Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/C3A74042F8AF11EAA8179144C4F9AE02.roa
File: C3A74042F8AF11EAA8179144C4F9AE02.roa (raw, json)
Hash identifier: BK0bPVyJJLadz9BA4F4jIg4JA2fl1FcVqUAf/Zl1kOI=
Subject key identifier: 58:45:41:09:67:9A:47:71:CE:75:E0:21:97:BD:CD:9F:3C:1C:A1:18
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 06F7
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/C3A74042F8AF11EAA8179144C4F9AE02.roa
Signing time: Tue 22 Mar 2022 21:47:31 +0000
ROA not before: Tue 22 Mar 2022 21:47:31 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 137018
IP address blocks: 103.149.60.0/24 maxlen: 24
103.149.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Mar 22 21:47:31 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=623a43f3-84fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:37:25:02:73:02:08:82:9a:df:1c:23:57:
8d:bf:ac:49:67:15:a7:6b:03:1f:8e:c3:c5:d1:b5:
ec:ea:5a:d7:56:0c:08:4a:4e:f8:e7:99:79:63:de:
77:a6:fd:af:4d:14:f7:70:61:fe:45:76:0a:b3:32:
82:98:55:1e:49:68:1c:eb:d2:97:a8:2b:3a:92:ff:
b7:09:6e:18:fd:55:48:11:7a:57:b2:54:e5:ff:f2:
bd:4a:f6:96:67:cf:7e:3d:fc:9d:45:a8:e8:f5:a0:
5b:33:66:f1:9d:4b:23:d7:32:bb:ea:1c:56:08:10:
3f:2b:45:7f:5f:38:43:ed:c4:6c:f1:7c:8b:43:5d:
20:13:e1:c6:d8:32:5e:b6:8d:bb:b7:52:52:01:7c:
59:eb:91:4f:22:f7:51:7a:a5:a4:2b:63:dc:17:87:
c4:98:d3:d2:f1:c2:fd:ed:0e:00:7a:9e:e8:0e:2f:
bf:0c:36:21:04:b1:f4:90:6b:2c:61:15:28:3e:ff:
54:20:c9:60:d9:64:24:01:8a:cd:1a:b0:55:81:00:
89:e1:d4:b1:70:d0:dd:c9:c5:63:89:36:c6:7a:3b:
31:77:83:c8:f9:cf:58:99:d6:b1:3e:11:eb:8a:c7:
ec:44:02:e7:c6:86:3d:c2:18:c2:2e:fa:6b:d7:d2:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:41:09:67:9A:47:71:CE:75:E0:21:97:BD:CD:9F:3C:1C:A1:18
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/C3A74042F8AF11EAA8179144C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.60.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:14:64:16:f5:91:83:d9:90:77:49:8b:03:b3:4e:0e:b5:c6:
6a:4f:9c:a1:c0:81:9e:53:94:f7:ca:a5:0e:1c:92:3d:d5:7d:
fb:c7:a7:c3:da:63:ed:e5:fd:1f:29:e1:68:9d:39:1c:41:d6:
e5:a3:e8:e9:17:52:8a:4b:de:86:d5:20:92:45:94:a8:03:9d:
11:40:d2:83:ee:4c:a9:45:04:aa:ce:3c:48:0f:8d:b0:ec:ce:
e7:dd:05:b6:f0:17:d8:b4:68:1c:4a:eb:bd:75:9c:e6:90:1a:
11:70:c5:b0:9e:0c:1a:f0:e3:e7:4f:6a:96:77:0f:7d:00:6f:
71:74:fb:d0:46:cf:7c:de:b1:fe:76:fa:38:fd:ac:50:91:1a:
d9:11:d0:3d:f2:25:bc:cd:05:b0:ff:49:6f:66:a8:7f:38:ef:
53:36:5e:c3:0d:80:de:21:32:0d:0e:51:a8:c1:8d:68:46:31:
c2:96:e7:45:8d:e0:d6:93:8a:3c:db:25:f4:2b:90:db:a3:a8:
21:16:85:bd:17:53:33:f4:9f:0e:5a:50:81:40:31:00:52:97:
eb:b0:09:a5:e2:66:bd:c8:16:85:71:64:cf:68:03:e2:b3:76:
dd:34:e6:8c:f8:78:6c:93:fb:90:52:3c:cd:f1:8b:5a:8a:06:
ea:05:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org