Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/F571DBC8731411ED98D18134C4F9AE02.roa
File: F571DBC8731411ED98D18134C4F9AE02.roa (raw, json)
Hash identifier: WwhLQUcy1gaEq15QCbs8q3Ek367bqKowI6Vqg44OWOU=
Subject key identifier: A6:01:D0:18:C0:AA:B7:B2:96:83:02:7F:FE:79:FF:26:4A:B7:15:A9
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 49
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/F571DBC8731411ED98D18134C4F9AE02.roa
Signing time: Wed 29 Mar 2023 06:56:58 +0000
ROA not before: Wed 29 Mar 2023 06:56:58 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 398465
IP address blocks: 103.85.200.0/23 maxlen: 23
103.85.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Mar 29 06:56:58 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6423e13a-47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:33:86:d6:a5:2f:0b:13:f1:3e:1e:0f:ee:
b3:10:3d:a5:3c:64:ad:b0:a1:89:b1:e1:a2:a9:3c:
b9:c1:62:fd:33:12:05:a9:d7:be:d8:9b:44:f3:27:
71:dc:88:74:5c:80:8d:b3:fc:9e:72:ee:b0:c0:85:
01:eb:7b:c0:f0:08:7e:64:ee:a6:6d:3b:d1:68:74:
43:0b:84:83:80:5f:dc:46:35:c9:18:49:bc:a1:e2:
43:a4:f0:11:be:21:ad:77:97:b6:15:a1:c8:94:e9:
9d:ea:43:2f:8d:b5:ad:95:6b:bc:82:c3:91:bc:43:
37:bf:ec:f3:0f:73:c6:60:61:6b:01:a9:7c:f4:84:
06:b6:68:be:a2:7e:e5:7e:8f:81:48:0e:95:70:1e:
2e:72:b2:fc:bd:b0:4a:5d:d9:9f:bb:93:68:9a:93:
b8:1f:0d:6c:73:ed:34:6f:2e:69:8d:d7:75:77:37:
da:e1:7a:80:b5:1b:ca:59:a7:3e:b9:7a:e5:86:cd:
8e:1c:45:65:2d:fe:41:ac:45:8e:04:e0:09:8d:80:
f3:3d:bc:77:24:fe:fc:0c:6b:b1:77:6e:21:dc:9a:
51:e2:55:ae:cc:76:f2:70:ab:06:14:0e:44:7f:bc:
c4:fb:68:d1:8d:1a:b9:5e:4e:d5:8b:df:0c:28:af:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:D0:18:C0:AA:B7:B2:96:83:02:7F:FE:79:FF:26:4A:B7:15:A9
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/F571DBC8731411ED98D18134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:18:ef:82:d7:43:d2:63:23:4c:2b:d5:2d:fc:ab:ac:c7:bc:
2a:15:08:db:33:a6:52:b4:a8:6d:37:ea:8c:62:12:52:1d:b8:
5e:fd:69:f1:71:52:59:af:4a:6c:af:cb:37:ce:52:79:2f:50:
37:f1:b4:4d:cd:e5:9a:28:c4:1f:04:b5:18:2b:3d:9c:5e:9c:
4b:82:ef:f9:65:02:89:e0:01:82:fc:db:ed:11:2a:fc:fe:bf:
38:27:44:f4:ef:35:a3:c4:99:52:8f:6c:f5:78:30:a6:04:8a:
d0:49:a2:8a:79:3f:8d:1b:64:16:77:26:e9:80:e7:97:f5:ed:
a1:61:2a:24:8e:18:79:98:b2:6f:74:b5:87:17:b4:b8:ae:1e:
f7:0c:83:fc:e4:1a:30:91:ae:96:2f:6a:2c:90:99:fc:29:f0:
0c:e1:35:f0:dd:b1:80:0b:87:4a:3f:6b:c1:64:7c:e7:a4:ec:
70:ce:de:17:5c:33:86:95:f7:b8:9c:cd:f9:d3:6c:25:8f:d3:
e3:ad:5f:f3:24:76:bd:ac:b6:cf:fb:b1:eb:36:d3:b2:94:47:
76:35:ff:16:50:e2:98:e6:c2:74:f0:78:54:d3:c9:3e:93:69:
fc:58:21:36:14:0b:ca:f8:b1:3a:85:76:d8:a9:85:21:9e:51:
0b:57:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org