Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/25F75D36129411ED8BBA3D5BC4F9AE02.roa
File: 25F75D36129411ED8BBA3D5BC4F9AE02.roa (raw, json)
Hash identifier: xFJxbmMgdPyatL/Rm1Lyj3RDgJD8SpxRk+/OD8XQsQw=
Subject key identifier: B9:2A:A3:DC:30:2E:EE:5A:6C:64:EF:1B:60:1C:76:A1:6C:6F:C3:AA
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 0233
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/25F75D36129411ED8BBA3D5BC4F9AE02.roa
Signing time: Tue 02 Aug 2022 18:51:42 +0000
ROA not before: Tue 02 Aug 2022 18:51:42 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 398296
IP address blocks: 103.175.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Aug 2 18:51:42 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62e9723e-4b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:f2:8e:57:d3:bf:e6:bb:be:ab:ba:34:d5:
e5:6a:ac:47:ad:87:a6:47:52:f1:1c:61:f6:5e:f8:
75:af:54:b2:0d:2c:e9:8a:3f:fe:46:18:46:6b:2b:
6d:81:50:cb:4a:ed:74:ab:07:c8:2f:b5:29:66:3a:
7d:c8:61:86:41:95:bb:c4:5b:a9:34:d9:13:18:dd:
09:5d:9c:e4:24:af:ea:a0:6f:8d:35:c7:fd:9f:05:
88:81:ae:c3:54:13:41:b4:d8:0f:39:6f:fd:2c:60:
f1:36:a0:c5:87:47:c2:d4:a7:9e:9b:fc:98:45:7c:
71:a6:37:f1:7e:61:63:36:4d:b5:ac:6f:43:88:40:
d2:cc:47:f5:c7:9d:02:96:24:31:b9:52:d1:13:5c:
65:97:17:7a:b8:d8:30:7a:b7:75:60:6a:85:e7:47:
09:b3:4e:d4:cc:86:67:7f:d1:52:b3:95:6a:76:52:
e2:6b:56:34:b4:fe:47:41:3f:7b:e3:cd:77:66:cb:
41:bb:1e:d4:b5:97:36:1a:75:8b:3f:d2:1d:59:86:
61:08:8a:e3:7e:c4:7a:d0:b0:55:c3:96:31:5c:9f:
b4:35:5d:a0:65:99:41:0f:9a:ad:ae:db:4b:0d:d7:
24:ab:0c:0f:f0:5d:4d:08:d1:c7:1a:90:d1:eb:fd:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:A3:DC:30:2E:EE:5A:6C:64:EF:1B:60:1C:76:A1:6C:6F:C3:AA
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/25F75D36129411ED8BBA3D5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.98.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b4:87:88:ca:f8:1d:9c:ea:63:fb:e7:b0:5d:8a:57:a0:a1:
75:80:2f:52:cc:35:03:09:bf:90:03:d9:a3:e3:9f:a8:be:76:
e8:46:c1:0f:92:61:15:3d:1b:44:2c:ee:24:6c:e9:e6:a9:b6:
1c:43:05:d3:7e:a1:9e:cf:27:12:7e:16:4f:a4:c0:1b:06:ec:
04:ec:c0:bb:62:dd:f1:6d:d4:d0:a9:72:fa:08:95:00:2b:83:
b7:a5:b5:fb:c8:55:35:51:a2:0f:60:70:be:20:95:ab:7b:0b:
80:85:f6:f9:e2:ab:2f:f4:6a:06:0a:bc:0d:fc:0c:f3:97:76:
30:e6:61:85:70:30:5e:ab:ed:1d:1c:da:09:56:f4:9f:a7:54:
c3:32:16:c6:77:ae:a0:c8:36:06:32:c7:44:d8:f4:58:6b:f5:
9b:4a:96:eb:cf:d2:90:82:b7:b5:e5:02:18:e1:a8:bf:51:bf:
b5:f3:c3:96:41:8a:6a:5c:4f:ae:8f:f6:bf:3a:64:71:df:b7:
ab:ed:8d:ad:50:ae:b0:26:47:d4:2e:22:1c:ae:65:7c:fb:3f:
78:77:e0:7e:18:08:82:51:45:e7:18:0a:9d:25:b6:0c:e8:e7:
54:10:3c:3d:67:35:06:80:22:a3:16:86:b7:78:49:f8:92:9f:
b0:c9:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org