Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/38B954C240EA11EDAB060385C4F9AE02.roa
File: 38B954C240EA11EDAB060385C4F9AE02.roa (raw, json)
Hash identifier: bvue/LDAdjYAIZpTaZDnd95secLHH1eWbfkzFPg02/s=
Subject key identifier: 62:F9:74:60:A2:3E:79:D4:E6:B7:FE:B2:73:EE:0D:A4:80:A2:21:60
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 01D4
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/38B954C240EA11EDAB060385C4F9AE02.roa
Signing time: Fri 30 Sep 2022 18:03:44 +0000
ROA not before: Fri 30 Sep 2022 18:03:44 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139088
IP address blocks: 103.179.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Sep 30 18:03:44 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=63372f7f-149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:c3:74:7a:ef:32:f4:aa:7c:7a:36:65:ea:
1d:fb:58:52:82:a4:23:53:75:21:57:d1:6b:62:f8:
2d:34:fd:72:cb:cb:d2:89:98:36:25:16:21:e0:da:
3a:31:6b:32:77:18:ce:4a:0a:a8:e8:b0:8f:88:6f:
c1:f8:a7:7b:b1:f3:73:45:97:0a:3f:f2:82:b8:57:
47:ce:af:c6:0f:2d:00:9f:3e:1b:7b:9b:3c:80:b1:
17:24:d2:1a:c8:87:be:f5:60:ca:bd:20:ef:2e:88:
51:c0:cd:71:e6:b8:b4:14:4e:e4:5a:4b:0c:2b:ef:
39:fa:a1:7c:0a:e0:a9:d6:af:b9:4b:eb:8b:d4:e9:
59:25:b6:dd:a0:c6:53:03:90:28:72:d5:d9:64:56:
55:2d:89:4b:78:72:2e:5e:f6:9e:14:cd:0a:f9:e3:
e8:32:f9:d0:59:50:2a:ca:ae:6e:2e:36:79:f5:ae:
f1:43:8f:d3:89:ca:6e:78:be:be:23:26:ee:21:c8:
73:67:2e:d5:cf:a1:52:2a:ae:53:4a:1f:f8:e9:d3:
fb:0f:3e:ec:0a:bd:f6:e2:a7:83:be:a3:83:4d:26:
8c:24:a1:95:5f:94:8f:da:ad:3e:23:ff:f5:1c:b8:
78:54:9d:d0:b1:f7:25:6b:9a:50:4f:81:fd:03:5e:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:74:60:A2:3E:79:D4:E6:B7:FE:B2:73:EE:0D:A4:80:A2:21:60
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/38B954C240EA11EDAB060385C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/24
Signature Algorithm: sha256WithRSAEncryption
64:09:ae:2b:15:05:70:54:75:71:c2:b7:f8:5c:57:19:b8:27:
14:11:43:b7:11:27:47:9e:b1:ca:0a:82:52:0e:19:11:e6:b9:
6a:33:0a:6b:0a:bd:3b:00:70:ea:bc:43:b1:64:65:48:bb:a5:
aa:8e:2f:9e:24:4b:b7:82:fb:cb:81:70:34:e0:ef:85:e5:5d:
b2:84:33:5a:33:11:ca:9a:95:30:18:31:5f:df:1e:2f:d1:01:
d1:27:ef:cd:c4:2b:ae:e9:6b:43:fa:23:89:c0:7b:f2:ee:ec:
23:07:57:35:cf:e1:7f:18:9a:b3:3e:45:56:f6:06:88:9f:79:
2e:48:2c:2e:eb:54:a9:91:03:29:06:75:86:24:8d:f2:e9:d8:
8e:63:9f:00:89:b8:dd:82:8b:16:af:5b:a3:e5:6c:47:e8:97:
29:0a:f2:cb:79:dd:c3:c8:11:95:9e:42:e6:a9:15:58:fd:29:
f7:83:ff:82:7e:ea:08:e3:17:e6:9b:9f:07:72:64:7d:1a:68:
c2:7b:c7:2c:cb:8a:76:6d:36:3e:46:29:d2:d8:6f:4a:a2:1b:
fa:3c:49:52:3d:9e:d1:d6:db:f8:35:42:26:6f:2d:86:06:8e:
43:df:66:64:24:01:a8:87:df:9d:09:43:14:d9:93:23:3d:9d:
85:ee:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org