Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/141571149E1D11E9B18D3C60C4F9AE02.roa
File: 141571149E1D11E9B18D3C60C4F9AE02.roa (raw, json)
Hash identifier: xWtX6P1JkXgU1CinZd0Uh+i400F1e6n9STdramalMM8=
Subject key identifier: BE:28:E9:C0:D9:BB:E0:B4:17:75:65:BE:B4:4F:0A:4B:D2:1F:66:42
Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial: 0AEB
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/141571149E1D11E9B18D3C60C4F9AE02.roa
Signing time: Fri 01 Apr 2022 19:25:39 +0000
ROA not before: Fri 01 Apr 2022 19:25:39 +0000
ROA not after: Mon 01 Aug 2022 00:00:00 +0000
asID: 135042
IP address blocks: 103.207.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Validity
Not Before: Apr 1 19:25:39 2022 GMT
Not After : Aug 1 00:00:00 2022 GMT
Subject: CN=624751b3-9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:73:6a:77:38:ff:68:3a:70:12:f8:39:e6:
5e:0b:9d:b1:00:ec:3b:f9:e4:71:81:4f:4e:cf:b6:
4b:e6:45:33:77:04:ab:5c:08:f9:4b:b4:33:30:87:
44:b8:11:de:46:59:7c:d6:28:c5:72:5d:a9:f6:8e:
4c:29:4d:23:54:f5:4d:a9:54:63:c1:2b:b4:44:2f:
f7:46:a1:df:41:fc:76:39:78:6a:fb:53:bb:63:fa:
88:b3:9d:8c:b2:c6:68:71:06:fd:2f:4e:bb:6a:62:
5b:53:70:63:c1:fd:9f:87:77:10:f4:15:01:3e:7c:
8f:30:9b:b1:7b:ad:62:46:37:54:bd:18:16:6c:e9:
a5:dc:99:4c:55:08:b5:2b:98:e0:2d:84:d9:f9:e7:
28:33:fd:79:3e:1f:24:ee:0f:7b:0c:da:89:62:0b:
ca:d2:ef:2b:79:91:b9:83:5f:a9:2a:da:63:b0:9b:
c1:2c:d2:1c:6c:41:a5:3a:0a:e4:db:33:21:6e:2d:
de:c8:ff:97:f9:3f:c9:37:48:35:6b:d1:55:a2:96:
37:95:6e:81:c2:70:c9:fb:ca:23:a3:6d:67:18:74:
f6:26:9b:27:5f:90:5e:15:ab:61:46:f0:26:a3:df:
2c:78:a4:a3:51:7b:b2:bd:e8:fb:60:77:82:26:e4:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:E9:C0:D9:BB:E0:B4:17:75:65:BE:B4:4F:0A:4B:D2:1F:66:42
X509v3 Authority Key Identifier:
keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/141571149E1D11E9B18D3C60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.19.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1e:f4:23:44:f7:4d:67:c4:a1:c1:43:cf:83:22:78:14:bd:
ce:27:78:45:1e:29:98:40:4b:71:5e:42:21:85:cb:73:d6:44:
98:b2:3a:12:17:a5:2e:62:78:9d:3f:0c:a2:2a:5b:50:20:1f:
70:34:f4:3e:79:29:c0:ff:b0:8b:c6:5e:73:fb:4c:66:a8:1f:
d5:62:e7:25:fd:28:c6:a9:85:24:c7:e0:8e:74:f0:3c:ce:1d:
92:4f:75:1a:20:ec:34:97:11:7d:55:10:89:d9:ff:5c:f7:71:
c1:6e:9b:04:b9:c1:3f:73:65:f7:0e:43:5e:ad:30:5e:f8:ef:
e5:08:d8:90:f9:61:c3:d5:58:9c:61:70:86:a9:04:9c:45:56:
a5:20:f8:c6:33:4b:95:21:30:4e:e7:12:42:7b:f3:0d:c1:fc:
bf:70:b5:76:de:2b:24:ff:74:e4:a3:d6:c0:65:f7:e9:c3:21:
4e:b4:0f:ba:3e:7a:fe:00:e6:22:ef:15:0a:6d:fc:c1:98:8a:
6c:76:6d:41:a2:8f:2d:b1:e7:8f:d6:67:89:19:93:48:be:ad:
00:fa:85:b2:75:9d:9c:36:55:ee:ad:4e:6c:1c:61:90:84:40:
ea:95:73:91:35:9e:23:d4:b4:11:69:5a:02:19:82:ef:2f:53:
89:ed:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org