Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/DDD932CE761511EC85243017C4F9AE02.roa
File: DDD932CE761511EC85243017C4F9AE02.roa (raw, json)
Hash identifier: /Y/GzR74lT+l9mqnemoBTTVJf21fhLBCOm+d8j72e2o=
Subject key identifier: EE:D3:6F:90:28:C5:A2:F7:F6:F8:6F:E7:5F:10:8D:32:13:BF:24:33
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 0CE8
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/DDD932CE761511EC85243017C4F9AE02.roa
Signing time: Sat 15 Jan 2022 15:14:43 +0000
ROA not before: Sat 15 Jan 2022 15:14:43 +0000
ROA not after: Sat 28 May 2022 00:00:00 +0000
asID: 147001
IP address blocks: 103.135.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Jan 15 15:14:43 2022 GMT
Not After : May 28 00:00:00 2022 GMT
Subject: CN=61e2e4e3-a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:07:b7:79:7f:71:95:51:1b:a3:5e:97:e8:
66:b8:a9:5f:bc:05:33:c8:4c:8c:5d:81:85:a9:de:
dd:6c:72:50:24:fa:1a:1c:4c:0b:50:b8:cb:a4:d9:
32:72:65:c5:a2:1e:48:b6:72:0f:f0:27:b1:7b:9e:
d7:40:34:c2:25:53:d9:3b:17:fa:90:cf:03:f6:35:
aa:fa:17:1c:06:53:6c:e1:9d:5a:39:01:79:2e:82:
b2:87:2e:9a:1e:80:c1:65:e7:33:1b:cd:ed:b0:a7:
39:0a:15:f2:38:80:43:ff:b7:17:4d:dd:7b:1a:19:
9b:21:fe:b5:ab:f2:a8:6e:ae:b1:7d:e4:90:9f:45:
7e:b7:4f:3e:80:dc:fc:f7:b7:67:76:86:b6:84:35:
29:82:1c:8b:7d:3f:68:de:8d:2e:6e:27:43:83:06:
e6:70:cb:fb:47:7a:1a:4c:0c:e2:b4:22:b3:32:2d:
49:f4:cd:b6:50:34:65:75:82:16:da:66:5b:91:c3:
1d:8a:9f:c3:ce:c9:72:7c:03:78:35:ce:38:4d:26:
0a:32:01:45:2e:8c:cb:ef:03:4e:69:5c:f7:3d:2a:
81:80:ee:91:47:c5:d6:ab:a2:ef:36:94:0f:2d:e3:
aa:65:ad:26:b0:57:eb:c3:f1:9c:4e:88:5f:2e:20:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:6F:90:28:C5:A2:F7:F6:F8:6F:E7:5F:10:8D:32:13:BF:24:33
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/DDD932CE761511EC85243017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
18:01:76:30:e1:21:c6:b1:4a:ee:8c:9c:35:41:0c:48:97:93:
d0:a6:26:28:de:c5:24:27:18:cb:8e:12:c5:e3:5f:8c:22:09:
ea:d0:da:ad:ac:af:fb:42:29:b3:e7:58:5d:ca:57:3c:bd:f5:
05:f9:b8:d1:35:44:bc:dc:70:47:51:e3:ca:47:8b:fd:74:49:
fd:4f:ac:af:bc:72:b2:89:fe:c2:f0:ee:28:72:59:5c:2c:f0:
bd:6c:db:e1:e3:95:aa:ca:ce:09:d9:61:e8:9b:3a:d7:da:df:
b7:de:a1:89:f7:bd:6e:f0:a8:03:8f:c3:dc:74:78:a9:d5:af:
58:12:05:fe:7c:a7:38:52:0c:20:3d:f5:af:e1:75:08:2d:f8:
ad:b5:2e:32:49:ff:5b:68:57:5a:3b:58:30:f3:09:51:39:cc:
42:1a:60:92:9b:49:b2:d8:0c:3c:3f:34:ff:d5:44:da:aa:41:
31:5d:57:f5:98:85:87:06:87:f7:88:01:67:98:6f:83:f3:7d:
96:47:38:19:ac:06:b3:b2:a8:43:19:aa:20:34:6d:1e:83:29:
11:13:10:e9:fc:d7:24:22:cd:e8:72:a6:d5:eb:99:8b:3b:48:
62:20:81:7d:18:0e:42:83:02:18:89:21:a9:bc:bf:f4:bc:7a:
be:e2:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org