Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6F592F80F95811EDBC6E8132C4F9AE02.roa
File: 6F592F80F95811EDBC6E8132C4F9AE02.roa (raw, json)
Hash identifier: 7CUlfOwXO8WoZ8RpNYYbLiGUgNjAyaqy44Q5DzeJMao=
Subject key identifier: E6:B4:A8:00:A9:39:33:39:F3:ED:78:6A:62:59:CA:10:B2:A7:B6:81
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 06FF
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6F592F80F95811EDBC6E8132C4F9AE02.roa
Signing time: Tue 23 May 2023 10:56:14 +0000
ROA not before: Tue 23 May 2023 10:56:14 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: May 23 10:56:14 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=646c9bce-6d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:60:29:74:a2:ae:79:62:58:7b:e1:df:a0:
b4:cc:b5:48:62:d7:c4:29:a9:c4:dd:c7:df:21:7d:
1a:f3:8d:ad:56:4b:03:c7:dd:6e:b5:8a:77:83:f7:
9d:76:6a:5c:d1:c3:ff:4b:c2:87:dc:b6:b6:54:47:
e7:87:e9:1f:23:61:b8:18:80:ae:be:aa:42:20:e1:
fb:88:0f:cb:27:e4:f5:9e:41:57:30:d1:e1:3c:c9:
63:1c:ff:e4:65:f0:f1:77:86:71:40:b2:a4:32:77:
b4:67:f4:d4:78:82:9f:2c:d3:95:6f:ba:8f:97:ce:
0d:26:f1:04:62:7f:bf:3e:7a:f8:16:db:9a:6e:4f:
d9:cf:37:e4:df:b1:7b:e6:64:c7:17:08:c1:25:73:
f7:75:55:fc:14:39:1a:60:87:12:18:4b:31:85:b8:
53:c8:6d:fe:9d:60:f1:23:f3:7a:aa:48:89:52:0d:
80:82:1f:4f:ab:ab:8a:de:33:84:ba:f5:61:ea:c8:
97:51:25:10:3a:a4:e1:9c:ea:b4:19:12:1e:ae:a3:
6f:10:bf:87:96:84:72:72:4c:60:16:2a:ee:36:e8:
a7:13:4f:b7:53:cc:e4:63:20:c1:68:8b:7e:b3:50:
c7:f4:ab:aa:34:38:21:a2:85:e6:47:a0:07:93:f9:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:A8:00:A9:39:33:39:F3:ED:78:6A:62:59:CA:10:B2:A7:B6:81
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6F592F80F95811EDBC6E8132C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
62:06:11:d5:4f:bc:d8:f1:37:de:c1:3e:91:fc:57:62:60:7b:
25:f7:2a:99:a0:60:53:0d:f0:a1:ba:d1:f4:72:c8:8e:61:37:
a9:31:8c:1f:dc:92:05:77:58:6f:fa:90:be:b0:eb:b1:f8:de:
78:0d:1e:1c:8b:0a:07:3e:02:15:8d:ed:e4:30:a3:11:38:2e:
52:c6:7a:d3:db:2e:84:58:85:f6:dc:f4:9b:97:14:c9:a8:00:
d4:72:34:69:42:52:27:3a:14:6a:90:42:03:ea:54:7e:d7:a1:
af:3d:ce:6f:3a:82:df:28:50:c1:57:01:00:1d:de:f7:fd:ab:
80:e6:d7:44:7e:db:7b:2a:2e:f2:b5:08:4c:f1:55:7c:6c:16:
96:11:34:5c:07:c8:d9:c8:c6:59:21:1d:2a:db:0d:9c:68:b4:
06:cb:73:ca:64:17:61:b0:85:82:26:5a:c7:40:33:5a:bc:4f:
09:e5:f4:d6:6a:43:ab:28:5e:fb:23:01:76:e6:ae:4e:dc:cc:
b8:5e:23:e1:6d:b7:17:d3:69:16:4c:50:4d:71:28:68:aa:6a:
2c:77:f8:87:48:eb:e1:19:92:54:6b:c5:2e:c8:e1:6a:4e:54:
bd:9f:3a:b3:5c:4d:f9:f2:49:fb:88:a3:49:6f:60:5b:23:b7:
2a:54:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org