:c1:07:21:15:2b:63:d7:8f:02:8c:
08:9d:0c:fd:ec:14:3b:dd:62:02:58:68:63:9c:05:
07:bc:15:37:f7:bc:c0:93:fe:60:47:d2:94:4a:e0:
ac:15:17:ed:0c:65:91:fe:ec:64:5f:9a:89:2a:c1:
87:9f:46:de:22:ae:8a:4f:16:8b:2e:ff:59:94:96:
2c:98:e6:88:b1:bf:6d:3d:a6:13:d4:85:86:a3:3f:
b0:29:87:5f:6e:65:52:a1:6a:38:58:80:f6:f2:8f:
d3:81:ac:d8:95:29:47:8d:ea:a7:b7:2d:79:d2:97:
fb:c3:be:12:d1:ca:60:13:c0:65:e8:cb:9c:d6:b9:
89:9a:5f:d5:b8:e5:e2:ce:a7:dd:20:d1:85:25:75:
34:92:20:97:e4:01:fe:32:df:6b:04:ae:57:f9:10:
e9:02:18:2b:5c:a2:c9:aa:25:29:b6:fd:37:42:75:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:58:2B:A4:5B:AF:AB:F6:EB:2D:F5:82:A2:2F:1B:F3:F2:ED:E3
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C37587EC081011EDBC3C4374C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.93.0-103.109.94.255
Signature Algorithm: sha256WithRSAEncryption
74:da:f8:73:8a:45:9f:b1:ea:eb:f5:f6:25:61:e2:57:27:38:
bc:50:16:17:cc:09:04:ef:af:48:a9:83:39:22:8c:b8:f7:b3:
fa:c8:01:02:85:82:02:13:68:0d:ae:d3:a6:8e:3f:76:0a:02:
47:3f:f8:ef:a9:63:88:1a:5b:bd:b4:ed:2a:c8:3d:c4:4e:43:
aa:1a:e8:28:ee:af:24:cb:b2:59:0e:4b:06:56:23:26:47:42:
e2:97:bb:c8:1c:fa:9d:89:06:1b:2a:d8:2f:69:8c:4d:28:e6:
b1:b6:a0:31:58:a8:65:54:cc:89:58:de:c3:c7:9d:af:22:ab:
02:86:55:e2:be:94:ee:d6:3c:8e:38:97:e5:3c:aa:9b:9e:d2:
a9:25:f2:fb:e6:66:e4:4f:54:bf:8e:fa:82:67:a4:9b:ab:6c:
9c:09:bd:5f:93:81:29:20:ec:e8:fa:36:6d:f9:5f:56:ba:04:
84:cb:d9:57:bd:98:6a:53:a5:94:d8:cc:ac:85:cf:d3:b7:f1:
1c:fa:88:21:5b:69:54:5a:fe:52:0b:56:8f:6b:66:d2:b1:86:
e0:4f:60:e6:d8:b4:1f:71:00:09:45:ed:5b:71:e5:d0:b8:e7:
82:26:6d:1a:8c:d6:d1:f1:32:b4:ac:25:ad:cb:80:74:2e:2b:
eb:48:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org