Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/8B3A6D92274411EBBFC81276C4F9AE02.roa
File: 8B3A6D92274411EBBFC81276C4F9AE02.roa (raw, json)
Hash identifier: dsHRskDuOysWVQMa5C+s4S7eoh9PVSmF+4woTYlTSBc=
Subject key identifier: 3C:68:44:98:2C:0C:B6:9B:FC:22:D0:E1:BB:D3:62:6F:5B:95:B0:9C
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0446
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/8B3A6D92274411EBBFC81276C4F9AE02.roa
Signing time: Wed 29 Dec 2021 23:18:21 +0000
ROA not before: Wed 29 Dec 2021 23:18:21 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 60781
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Dec 29 23:18:21 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61ccecbd-6f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:d1:d3:69:04:b2:7c:a2:22:1f:ec:d2:7a:
e0:5e:7a:b5:dd:f9:ff:96:6e:22:60:42:11:32:32:
5c:2d:71:33:14:ae:10:a3:30:a5:39:61:3c:35:1d:
73:25:9c:97:ec:0a:ca:aa:fe:12:50:5a:49:9d:fe:
d7:cc:e1:95:80:fc:19:16:ec:c3:0c:d0:a0:a2:b2:
88:90:e2:3d:a5:40:1d:fb:78:c5:bf:b1:d8:c9:d8:
5b:e1:5b:17:d7:33:ec:1f:28:99:18:27:3d:64:86:
e7:56:b3:23:d6:84:10:d5:95:b4:0e:91:74:b6:7a:
be:4e:db:99:76:6a:d5:32:1a:1f:fd:92:de:d5:a6:
44:dc:e0:a3:52:86:18:3a:2b:e9:68:be:c6:a4:b2:
cd:f5:ad:c9:d6:5b:b3:07:36:a6:ec:f8:95:bf:6c:
02:1b:92:12:c5:99:cc:d0:28:b4:54:ac:1b:34:a3:
d8:10:23:1d:06:41:61:89:40:07:08:13:73:c8:29:
34:49:d7:ab:b1:b5:2b:cc:53:fa:57:4c:d0:f7:43:
a0:7f:4e:ef:e7:30:88:f7:d4:f6:1b:0d:26:21:04:
e7:e9:64:ec:40:1f:5e:fa:56:46:d1:52:9e:28:ac:
08:a2:bc:b7:0d:4e:45:5e:81:a3:0b:e3:d2:ba:03:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:44:98:2C:0C:B6:9B:FC:22:D0:E1:BB:D3:62:6F:5B:95:B0:9C
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/8B3A6D92274411EBBFC81276C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:db:38:04:56:77:13:1e:7d:d3:2c:96:9b:37:f1:5f:72:ea:
93:f1:75:bd:f9:4d:01:81:3c:bf:04:ad:dc:08:40:87:ca:fc:
b2:a3:44:cd:51:22:c0:b6:64:66:85:9e:d3:88:63:3e:5c:49:
59:ee:da:52:57:67:d5:0e:f0:b1:76:4c:97:7b:8a:0c:53:a6:
b5:b0:ab:9c:d4:08:44:dc:46:5d:2f:61:0f:32:24:db:15:5f:
90:8f:de:a6:e0:b0:b4:5b:25:4c:20:a5:a8:a7:b0:e3:f9:45:
b2:ad:4f:d1:86:5b:0d:72:77:de:06:83:72:05:e1:b5:00:0d:
09:3d:97:81:7d:79:e0:94:61:78:04:fc:ec:42:04:9c:b1:e2:
fd:27:a0:f1:8f:8e:28:0e:7b:a1:55:8a:e3:bd:af:f1:b8:5f:
18:5b:1b:a6:53:de:21:56:d0:1e:5c:be:50:ea:4b:88:11:54:
a8:fd:6e:81:37:4d:f7:09:59:62:75:eb:34:f2:7f:30:cf:2a:
8d:14:54:ff:cb:91:96:e3:6a:bc:cd:17:56:4d:f0:8b:9b:63:
e0:0b:f1:84:38:be:69:bb:59:e7:a2:00:57:31:51:cf:87:06:
9c:23:8a:c9:ff:66:3a:08:ee:b2:db:b3:ab:5d:81:12:d3:15:
c1:0e:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org