Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/A8CA2A383D8611ECB99C1641C4F9AE02.roa
File: A8CA2A383D8611ECB99C1641C4F9AE02.roa (raw, json)
Hash identifier: AN6EUI1bi7n9u0Nbuy56IB7q1BTUSkQGxxqTcDUn2CI=
Subject key identifier: 7F:A0:13:C4:B5:9B:6C:99:8C:38:8D:C4:D8:DE:F0:E4:CD:81:D1:54
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 03D2
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/A8CA2A383D8611ECB99C1641C4F9AE02.roa
Signing time: Thu 04 Nov 2021 15:48:31 +0000
ROA not before: Thu 04 Nov 2021 15:48:31 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 134382
IP address blocks: 103.153.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: Nov 4 15:48:31 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=618400cf-a079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:e8:b9:da:5a:c8:5b:2f:aa:c1:c7:68:d2:
9e:34:b8:24:e3:97:ab:31:3e:1f:6b:15:e0:2d:00:
b8:89:05:83:84:8e:bd:5d:63:a0:db:7c:07:f7:c3:
80:79:32:e5:71:d6:54:32:f9:f8:2c:cb:66:ce:c2:
0f:78:af:87:5a:c8:09:1e:e2:f9:54:16:c2:63:19:
bc:aa:4e:aa:21:9a:3d:51:4f:bb:e0:e2:cf:dc:20:
28:37:7a:f1:02:da:37:18:a4:43:ad:92:74:b8:a9:
d5:8d:36:5c:91:e5:5b:de:a4:b5:2e:6c:09:32:32:
f8:2e:84:47:e2:f7:a9:7a:23:5e:b8:f5:f4:79:06:
de:0b:8e:14:90:52:ea:07:ae:32:78:cf:dc:e0:59:
ef:e2:4d:2a:7b:2e:45:06:c3:a8:4d:cf:e9:3b:4b:
2a:7f:64:ca:3f:99:31:01:64:03:e4:02:b8:31:4f:
b4:09:f1:68:2c:04:9a:b4:8d:7c:d9:f9:d7:82:fa:
d5:54:24:66:ba:62:10:4d:c4:ae:19:cb:45:cd:9d:
44:d1:bf:39:08:40:7d:52:b4:3f:0c:73:61:35:17:
dc:a2:d3:5c:fa:29:8d:a2:33:ed:84:b8:80:c6:59:
69:94:df:37:df:d0:07:fe:4b:17:76:31:48:0b:6e:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:13:C4:B5:9B:6C:99:8C:38:8D:C4:D8:DE:F0:E4:CD:81:D1:54
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/A8CA2A383D8611ECB99C1641C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:18:47:f3:92:dc:89:a0:7f:af:b3:85:aa:14:ac:9a:93:96:
7d:d4:72:a6:76:0e:56:2d:47:fb:1d:36:a3:53:5e:fe:b2:b7:
e3:62:47:53:81:8d:e4:8d:b4:9e:49:1d:46:b6:f7:be:2e:da:
ff:98:96:29:f1:42:1e:3a:98:15:d2:be:09:53:0c:f9:e1:bc:
9a:6d:db:5d:4e:22:74:da:fe:e7:f2:43:29:ca:8d:0a:a0:1d:
ec:3c:ff:23:4e:72:4f:d9:33:df:b0:97:46:27:ae:55:18:c8:
ed:24:1f:de:9e:fc:67:51:bb:62:4e:36:c6:08:15:40:82:2e:
97:05:96:6b:ad:2d:96:16:b3:d1:14:8a:da:1d:24:3d:c6:18:
39:e1:52:f4:04:4e:94:ad:39:53:7b:99:b2:5a:19:cf:fe:09:
2b:dc:42:92:83:99:37:45:22:6a:77:f6:d4:8c:52:38:47:8a:
61:60:05:42:3a:7d:a8:94:f5:ab:75:3f:a5:80:95:79:5e:f6:
67:79:22:a2:87:34:4d:14:ed:20:59:7a:05:23:8e:88:6b:98:
be:4a:29:05:e7:ce:92:d2:9f:74:2d:a9:90:64:19:5c:7a:37:
65:2e:7a:47:19:cb:fa:03:b5:94:e7:f8:a2:71:54:98:b0:7f:
7c:96:7c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org