Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/151037068B6911EDBE583A38C4F9AE02.roa
File: 151037068B6911EDBE583A38C4F9AE02.roa (raw, json)
Hash identifier: c7WBykM0EH1opoJrnGx5k+cCXHb9tu28HzAMc9qfHIg=
Subject key identifier: 7E:B8:3F:95:52:29:57:65:CE:8C:23:F8:8B:13:AB:4E:61:7B:5D:FF
Certificate issuer: /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial: 09D1
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/151037068B6911EDBE583A38C4F9AE02.roa
Signing time: Tue 03 Jan 2023 13:18:16 +0000
ROA not before: Tue 03 Jan 2023 13:18:16 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 55492
IP address blocks: 103.142.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Validity
Not Before: Jan 3 13:18:16 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63b42b18-23aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:bb:4b:9d:96:f7:d3:73:ba:79:43:20:40:
93:ad:0d:30:29:e9:b1:f7:9c:6a:44:f1:db:18:b4:
90:23:7f:e8:4e:91:11:85:47:2a:9d:f1:db:84:5f:
fb:01:f4:d1:45:17:a2:48:c5:73:fd:3d:ac:41:a8:
c8:48:d2:11:66:fb:e1:ae:5b:54:93:4e:af:a9:18:
1f:b4:e3:e2:3a:3d:b8:bb:4f:40:59:d5:c1:3a:c1:
14:7e:29:ff:82:9d:92:12:42:4b:90:1c:f4:94:37:
25:33:5c:0f:64:f6:6e:4c:ca:53:7a:31:04:89:2d:
57:d1:91:c7:e5:2d:16:1a:19:0b:8c:a4:3f:68:b7:
42:77:89:ae:fb:c4:20:be:fc:24:a6:f6:4a:5c:cf:
b5:f8:f7:29:aa:05:b7:14:87:dd:57:8e:fb:6d:42:
d8:a4:f0:d7:5b:e4:a2:7f:a0:a3:13:7b:61:5f:5e:
5e:a0:3c:c5:40:d7:33:64:d4:0d:2b:46:72:6f:35:
ef:c7:30:27:b6:ed:13:24:33:f0:49:be:0b:23:c0:
ee:b7:1c:e6:92:57:19:e2:40:90:c2:15:48:1e:d4:
aa:0f:0c:4a:17:57:24:5e:74:3f:39:ca:46:35:f0:
09:cd:a3:5e:08:5e:0a:24:f0:b0:5d:87:ea:27:06:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:3F:95:52:29:57:65:CE:8C:23:F8:8B:13:AB:4E:61:7B:5D:FF
X509v3 Authority Key Identifier:
keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/151037068B6911EDBE583A38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.184.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:46:1f:eb:05:13:e9:ca:90:f3:6d:de:c6:0d:fe:7a:3a:
18:bf:82:a2:b3:0d:c4:b2:ad:7d:8e:fa:33:18:65:35:2d:c1:
3d:60:74:fc:68:67:5c:f7:94:c0:89:29:1a:bb:5e:51:27:55:
5d:de:01:54:83:a3:d0:a6:d1:2b:83:9b:c5:1a:de:b5:c5:02:
d7:10:03:8a:60:b4:a6:d0:50:2a:44:3e:79:36:5c:8f:1d:70:
0e:ea:1d:3b:2c:db:98:b4:29:65:59:d6:a3:a7:f9:53:d1:f4:
7f:4a:92:84:5c:6e:6a:6d:ad:7e:19:96:08:1d:c4:5f:7b:c1:
26:0d:ab:96:9f:ba:27:2f:c4:cc:59:b6:ef:75:3e:c0:ca:8d:
35:f4:19:4d:8f:4e:43:e9:6a:f9:2f:5c:ad:6e:ae:1f:1f:aa:
dd:c0:23:07:4c:9f:32:84:52:6f:bf:90:cf:14:6f:ed:bd:14:
e0:4a:22:eb:31:b9:30:73:b7:4f:38:31:2b:5e:e6:73:4d:d3:
70:39:97:0b:94:4d:fc:36:2a:c8:4e:70:ca:fc:bc:2d:0c:e4:
9f:b3:22:f8:43:89:0a:7d:a9:cd:23:1e:d0:61:a9:4e:68:d6:
27:d4:e7:e9:85:35:3c:40:21:40:7a:d8:85:85:e1:53:e6:bc:
7b:a3:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org