Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/600C76902DB111EDA42EBE42C4F9AE02.roa
File: 600C76902DB111EDA42EBE42C4F9AE02.roa (raw, json)
Hash identifier: 1/DV7FEb299JWE2TG60PKNF6EuOnVGyZdrgkfL82Q6Y=
Subject key identifier: 38:3A:12:6C:82:A9:A8:35:AE:40:E2:86:9E:89:16:5F:B4:21:A2:25
Certificate issuer: /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Certificate serial: 0819
Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/600C76902DB111EDA42EBE42C4F9AE02.roa
Signing time: Tue 06 Sep 2022 06:58:56 +0000
ROA not before: Tue 06 Sep 2022 06:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142127
IP address blocks: 203.96.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Validity
Not Before: Sep 6 06:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6316efb0-364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:5a:9a:73:d6:4a:e2:8e:8b:54:61:8e:32:
d1:10:3c:0d:b3:ed:fd:03:9a:41:79:de:0c:7d:92:
28:c9:76:56:24:b3:ec:c2:ad:67:31:f2:da:c1:8c:
73:c7:9e:f6:93:2f:59:69:2b:51:8d:3e:19:0a:bc:
ae:2a:97:1a:7a:41:d3:51:83:be:c2:22:a3:07:bc:
9f:56:d0:d3:89:f0:41:52:65:c3:2d:84:a0:e3:45:
f7:27:8b:41:40:d1:e5:83:96:d1:be:2f:56:b4:b4:
96:ed:b5:e4:08:56:06:4a:7d:6e:c6:b2:f0:6e:56:
5f:5c:79:28:d3:f7:93:ed:bf:ec:72:2f:20:b6:06:
cb:9f:22:11:26:06:ab:0d:63:03:c6:c0:cb:41:62:
a1:3f:d2:84:22:fb:c4:93:e2:d9:c3:a9:2e:9b:7a:
3b:fa:33:d9:d8:ea:b1:40:9d:d3:24:35:42:2c:b0:
06:5f:93:c5:b8:47:6e:03:c7:f5:9e:8e:ff:71:b3:
69:03:c4:e9:17:d6:fb:34:fa:25:fa:71:3f:0d:5d:
2d:11:c0:f5:00:db:e3:b9:57:f4:7b:09:8c:0b:f8:
0f:71:1b:9a:7d:2b:6d:39:88:90:59:0b:f4:4c:ad:
4b:8c:6e:8e:6a:28:29:98:16:2f:20:8c:ec:f6:28:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:12:6C:82:A9:A8:35:AE:40:E2:86:9E:89:16:5F:B4:21:A2:25
X509v3 Authority Key Identifier:
keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/600C76902DB111EDA42EBE42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.96.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:37:c3:f4:ca:2d:a0:68:6e:bb:bf:16:71:a4:a7:68:74:0a:
34:04:d8:33:0d:44:d0:fe:6f:d6:8b:5a:d3:c0:d2:d2:30:8f:
1e:52:a5:fb:5a:87:72:cf:9b:10:b1:ab:98:23:4a:91:d9:41:
7d:f9:47:18:22:36:74:ea:de:86:48:c5:4a:15:f0:fd:f6:dd:
28:07:ae:e2:18:5f:2c:7a:be:34:13:ce:1d:ae:f8:4f:1d:2c:
90:e5:03:ce:8e:3d:26:85:8d:4b:09:01:61:6e:6e:cc:88:c5:
e7:18:f8:b4:25:d7:35:5c:f1:6b:ac:56:87:99:72:6d:fd:a1:
20:9d:6e:c8:8b:4a:02:d3:fc:28:4b:a8:19:1a:97:a3:d0:a9:
9e:66:c1:80:c7:ce:81:d4:68:30:95:00:ea:2b:0a:d8:6e:1e:
ec:34:5f:ca:d9:c8:ec:b6:5d:5b:b9:df:43:ab:06:29:0a:c3:
0f:9a:a3:d0:67:e9:9c:26:f7:71:81:6a:c8:b7:1c:51:25:fe:
b7:b2:b2:46:9c:35:f8:9f:62:8c:59:f5:ee:7b:78:05:66:1c:
fc:ed:bd:5c:e6:ce:ea:db:05:a6:15:76:06:b0:26:32:6a:df:
39:51:8f:f3:83:9f:5f:8b:95:4b:b1:dd:58:48:1f:87:53:1c:
83:be:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org