Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5364E62E6EF811ED945DA385C4F9AE02.roa
File: 5364E62E6EF811ED945DA385C4F9AE02.roa (raw, json)
Hash identifier: kjrtKXvUISC5jH/wXSNm7VRqQ3koYzLzZOhf8hdyd8o=
Subject key identifier: F2:4B:1A:F0:63:26:E3:B6:AF:CD:61:58:61:B7:E8:D9:B8:56:55:C4
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3D85
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5364E62E6EF811ED945DA385C4F9AE02.roa
Signing time: Sun 30 Jul 2023 07:24:46 +0000
ROA not before: Sun 30 Jul 2023 07:24:46 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 149137
IP address blocks: 103.15.222.0/23 maxlen: 23
103.209.34.0/23 maxlen: 23
103.238.234.0/23 maxlen: 23
2401:1960::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15749 (0x3d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 30 07:24:46 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64c6103e-9513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:20:cd:37:c0:71:c5:99:6b:1d:06:a1:82:
63:95:09:2d:29:d5:d8:83:b6:be:d6:66:20:2a:b7:
77:99:2e:15:ca:32:41:91:d5:11:85:07:85:87:15:
52:f4:12:dd:04:d6:9b:e1:a3:67:fd:de:ca:a0:3a:
57:f4:42:24:a3:0c:7a:94:5b:7a:5e:e4:ac:45:bf:
74:75:e1:a1:f1:fd:4d:bf:3d:b0:a2:f8:cd:6a:38:
eb:75:7d:0b:b2:7d:7b:ec:7c:60:bd:7a:d6:d5:c4:
bb:60:c5:ba:7e:73:7a:86:14:78:a0:3b:47:70:0d:
e8:9f:c0:b3:6b:25:7f:7d:e4:9b:a5:83:77:f4:de:
37:84:2d:cd:ee:91:59:64:b0:04:4d:89:78:3d:91:
66:12:7e:47:a9:61:a8:47:da:93:6f:8f:52:fc:2a:
e1:9e:4a:2d:2a:68:3a:48:b4:e9:b1:32:55:13:d7:
3c:4e:f6:e5:16:7c:63:a5:d9:cb:46:1a:57:34:82:
d9:df:fa:46:9e:74:d2:82:ae:6b:de:3d:7f:d7:da:
d6:15:6e:78:69:88:c0:37:8b:60:7e:94:99:51:a0:
cf:cc:dd:29:5e:e6:4e:c5:6b:6a:02:cd:65:e5:a4:
27:47:e0:92:c3:1f:39:39:5f:ce:c9:2c:14:38:a2:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:1A:F0:63:26:E3:B6:AF:CD:61:58:61:B7:E8:D9:B8:56:55:C4
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5364E62E6EF811ED945DA385C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.222.0/23
103.209.34.0/23
103.238.234.0/23
IPv6:
2401:1960::/48
Signature Algorithm: sha256WithRSAEncryption
13:c0:52:25:58:f6:78:31:8c:1f:54:d7:d5:1c:04:89:85:3e:
5b:51:3d:3e:16:14:4d:21:50:77:46:6b:72:ee:cb:fe:28:55:
c9:ea:fa:d3:58:c7:73:c7:a1:02:2b:88:1c:06:a1:81:70:08:
4a:49:5b:25:7f:df:bd:fe:e4:ea:01:50:ba:b0:1f:52:e7:53:
f0:9f:17:11:35:2a:0c:67:0d:6e:c8:46:0d:93:26:6a:2e:4f:
17:27:59:00:77:59:61:81:c3:8f:4d:9a:73:40:87:6b:02:7e:
0b:8e:8e:61:b6:ce:07:2d:56:1b:18:78:a8:bc:a6:ad:1d:90:
d1:55:52:85:45:ff:c7:54:85:db:54:cf:1d:66:30:95:79:07:
22:fa:1a:22:7f:6b:20:55:fd:9b:f3:2f:61:a9:a6:1a:fe:b4:
bc:81:19:fc:4d:e2:a2:bf:21:90:76:99:c0:eb:20:e0:bc:2b:
5f:69:cf:26:16:25:f3:09:17:5d:78:98:0f:3f:f0:ac:1c:b1:
b6:84:aa:99:35:c2:99:cb:d1:cf:dc:09:78:1f:d5:66:d7:e1:
d5:8e:2d:41:90:c1:50:93:6d:5f:91:74:8d:bb:99:20:b5:0c:
d4:da:1f:a5:00:72:59:aa:a6:00:63:3b:73:19:b2:30:7d:87:
54:72:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org