Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
File: 7EC3423E139511ED8259D620C4F9AE02.roa (raw, json)
Hash identifier: IqnuMX08U1H/zYpPyE/KWGEbFYpilbv8nrq7dWY6Qds=
Subject key identifier: EF:92:34:CC:78:A8:72:3B:94:F2:F5:36:D6:B0:1F:80:C6:02:2B:8A
Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial: 02
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
Signing time: Thu 04 Aug 2022 01:33:52 +0000
ROA not before: Thu 04 Aug 2022 01:33:52 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 56294
IP address blocks: 103.173.70.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Validity
Not Before: Aug 4 01:33:52 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62eb21ff-71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:26:d7:4d:e6:5a:b0:41:a0:ee:df:6c:04:
dd:6d:78:68:75:93:01:76:5e:26:4c:14:7d:a8:cd:
c0:5a:ef:81:e8:2d:de:6e:08:50:6e:ce:24:5e:f5:
d7:7e:3c:90:f3:e5:7d:d6:4f:d1:9d:e1:0c:9c:69:
d4:e8:55:5a:ef:bb:f8:d9:91:e6:22:ef:31:e9:a6:
71:f0:67:ea:02:18:db:f1:fe:10:85:83:86:96:05:
e5:95:57:7f:5a:d7:e8:b8:c5:6a:8a:88:f5:fd:cd:
9f:8e:9d:f7:ec:cb:2c:35:b4:26:cb:1a:1f:dc:2e:
6d:9d:13:c6:7a:3d:8a:c3:32:c0:e9:f3:f8:47:83:
1d:8f:b6:f6:cd:5e:8b:c9:c3:bd:19:c2:a8:9b:2e:
a9:0d:93:a7:30:d1:f2:88:8b:4d:2d:1d:bc:d0:28:
74:aa:d7:43:ab:79:50:af:be:82:ad:f9:22:9e:6b:
31:c4:30:5b:8f:1d:af:0f:d9:e1:89:6b:cc:20:50:
81:21:75:29:b3:ed:fa:cf:52:b4:68:9e:82:51:07:
6f:6c:59:bc:6c:83:8b:ba:54:87:1e:00:4e:e4:e4:
0a:20:f4:8e:bc:58:20:c4:2b:05:ee:0c:71:aa:9c:
f8:5a:44:23:4e:f9:fe:55:16:2a:5b:45:ff:98:de:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:34:CC:78:A8:72:3B:94:F2:F5:36:D6:B0:1F:80:C6:02:2B:8A
X509v3 Authority Key Identifier:
keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.70.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ca:49:7b:09:98:76:1a:33:43:41:20:4d:ff:1b:3a:5b:b8:
fa:21:c1:35:fb:2d:37:6d:fe:5b:a8:93:0e:87:41:8f:06:0e:
35:bf:23:e2:14:42:4f:91:1b:12:5e:31:01:23:1b:97:7f:c5:
84:8d:6f:87:be:64:73:f3:13:8c:5e:fc:df:92:ce:75:78:d5:
9b:9a:87:f0:3a:b1:69:df:45:d7:7e:02:fe:7b:c0:83:4b:5d:
48:9a:18:6d:7c:e3:9b:86:6f:3f:a0:94:fd:6e:54:6f:0e:fd:
82:fa:e3:11:26:32:27:03:11:47:39:7a:69:fd:ee:95:61:f4:
09:e1:9e:18:78:2f:4c:3d:d0:dc:29:49:67:d7:38:d6:e5:0a:
9f:bc:ea:63:9d:8f:69:81:48:e2:f7:a3:d3:23:f2:b3:85:14:
9d:15:ed:84:d6:1b:46:30:00:e1:9c:3c:89:6f:00:9f:6c:99:
71:45:55:e4:21:b1:dc:e6:ab:8c:de:c1:21:ef:d2:3e:33:0b:
dc:67:aa:d4:74:4b:e9:6e:37:3a:7f:b4:2d:d9:b1:06:96:1d:
a6:e2:9d:b5:9a:16:66:30:7f:e0:45:14:7d:69:0a:24:a0:38:
7e:ec:10:54:a9:20:a8:1d:ab:7f:3c:ce:fc:25:f6:9b:fe:1d:
b1:24:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org