Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8E0C6E8D8311EDB6D2BE55C4F9AE02.roa
File: 6A8E0C6E8D8311EDB6D2BE55C4F9AE02.roa (raw, json)
Hash identifier: 9UwKLURgtAkRvaFiFU+PJmI/q3aqghU+6IpNdmk8UjI=
Subject key identifier: 7C:9F:94:EA:33:5E:34:0A:A3:27:0C:93:DA:4A:FB:12:0E:16:E5:D4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 62A4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8E0C6E8D8311EDB6D2BE55C4F9AE02.roa
Signing time: Fri 06 Jan 2023 05:31:49 +0000
ROA not before: Fri 06 Jan 2023 05:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14180
IP address blocks: 103.109.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25252 (0x62a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 6 05:31:49 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b7b244-660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:38:04:e7:dd:97:de:9e:63:f8:af:ed:53:
6a:06:6b:ee:47:35:8d:61:11:83:89:3e:18:d4:b9:
89:ed:e0:82:3d:99:ab:2a:2c:08:d4:3a:3e:40:81:
04:7b:79:59:bd:0b:a5:f2:bb:6a:03:87:2b:14:ce:
a5:6e:d5:2a:4a:7a:73:11:e7:e4:e6:57:d5:9a:05:
22:bb:10:83:fc:51:9f:97:71:9e:27:9b:8d:01:c9:
f0:29:be:5f:e9:ef:f5:84:52:13:48:32:3f:56:ed:
b6:db:b5:08:93:d3:48:89:d9:a0:27:2c:8a:0d:38:
4c:9f:a8:3e:f2:d2:07:bc:78:c3:80:a4:fe:27:4b:
25:29:f9:96:48:ff:c4:24:02:ea:d0:62:8f:8e:44:
d1:8c:ba:78:cd:0c:ce:46:10:c5:bb:3a:d3:79:36:
84:71:27:18:2e:f9:29:f2:e4:2d:ea:d9:66:55:a6:
ae:ea:e1:47:6b:1e:8f:0b:9a:9d:6d:17:82:3f:47:
0f:7e:3f:11:9f:1c:80:cd:b6:39:63:e0:52:39:2f:
67:68:cb:e5:ba:d9:25:e2:67:d8:77:70:98:0e:a3:
1c:8d:c7:52:97:d6:7d:8a:69:d1:98:ce:c4:3c:17:
15:71:60:7c:6e:e0:82:47:8c:2e:c7:59:4b:d2:f8:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:94:EA:33:5E:34:0A:A3:27:0C:93:DA:4A:FB:12:0E:16:E5:D4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8E0C6E8D8311EDB6D2BE55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c5:65:f9:0b:6b:d6:74:a4:9f:37:93:a4:c7:80:50:b4:f8:
b8:1f:60:65:4e:18:32:cc:ba:85:14:1f:d3:d8:5a:85:b4:5a:
53:ce:b7:be:3c:31:b2:fe:f9:1c:40:d5:b8:5e:e3:7e:09:5b:
22:c4:73:4b:68:21:d3:c4:f5:46:0a:9a:d4:77:44:40:30:15:
d1:8e:53:75:19:4b:5b:58:c0:7d:6f:ca:d8:77:f8:a1:72:bf:
1a:a3:3d:04:cf:c7:68:1d:9a:4a:b0:1d:e7:a0:52:9f:47:9e:
9d:3c:d4:66:79:0b:9c:e1:00:92:15:a8:ab:23:7e:b9:36:b2:
b6:80:7f:04:7a:47:b0:8c:a2:b2:4f:5f:b1:72:5c:88:b5:b5:
e9:79:73:e5:4f:70:98:b1:0e:e1:a9:33:e0:df:61:05:f1:c4:
1c:47:c7:64:23:5a:7b:6f:f3:df:27:35:74:03:30:9d:6a:d1:
02:3f:eb:f2:b1:10:f5:1d:c9:1e:c9:2c:c0:3e:dd:9c:79:46:
e1:29:5d:ac:59:11:c5:7b:a8:ac:42:2b:9b:ac:42:86:34:af:
a5:e7:55:91:38:7d:97:a9:5c:a2:47:2f:72:fe:f1:02:5b:f6:
5c:04:62:ba:ac:ca:ed:0b:61:11:74:5f:6e:2f:6e:df:ab:fb:
49:7f:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org