Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/1C905D344C7611EE9149151BC4F9AE02.roa
File: 1C905D344C7611EE9149151BC4F9AE02.roa (raw, json)
Hash identifier: jRyzMK6O+QhNRATbenYnvSpSP6i/t42fNFjXbHKwhMc=
Subject key identifier: 6D:A5:5D:E7:CC:88:B4:83:82:1D:D7:E1:9E:20:C7:C2:D5:CC:E7:0D
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 34
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/1C905D344C7611EE9149151BC4F9AE02.roa
Signing time: Wed 06 Sep 2023 05:27:46 +0000
ROA not before: Wed 06 Sep 2023 05:27:46 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 47585
IP address blocks: 103.83.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Sep 6 05:27:46 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64f80dd2-2bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:4d:5f:9c:e8:5c:f8:1f:22:57:a6:dc:bc:
21:80:ab:82:cd:a6:7f:f6:b4:e8:d9:6d:a8:16:9e:
f3:d1:9f:1b:34:36:ab:a2:b6:c4:3f:fa:41:6f:cc:
28:2e:ed:c7:a7:ae:bb:7c:1e:93:cb:96:1e:4d:f5:
a9:88:81:f1:bc:da:5a:38:7e:e9:d5:a3:a1:31:00:
6e:1f:97:7c:ed:99:5c:0f:fe:52:a5:58:59:de:63:
d1:76:85:a8:6c:e2:e7:36:9d:8d:bf:6d:a5:5c:20:
e4:e4:40:4f:83:2e:78:88:e7:bf:75:af:ed:9d:eb:
a9:65:7f:1b:9b:9e:37:c5:85:4e:bb:e1:fc:47:11:
b8:69:f7:14:3e:0b:38:ae:d0:b4:4e:45:3e:ac:4c:
93:6e:83:af:c8:91:7c:8b:0b:b2:fa:23:96:02:cc:
1b:56:09:71:9b:8e:c2:39:8d:e6:67:a7:71:af:93:
7a:9f:ff:1a:73:66:91:4d:33:51:c3:b8:2c:06:24:
da:01:3f:1c:e0:39:60:8e:76:c5:ac:d3:a8:1a:20:
96:17:ec:05:bb:ed:29:24:66:cc:3f:be:00:9c:22:
9f:4f:4e:0f:fd:2d:90:5f:4e:52:50:07:ec:5d:c0:
de:07:37:70:4a:e3:2e:1d:5b:1e:04:46:90:bc:c4:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:5D:E7:CC:88:B4:83:82:1D:D7:E1:9E:20:C7:C2:D5:CC:E7:0D
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/1C905D344C7611EE9149151BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.43.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:56:25:ee:63:10:59:5a:c5:de:c5:74:f6:e4:3f:a4:67:
14:5d:68:38:88:69:dc:c0:11:85:17:14:21:41:04:80:ac:d9:
19:a9:f4:5a:5b:f6:45:1f:ff:80:2a:5b:7f:1c:bd:ac:1a:e4:
44:d4:a8:30:3c:67:d2:bd:2a:a1:b9:f7:21:0d:98:12:10:9c:
22:22:96:5d:dd:f3:46:0b:16:02:7d:d9:20:85:fd:6d:9b:0b:
02:84:68:42:73:9f:85:2e:dd:7d:40:73:f8:82:cb:77:97:ce:
db:31:28:c3:ee:31:a8:45:ed:44:23:32:0c:d5:b7:66:3b:56:
ee:b8:88:ce:0c:8f:13:b0:de:6a:33:62:4e:e4:a0:af:ad:27:
3a:37:dd:32:98:58:c9:cf:40:16:06:d4:71:12:ed:5b:25:5d:
04:3f:8f:83:d1:9f:92:fe:6f:02:11:da:9f:c1:a8:8f:ee:34:
72:ed:bc:55:87:1b:0c:b1:bd:ec:93:28:99:b2:79:a3:63:39:
67:f6:d3:d6:38:19:d2:2d:e9:9f:7d:59:12:88:76:a3:f3:a2:
09:78:c2:51:7f:9d:4d:70:ca:62:03:25:33:cd:ea:99:d2:d5:
e3:29:62:ab:4c:97:f7:85:c1:da:40:61:3b:29:79:51:42:a5:
16:14:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org