Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/542777EA6B3611EDAFC69F83C4F9AE02.roa
File: 542777EA6B3611EDAFC69F83C4F9AE02.roa (raw, json)
Hash identifier: VjhJLCs8SwLv588HcsZBgvNAo1EfIBSFxvyrUg802QU=
Subject key identifier: F6:56:0F:A7:03:2B:F3:59:D3:F9:9D:02:48:76:C7:22:E8:4D:AB:A1
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 03
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/542777EA6B3611EDAFC69F83C4F9AE02.roa
Signing time: Wed 23 Nov 2022 13:54:20 +0000
ROA not before: Wed 23 Nov 2022 13:54:20 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 9930
IP address blocks: 103.246.204.0/24 maxlen: 24
103.246.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Validity
Not Before: Nov 23 13:54:20 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=637e260c-799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:10:b6:20:c9:ea:3e:52:5b:b4:9a:c5:80:
22:0d:38:07:40:92:1e:80:6a:78:b6:3c:5c:c8:1b:
cb:f8:06:0e:58:dd:a5:0e:89:a4:1a:65:9a:23:74:
08:e0:39:b2:a3:b8:b8:d3:23:b0:90:07:8c:82:35:
dc:0d:d0:de:03:93:48:bf:39:ad:cf:2e:b2:90:6a:
b5:88:dd:63:cb:7b:83:e1:47:c4:14:ab:c5:27:26:
99:82:aa:6c:0b:0c:52:97:af:71:60:f8:6b:a3:24:
28:84:c7:0d:5b:33:53:0b:e4:25:5c:44:42:08:27:
35:cb:03:a5:9b:e6:5d:a1:10:e8:ca:c8:81:27:a8:
6a:32:55:60:18:93:0f:c3:35:2d:fe:d6:3c:21:1a:
a3:16:d6:58:a9:8d:a2:d2:11:3b:3d:13:c7:a3:11:
4f:44:ee:6f:4d:56:aa:ae:56:b8:af:c9:95:87:47:
2f:db:b8:5a:88:cb:45:c3:be:24:42:07:4e:48:69:
c9:a1:df:a1:62:77:1b:c4:92:52:94:51:28:e3:74:
10:cd:6c:55:4c:e3:db:7b:e7:b6:f9:ac:36:0e:39:
c0:2b:83:e2:1a:fe:02:60:16:16:78:f7:6f:e7:13:
1b:cf:f8:19:eb:01:0c:7b:ce:4e:6b:f0:e9:6b:ef:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:0F:A7:03:2B:F3:59:D3:F9:9D:02:48:76:C7:22:E8:4D:AB:A1
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/542777EA6B3611EDAFC69F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.204.0/24
103.246.207.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5f:60:47:9f:07:13:87:ee:41:c5:62:82:37:89:a2:f5:9a:
88:51:9d:c4:4d:b2:de:8f:4a:b5:b0:08:d9:ae:04:54:c3:78:
96:12:64:63:70:9e:98:19:7b:11:df:a6:0e:83:04:33:c7:ab:
76:17:89:80:9e:a4:db:4f:00:fe:70:5d:7c:fe:06:c0:f0:92:
43:7e:18:7f:0f:11:7e:0a:db:5e:be:d0:25:8e:8d:6e:df:9c:
72:c4:a1:ae:a4:ec:df:2e:7d:03:51:fb:9f:1c:8e:57:15:9f:
49:b6:90:8b:c8:2d:36:62:9f:68:b0:41:cc:4c:a2:17:02:4a:
00:42:0e:18:de:b8:1c:be:23:dd:41:ae:2d:89:93:00:8e:59:
d5:ab:0d:99:54:af:53:84:3a:20:c5:df:a3:17:5c:56:42:f0:
3f:5d:d9:2a:61:43:d3:72:56:b0:e6:dd:5e:6d:c0:36:33:10:
93:82:d6:25:e4:b0:f8:0e:4b:91:6f:50:c8:c3:37:d9:9b:b7:
cd:b6:22:51:0e:f6:0b:95:04:c0:de:b4:f4:75:91:80:24:c6:
4c:49:cf:1f:f1:7f:9e:1b:83:7b:c6:89:9e:de:bb:d6:61:bf:
e7:5c:29:68:72:3e:ea:6d:18:54:d6:ec:75:78:40:43:23:ec:
61:d5:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org