Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/D73A1D2E625211ECB263EE0AC4F9AE02.roa
File: D73A1D2E625211ECB263EE0AC4F9AE02.roa (raw, json)
Hash identifier: 6FeiwpjYFT4ti94PJOfOQooGZrAeBUHxenGoopgzFy0=
Subject key identifier: 5E:D5:B7:AC:5A:F4:2B:9F:BB:3A:2F:0B:DD:BC:75:A2:60:1C:17:37
Certificate issuer: /CN=A9134AAF/serialNumber=83B5A4DDC1C4E2F499B662C81D343F1A511B8826
Certificate serial: 01AF
Authority key identifier: 83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/D73A1D2E625211ECB263EE0AC4F9AE02.roa
Signing time: Tue 21 Dec 2021 12:01:34 +0000
ROA not before: Tue 21 Dec 2021 12:01:34 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 132220
IP address blocks: 103.216.53.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
157.119.176.0/22 maxlen: 22
157.119.176.0/24 maxlen: 24
157.119.177.0/24 maxlen: 24
157.119.178.0/24 maxlen: 24
157.119.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AAF/serialNumber=83B5A4DDC1C4E2F499B662C81D343F1A511B8826
Validity
Not Before: Dec 21 12:01:34 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61c1c21e-9360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:4f:d7:f0:7f:01:a7:04:ac:06:08:1c:c7:
76:34:62:f1:da:50:d4:b7:80:c0:f2:2e:1d:d7:8f:
24:05:a2:aa:19:14:66:22:1e:cc:f8:9b:20:fe:91:
0c:69:ba:7f:c5:90:d6:de:5a:c6:f1:50:d6:58:f3:
49:ae:6c:0f:ce:a5:51:47:b5:dc:0c:10:8a:d8:c3:
2c:5c:05:32:31:8a:73:05:be:39:4c:8a:13:f2:8a:
1b:52:c2:8b:3e:63:33:5f:54:4d:43:97:d4:75:65:
0a:13:24:f5:49:63:0b:e4:20:2f:70:35:24:14:ff:
2d:34:8a:37:06:55:28:45:89:42:54:62:b8:5f:24:
1f:05:b1:ee:eb:94:d2:98:9e:fa:8d:d4:fd:d9:4f:
9a:61:a9:2f:50:ea:d8:aa:83:e1:46:c0:2d:8f:28:
0b:d2:de:10:6b:a7:84:ff:65:f6:63:cc:5c:8e:98:
ac:c4:14:28:ee:e0:2f:85:c1:75:e4:e6:c0:79:1f:
9d:fc:55:2a:f3:7c:fb:0e:d1:4d:ce:14:35:0e:93:
aa:ef:e9:73:9a:ea:9e:33:cc:1d:8e:6c:a4:79:18:
6d:cf:4d:2d:e7:28:1d:d1:6f:3a:d5:16:35:bd:89:
2d:1b:3f:31:70:6d:fd:57:47:63:fe:f4:31:66:31:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:B7:AC:5A:F4:2B:9F:BB:3A:2F:0B:DD:BC:75:A2:60:1C:17:37
X509v3 Authority Key Identifier:
keyid:83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/D73A1D2E625211ECB263EE0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.53.0-103.216.54.255
157.119.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:e2:ed:40:df:06:e6:a2:6c:08:5b:60:59:58:84:1d:cd:6a:
3b:9c:5e:2e:30:23:98:8d:a9:e5:23:06:e9:9f:42:78:e6:2a:
12:b9:44:af:b8:f9:56:13:e1:df:9c:e2:e8:83:7b:60:02:53:
73:c2:58:91:62:23:5e:a5:c0:fa:44:3a:bb:86:3f:1b:2e:14:
2f:16:be:9e:fe:6d:5e:a6:78:f6:ed:9d:23:a4:e8:e2:49:37:
55:5b:74:57:29:1f:f5:05:2c:d4:c7:9d:32:30:5d:81:66:53:
e8:01:da:de:18:7c:5c:6b:c6:39:b6:e5:f8:a8:02:74:b6:49:
8d:57:d1:d4:93:c5:af:0c:60:51:f6:29:2e:de:d1:68:51:22:
2b:2d:35:9e:3a:48:da:83:10:6e:d0:51:32:5c:d5:a2:26:36:
64:1e:5b:d0:c7:7d:c3:f5:b9:8d:53:4a:27:19:7f:cc:d8:c3:
4f:29:7c:fe:68:5d:30:89:68:81:61:52:84:4a:d1:96:3f:f0:
ac:9c:b3:2a:7d:71:db:f2:e3:8f:a7:f5:11:e2:d5:78:23:5f:
86:04:9e:08:3c:5b:3e:2c:df:53:70:d7:b2:76:9d:28:f5:cf:
87:c0:bf:82:29:d8:ff:8a:17:a5:b4:a5:14:26:fd:7b:9c:a0:
0f:f1:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org