Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
File: 6D9063222D1011E8ABD4FA58C4F9AE02.roa (raw, json)
Hash identifier: KXLqAXqv3dWYJSrNUjI66tmkFTR1YEqeayzYjeehXu8=
Subject key identifier: 6E:54:EA:CB:DE:19:30:31:AD:BC:B9:E4:2E:F4:8C:44:AA:40:00:28
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 13ED
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
Signing time: Tue 21 Jun 2022 08:25:34 +0000
ROA not before: Tue 21 Jun 2022 08:25:34 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 136970
IP address blocks: 103.107.236.0/22 maxlen: 22
103.107.236.0/24 maxlen: 24
103.107.237.0/24 maxlen: 24
103.107.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5101 (0x13ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Validity
Not Before: Jun 21 08:25:34 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62b1807d-3cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:25:c7:e4:b6:32:ff:d2:9f:6b:5f:8f:76:
3a:5f:41:36:f7:2d:cc:45:5c:79:11:e8:1f:51:a4:
86:1b:28:1b:c1:67:ac:4a:71:2b:95:dd:1e:f5:df:
cb:80:1e:71:6b:f5:c1:28:84:b5:f1:8f:10:a3:6b:
0b:df:36:df:c3:92:30:59:2d:78:f4:07:f4:3a:9b:
14:4b:3b:5a:cb:17:e9:3b:f4:11:2e:21:2b:75:57:
2d:1b:dc:1f:58:dd:fe:af:66:94:dd:09:7a:f8:da:
ee:58:c6:73:1c:50:40:8e:43:32:91:2d:91:a4:19:
84:f4:f4:4e:97:31:a3:f0:36:ca:1d:c4:d7:19:fa:
b2:d6:a2:5e:6b:52:0c:30:51:4a:e0:49:81:8b:3e:
7f:74:7e:ec:3e:8f:5f:3f:01:3f:eb:9b:37:8d:ab:
e3:c1:33:f0:33:bc:20:5f:55:93:a2:e5:7a:06:56:
12:f1:d3:e3:5e:e1:b8:77:30:b5:19:f9:50:3d:ed:
6b:88:4b:52:95:a4:89:4f:62:2e:6d:3c:4f:71:e9:
ed:e6:11:29:a6:75:8e:d6:4a:6d:f1:f6:da:c4:60:
35:90:61:83:2b:04:4d:f9:7a:3b:30:77:98:93:56:
69:6e:3b:9c:cb:fd:bd:a0:e3:f4:2b:8f:26:24:2e:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:EA:CB:DE:19:30:31:AD:BC:B9:E4:2E:F4:8C:44:AA:40:00:28
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e7:5a:22:7e:62:4c:52:c7:72:45:47:af:3b:1f:4c:71:6a:
3b:40:0f:32:a8:25:c4:5b:32:ba:da:d5:80:16:77:1e:e5:f4:
29:6a:84:3f:6c:f3:c8:dd:61:6c:94:c1:b7:3a:d5:1f:e0:0c:
68:93:62:4d:de:bd:da:83:f4:52:84:69:fd:4d:cd:9f:ca:35:
a7:81:ab:5d:64:71:e1:b9:a0:bc:64:ef:1b:07:61:8b:84:92:
01:b8:48:56:56:61:fa:d0:ee:4a:97:7f:1f:ae:8b:50:48:8f:
b3:97:7e:21:a4:01:19:51:33:2b:16:43:06:d8:0a:16:50:c2:
22:b3:1a:4a:fd:bd:36:c8:06:99:c0:fc:01:96:c0:35:33:b8:
70:6a:ba:b4:f8:52:58:d8:c4:3f:aa:74:0e:e4:f4:6b:28:2b:
08:14:2a:ae:0d:5c:3a:c6:58:0b:fe:c2:63:c0:74:f1:ed:87:
95:3b:58:42:c4:2b:67:cd:0e:80:2a:60:97:51:6c:4a:80:9b:
4c:be:6c:26:cc:90:2e:56:d3:2d:b1:77:46:b3:0e:ab:59:9f:
14:0e:f9:05:27:2d:35:f9:28:e9:90:24:77:ab:8e:a2:c7:83:
2c:f0:cc:e4:ca:6a:be:91:9b:58:4b:cb:a1:be:98:6d:c7:ae:
07:d5:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org