Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/A3237438E41911ECBC12B818C4F9AE02.roa
File: A3237438E41911ECBC12B818C4F9AE02.roa (raw, json)
Hash identifier: B1sXnftvMbIpFw2rJ9zsT0/i5MfPJ50si9/zUjOyoDQ=
Subject key identifier: F9:D8:02:4C:4C:72:27:CB:C9:6F:08:E0:8B:DB:0C:63:2E:A3:69:6F
Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial: 09A0
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/A3237438E41911ECBC12B818C4F9AE02.roa
Signing time: Sat 04 Jun 2022 15:18:51 +0000
ROA not before: Sat 04 Jun 2022 15:18:51 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 7404
IP address blocks: 103.233.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Validity
Not Before: Jun 4 15:18:51 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=629b77da-00fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:2c:86:91:5c:80:ef:c8:59:3d:27:99:b6:
f9:86:88:47:b8:22:c3:03:1a:5d:f5:a0:45:2e:3c:
61:d4:c3:8d:2a:ab:99:95:68:fd:18:fa:cd:05:aa:
e5:4b:e9:c5:64:c5:98:4a:97:49:01:6c:e1:7c:9d:
e7:5c:a9:7a:cf:c0:f6:4c:e1:8a:56:25:a4:ec:90:
9f:65:e4:48:19:d7:4b:2b:5c:cf:73:09:b3:fa:e4:
ca:45:2d:d1:03:17:e4:be:26:46:80:ae:02:de:46:
39:fd:f8:bc:28:63:41:87:f8:5d:4d:b1:f1:06:3e:
4d:59:61:25:35:9f:a4:9e:eb:f6:1a:68:1c:1d:10:
68:99:63:81:86:d3:34:ad:c7:d2:60:36:8b:d3:1c:
d8:39:cf:13:a3:a5:94:3a:61:ef:8b:8f:30:24:77:
c5:18:9d:e9:67:c7:54:44:1b:61:4c:30:3a:76:bb:
54:7d:a2:b2:b4:a3:f9:a8:ec:4c:89:66:0e:fe:f6:
e0:5c:dd:a4:25:3f:45:de:71:32:8b:d3:3a:72:b5:
ac:8b:1b:ac:9d:5e:bf:16:49:b4:6a:da:1a:42:63:
35:09:70:52:16:83:97:08:56:9d:94:f5:8f:e3:be:
27:15:94:96:00:5e:91:49:5d:a3:e6:98:d3:65:1e:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:02:4C:4C:72:27:CB:C9:6F:08:E0:8B:DB:0C:63:2E:A3:69:6F
X509v3 Authority Key Identifier:
keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/A3237438E41911ECBC12B818C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:88:41:0d:52:65:14:c5:3f:cc:84:6a:93:0e:ee:f0:17:61:
b4:d9:f8:b7:cd:1e:ab:75:11:b1:aa:a6:f8:9d:f0:99:a2:18:
2e:f5:db:01:47:50:e5:49:56:c7:65:34:a1:df:8f:06:1a:7f:
56:93:b9:d3:56:38:a8:6b:56:5e:ac:47:9d:32:e5:40:03:4f:
e9:96:a8:0f:3f:09:a1:58:f2:0a:a6:e8:07:7d:bc:e3:c6:13:
87:48:59:e6:d3:25:ac:b3:f2:e0:78:fb:45:a2:04:85:28:25:
2f:07:45:c0:8d:85:d9:f8:7f:13:90:d0:be:10:e3:1e:cb:d4:
24:73:ed:17:9d:e4:06:cb:bb:c4:09:7d:13:53:6c:e5:47:ca:
31:ab:94:b6:f3:c6:73:ef:f0:47:0e:cd:02:a3:42:77:e9:3a:
01:12:c3:61:11:d3:3e:61:47:af:e4:5b:b9:e6:5e:85:49:79:
11:1e:bb:23:b8:2f:95:94:05:97:a5:6f:f1:f2:1e:a8:a7:9d:
7b:92:95:db:43:4f:e1:8d:87:ff:c2:3c:3f:97:30:9f:ca:20:
ee:ac:0f:67:89:30:85:49:f2:1f:2b:bc:ed:21:df:53:37:94:
d8:08:57:94:3c:ff:71:a1:8c:0d:c3:3d:ec:1d:99:5f:ae:a9:
fa:b6:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org