Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/380D71B26F9D11ECAC7C6F6CC4F9AE02.roa
File: 380D71B26F9D11ECAC7C6F6CC4F9AE02.roa (raw, json)
Hash identifier: IHC0QcKPUsNdc6dkZ5xgzrYH1E6vS00ioRNOK3vhxvo=
Subject key identifier: AA:80:03:FB:C3:1F:34:94:9B:3E:31:3A:04:5C:29:14:0F:F0:FB:1F
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 0D7A
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/380D71B26F9D11ECAC7C6F6CC4F9AE02.roa
Signing time: Fri 07 Jan 2022 09:35:58 +0000
ROA not before: Fri 07 Jan 2022 09:35:58 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 4837
IP address blocks: 103.123.4.0/24 maxlen: 24
103.123.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3450 (0xd7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Jan 7 09:35:58 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61d8097e-b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:e1:3e:33:5f:34:34:1c:e2:16:d5:d9:c4:
f8:45:67:9c:2e:02:6b:84:ca:3a:80:ba:7f:86:9b:
73:ba:f9:a1:27:a5:b2:bf:8d:8a:01:33:a2:d0:2a:
d8:1b:d1:2b:9f:c5:67:c2:49:e3:70:1b:3a:dc:be:
53:7b:9e:9c:2d:69:f2:52:6c:bb:e0:68:7a:80:a0:
55:b3:28:4e:ae:60:14:b1:d6:6e:be:77:14:ee:1a:
d2:bb:23:7b:47:e4:a4:48:1b:80:4e:8c:2b:7d:e9:
92:8c:ee:2e:e0:8c:d5:f9:13:72:a3:8a:18:dc:1a:
18:ed:11:55:0f:cb:6c:9c:21:0c:e6:fe:9b:8d:0f:
44:2a:47:b2:b3:1e:2e:30:7c:ef:30:1e:92:23:9b:
df:5d:e5:61:be:a0:ad:91:76:9b:7b:e5:2c:ef:84:
04:48:76:00:b4:49:75:a5:14:ff:2f:8b:c1:ed:ed:
4a:bd:4b:ef:3a:11:20:ce:fb:dd:37:55:9c:36:84:
3c:ef:a0:4c:74:5c:eb:22:5c:06:45:46:68:55:52:
5d:e3:38:07:10:49:25:3d:25:4c:e0:7e:79:f3:eb:
a9:ff:c5:fa:87:e5:fb:2e:5b:b2:4a:60:7f:3a:c7:
2d:fa:1d:ea:3b:f7:4f:89:db:17:08:19:20:11:91:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:80:03:FB:C3:1F:34:94:9B:3E:31:3A:04:5C:29:14:0F:F0:FB:1F
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/380D71B26F9D11ECAC7C6F6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.4.0/23
Signature Algorithm: sha256WithRSAEncryption
28:a4:67:9f:60:19:eb:42:4c:a4:9b:d1:fc:49:1a:98:be:30:
0d:e9:7f:e7:61:3b:32:6d:8d:5c:3f:91:7f:43:36:cc:88:52:
19:de:e6:27:76:f5:e5:6f:21:e6:73:66:79:bf:46:ef:c9:cf:
97:e4:97:9c:68:5d:9f:84:ee:b9:22:c0:9b:15:5b:c1:6b:84:
16:8c:a7:d3:60:69:6b:6f:a6:e3:fe:42:ad:a7:03:0f:f1:2b:
78:ce:73:c3:a2:fc:47:2e:23:8a:92:35:b9:7f:72:1a:96:74:
71:70:f9:bd:2a:51:89:c8:1c:55:05:17:c9:77:58:0d:f0:3b:
8b:d3:c8:dc:39:e4:9c:d0:52:14:d6:a4:39:30:14:91:e9:1a:
eb:b7:61:1a:a4:b1:f5:22:2b:b0:24:19:99:89:9c:ea:58:13:
b2:a8:85:8d:31:73:c3:23:e8:82:e5:ad:e5:70:79:a0:1d:8a:
a1:1b:4f:40:d1:be:be:c5:72:04:fd:92:78:61:c0:5b:58:08:
7a:53:33:50:fa:57:61:59:f0:e6:94:8e:a6:30:08:51:af:a3:
3b:2a:e4:b3:75:94:43:43:1a:51:41:3d:bc:cf:73:e7:a0:1e:
b9:6b:8f:55:e5:5c:bd:e6:05:5b:bb:b4:39:b0:ce:98:52:0b:
92:e5:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org