Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D76F0266B9A811ECB7EE5A71C4F9AE02.roa
File: D76F0266B9A811ECB7EE5A71C4F9AE02.roa (raw, json)
Hash identifier: OQWRt6r5N2e9H1/qdym2DHjzvIXyb3VsVQ0QudtAyaQ=
Subject key identifier: 78:35:B2:E4:CF:16:43:B0:F2:BB:34:37:BA:D5:8A:56:BC:17:F6:87
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 0E3A
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D76F0266B9A811ECB7EE5A71C4F9AE02.roa
Signing time: Mon 11 Apr 2022 15:05:37 +0000
ROA not before: Mon 11 Apr 2022 15:05:36 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 139905
IP address blocks: 103.123.6.0/24 maxlen: 24
103.123.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Apr 11 15:05:36 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=625443c0-7cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:66:ae:91:59:d0:4a:9c:00:30:5f:5e:b7:
be:b7:c1:60:cf:45:80:a3:78:35:4f:06:f6:dd:71:
10:86:ba:91:27:11:50:ae:51:cb:16:69:66:5c:57:
5a:c6:bb:99:c0:58:55:69:50:fd:a4:51:40:26:68:
9d:5a:ba:80:ba:30:81:7a:82:81:7b:92:77:f3:2b:
41:14:b4:a5:bd:d6:62:52:88:bd:6d:70:6f:dd:7f:
fd:49:2d:56:28:c6:ae:35:4d:54:ea:d7:c6:80:4c:
70:b6:92:a0:42:b1:90:69:de:cf:ed:57:f5:ee:79:
5f:e1:a3:38:d0:2a:b7:7b:6e:76:df:f4:d7:fb:e7:
6e:d8:8e:29:ca:9c:45:23:c2:0e:d2:23:cb:1e:20:
f0:b7:c4:00:5d:a5:06:f6:97:03:d5:ef:d6:ed:4f:
42:7f:60:ba:78:66:70:73:97:29:f3:00:49:70:45:
e3:93:44:e1:d4:9b:e0:b1:b7:ae:0e:bc:10:9f:d9:
99:df:00:ce:81:f6:75:c0:d6:24:57:fe:38:0d:0c:
8d:4f:f4:dc:6d:5d:ae:cd:cd:58:b3:5c:48:42:61:
9f:6c:85:66:33:24:6e:bd:2f:87:b4:83:f4:5f:04:
76:83:ca:95:db:33:58:29:42:42:d6:78:3b:55:d6:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:B2:E4:CF:16:43:B0:F2:BB:34:37:BA:D5:8A:56:BC:17:F6:87
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D76F0266B9A811ECB7EE5A71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.6.0/23
Signature Algorithm: sha256WithRSAEncryption
02:9b:52:bd:42:02:58:04:55:22:c4:bb:db:10:4d:ea:d3:92:
de:37:44:76:a7:42:97:c7:60:e2:20:21:bd:71:1f:af:0e:4b:
6c:29:e2:4b:59:8b:c8:38:dd:6d:66:70:3f:1f:f6:ef:e0:b1:
0b:c4:13:30:a3:52:eb:6b:ba:bf:02:2c:62:62:fa:1e:52:f6:
c1:dd:52:f3:81:77:7a:df:0d:87:e4:6f:1a:83:4a:78:b9:53:
a3:3f:68:86:95:a5:04:53:78:f5:4a:ea:7e:e6:81:f9:59:0b:
d2:83:a1:a3:7b:b3:8f:b1:c4:93:c5:2b:ed:8c:f0:c4:80:5d:
9c:93:83:81:03:9d:d6:89:dc:a6:db:a3:9a:b3:14:9b:f1:a8:
f9:42:05:d4:01:45:af:d0:e3:ce:04:c6:6e:25:0c:04:1e:56:
e7:24:82:78:cf:87:1e:61:53:f5:9a:2f:aa:79:e8:c6:2c:47:
ef:53:22:ca:61:ae:59:a3:72:ab:15:47:70:44:01:84:5f:d1:
17:79:af:fe:88:26:b8:3b:c3:c2:c9:93:92:65:29:49:c9:d5:
87:01:b7:ef:9a:05:bd:97:a4:12:5b:c9:f0:d6:86:0e:d1:0d:
64:52:dd:e6:35:74:b0:a8:eb:e7:87:1c:e1:05:1c:c7:11:7e:
1d:66:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org