Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/9988107E35E511ECA282E546C4F9AE02.roa
File: 9988107E35E511ECA282E546C4F9AE02.roa (raw, json)
Hash identifier: t1/Lmxis5dSWuBNkl29StkalrVlWaeQFqamIb079xkQ=
Subject key identifier: C6:FE:91:3B:6A:A8:28:E0:36:38:4C:A4:B1:3F:1B:F4:73:1A:4B:DC
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0443
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/9988107E35E511ECA282E546C4F9AE02.roa
Signing time: Wed 29 Dec 2021 23:18:18 +0000
ROA not before: Wed 29 Dec 2021 23:18:18 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 206150
IP address blocks: 103.125.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Dec 29 23:18:18 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61ccecba-ab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:08:4e:50:b4:74:14:d6:e9:c8:de:b3:eb:
d2:36:f2:37:f0:f7:98:86:4a:56:ca:0d:4a:8d:1e:
a8:26:dc:47:e4:e1:9b:9c:21:59:00:76:69:39:83:
e6:03:70:05:60:5c:f0:eb:66:7c:0f:d9:b7:e9:6e:
73:55:51:6c:51:04:53:fe:51:d4:d5:b7:3a:84:cf:
44:e9:f2:4f:70:8a:9d:1c:d4:e5:aa:d9:7a:20:46:
3a:3e:57:00:dc:da:d4:0e:d5:e0:4a:ae:17:cc:e6:
33:cc:97:7f:a1:44:08:91:0f:61:0d:15:5d:75:e2:
11:30:05:e8:de:41:28:7a:33:67:5b:00:cc:46:c7:
b5:41:1c:f3:89:e1:f5:dd:3e:f6:65:3a:da:07:1f:
e8:80:1a:59:d2:a9:03:b9:bf:73:95:a2:41:e7:87:
be:c3:f2:57:51:ed:09:7e:4e:db:5b:e4:6c:58:05:
56:c4:ca:19:91:ca:b2:22:aa:21:30:f7:ae:fe:b9:
77:c8:b4:f1:ad:15:d1:84:ef:65:df:73:79:7e:09:
5d:b9:e1:6e:c7:0a:3b:92:09:00:ee:76:1d:28:93:
f1:6f:21:01:5d:a3:65:32:69:56:77:3f:50:85:7d:
76:9e:f2:17:3a:2b:e9:f5:6b:db:95:58:cc:54:d1:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:91:3B:6A:A8:28:E0:36:38:4C:A4:B1:3F:1B:F4:73:1A:4B:DC
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/9988107E35E511ECA282E546C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.145.0/24
Signature Algorithm: sha256WithRSAEncryption
89:68:c4:cb:d7:57:dd:e9:c5:72:8f:95:d5:bb:f0:77:31:37:
0f:29:d4:52:08:cd:ce:13:b3:c5:fd:cd:89:d2:54:ec:9e:df:
3c:0b:5e:4d:cb:0d:58:d3:ee:a9:e7:1d:5d:91:75:b5:3b:c2:
df:fa:dc:7d:e9:03:32:7f:e9:5b:3a:30:1d:16:66:d9:73:31:
e6:6f:7e:21:a5:61:63:ae:d5:4a:91:5d:97:1a:6b:4d:a0:fa:
f8:30:65:75:3e:5c:8b:a5:d1:0c:70:18:bf:88:02:34:d5:32:
61:11:e0:76:55:7c:1e:08:66:bd:17:0b:ad:70:39:fb:f8:88:
a0:42:ac:f7:ea:37:4e:98:92:23:27:e2:a6:0a:9d:37:ca:cf:
af:e1:84:34:63:5a:dc:27:63:cc:6b:06:9f:da:82:31:3f:a0:
f4:23:df:8f:27:17:8b:f8:b2:81:df:70:12:df:52:29:61:19:
7c:37:8f:61:4d:84:9d:8d:5e:44:66:2f:e8:80:46:17:45:78:
7b:32:29:49:de:c6:4f:4a:91:c5:ac:ac:54:9a:53:b5:f6:1d:
ec:fc:88:05:c0:1e:22:39:4c:4f:66:cc:e2:cf:35:70:64:80:
25:38:e4:b3:b7:65:cd:84:e4:6b:f4:8d:73:bf:4a:2b:91:47:
67:39:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org