Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
File: 45E227368AE411EB9FA47119C4F9AE02.roa (raw, json)
Hash identifier: hETc3xizNZepLgaeYCwupGyEA3/J2vvc+8PD0N1jOo4=
Subject key identifier: 63:57:81:87:29:15:31:E5:FD:86:1F:26:AA:6A:7C:27:67:EC:4F:EC
Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial: 054C
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
Signing time: Sat 25 Feb 2023 00:50:42 +0000
ROA not before: Sat 25 Feb 2023 00:50:42 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 138544
IP address blocks: 103.161.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Validity
Not Before: Feb 25 00:50:42 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f95b62-4333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:c5:43:14:ff:64:6e:f4:77:9b:f4:e7:22:
34:dc:52:eb:b7:1c:f0:92:86:97:0d:6f:5d:15:7a:
dd:0d:a6:5a:c9:90:97:06:0f:4d:ff:37:95:83:a3:
a1:65:66:f6:4a:b9:cf:c8:7f:5f:4c:0f:44:b0:3c:
8e:3e:91:d1:1c:2a:c9:df:ba:76:6d:1c:e0:d9:89:
44:39:f4:f2:aa:7f:06:f7:03:31:ce:c4:de:e8:af:
d3:a2:7e:f5:b0:73:3f:f5:96:a5:7f:24:0f:72:1d:
0b:45:42:95:50:e9:97:43:e1:4c:e7:44:69:49:bb:
d1:11:90:a3:75:db:51:c2:f6:9c:2e:cf:58:b5:6a:
f9:9f:37:f3:bc:2d:3f:4e:9d:a2:1f:9b:7d:9b:51:
25:66:36:09:ba:12:bc:55:f2:59:6b:0f:07:52:89:
4b:cc:83:63:64:b4:57:c9:ed:7f:b4:b1:07:7f:65:
d9:23:18:ae:e3:d5:21:cf:08:b6:19:66:6f:43:46:
61:32:db:21:bc:98:ba:42:46:90:f6:46:1d:92:90:
4e:83:6f:ae:c8:50:d4:3f:9e:32:92:be:ca:90:f6:
e9:41:6f:13:47:3e:f5:02:1e:e4:f7:05:c0:08:2b:
31:0e:b8:dd:d7:84:09:8b:15:8d:80:bf:ee:6d:4d:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:81:87:29:15:31:E5:FD:86:1F:26:AA:6A:7C:27:67:EC:4F:EC
X509v3 Authority Key Identifier:
keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:19:52:02:e3:03:d5:91:7a:d9:2a:d5:cf:8a:98:b0:71:ee:
88:ad:76:81:38:4a:61:e8:25:ad:2e:1b:75:15:ae:53:9b:4b:
95:b3:9d:d3:d6:cb:e2:5e:17:8b:58:dc:8a:c4:57:98:98:d4:
70:a7:71:59:8a:bd:ba:86:6b:b8:77:77:f6:18:55:0a:fa:f3:
c3:f2:96:32:cd:e2:f3:13:0f:c1:87:5d:ee:cb:05:00:84:2b:
5f:fe:f6:54:cc:11:86:3f:d4:64:01:52:1f:a2:89:2c:b6:45:
bf:97:5a:0d:01:1d:92:28:1d:64:55:e2:c0:0b:88:66:dc:82:
37:30:58:f2:57:cb:be:13:4c:b0:56:dd:e9:9e:8b:bc:29:8a:
db:d1:be:ec:14:8c:10:8b:d4:01:20:9d:17:04:4d:43:5e:f8:
63:22:b8:49:81:33:5d:bc:d5:e0:7f:28:58:86:69:0e:fc:af:
95:61:b5:f2:c0:1e:a2:5b:38:42:5f:fb:a6:a0:e2:94:bd:b3:
3c:21:37:34:bf:fb:18:1f:97:27:52:ab:fd:82:a8:61:05:3d:
bb:ee:92:67:d7:59:29:b0:d6:d6:33:71:d6:54:cd:32:ee:c5:
44:0c:f8:61:2f:d9:f2:3b:41:48:d0:97:43:64:89:75:87:8f:
a6:2f:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org