Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/93E7DE788E8D11ECB8E9DD7EC4F9AE02.roa
File: 93E7DE788E8D11ECB8E9DD7EC4F9AE02.roa (raw, json)
Hash identifier: TeKDz5Zuy32/e0ftWbcd5hiNrNWQ2X/2Dx4J+WxEr40=
Subject key identifier: 9B:F4:47:07:05:E6:BF:03:8C:53:B4:A1:D7:F9:96:CC:5B:1D:BA:49
Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial: 015C
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/93E7DE788E8D11ECB8E9DD7EC4F9AE02.roa
Signing time: Tue 15 Feb 2022 18:32:07 +0000
ROA not before: Tue 15 Feb 2022 18:32:07 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 132298
IP address blocks: 103.172.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Validity
Not Before: Feb 15 18:32:07 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=620bf1a6-14d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:86:a1:5f:0e:6e:73:ae:04:6c:c3:f3:5e:
f8:cd:bf:0b:f8:c8:d6:dd:f0:87:fd:01:6f:10:2a:
47:ae:77:34:23:e8:cb:0a:ef:f9:64:b8:fd:b0:35:
9b:7f:94:9b:26:65:24:2b:c2:d3:aa:27:9b:c3:cf:
a8:a7:9a:36:ea:68:9e:4c:c0:55:d1:50:47:5e:a2:
c8:bd:47:4f:d0:b8:35:0b:6e:ea:d5:c8:8b:db:e1:
16:1b:3c:93:71:24:b5:ac:5a:8c:88:27:4d:47:d9:
8c:bb:f9:08:cc:82:16:95:6e:41:ee:7e:67:f7:10:
a2:a8:53:98:a4:50:a6:a6:05:bc:19:b5:e5:72:d2:
9c:00:04:3b:a2:7d:c0:86:3d:23:7e:20:f8:5f:04:
5d:20:69:bc:88:92:6d:12:e8:9d:ab:2a:84:09:ce:
16:a9:f0:ae:d2:0d:e2:b1:05:15:65:86:8d:96:2d:
19:dd:3e:40:13:19:7e:c9:32:2c:1c:57:1b:ef:ed:
c6:cd:98:84:b0:88:97:1c:f2:40:08:2c:21:64:a1:
ac:c1:dd:f1:c8:f0:52:a1:cc:b4:65:d2:da:e9:8f:
6f:4a:7b:13:96:11:82:5f:cf:38:3e:e5:e6:2f:a3:
e4:a1:be:77:8c:cf:bf:a6:16:a0:76:43:15:48:00:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:47:07:05:E6:BF:03:8C:53:B4:A1:D7:F9:96:CC:5B:1D:BA:49
X509v3 Authority Key Identifier:
keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/93E7DE788E8D11ECB8E9DD7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.113.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b8:44:50:70:40:18:66:92:47:9e:66:1d:18:39:e9:87:5c:
d1:b7:3c:7e:46:9b:43:0e:06:09:cf:cc:f1:2d:fb:0f:64:87:
37:ec:cb:e2:c6:7f:ce:ca:b0:48:82:49:03:92:9e:55:e9:36:
90:2a:a2:a7:37:18:dd:31:6a:1a:24:81:08:a4:85:85:b8:88:
f6:e2:95:73:55:bd:31:91:49:fd:14:fb:e4:86:69:d9:28:4c:
34:c7:83:72:92:15:20:ba:bb:b4:95:d0:f5:79:ea:2a:d6:17:
56:78:31:20:7f:6a:87:f9:af:db:3a:c1:55:68:d7:1f:65:11:
44:55:ac:4a:b3:2c:35:6d:77:7d:e1:c9:53:ba:f4:50:70:99:
1b:40:9f:b9:65:fb:b7:3c:c3:51:c2:bf:02:8b:63:16:6c:c9:
6e:85:93:3e:db:f8:00:89:c3:74:be:64:9c:05:33:bd:5e:45:
93:8b:9d:c2:25:5d:a4:3f:15:f9:bd:19:0a:16:09:b2:a3:88:
8e:31:97:6e:4f:7b:62:9d:f5:50:91:3e:d8:65:1d:ec:90:57:
d3:cf:34:6b:59:99:9b:46:44:74:64:4c:26:b0:cd:98:60:92:
51:d3:f5:3e:9e:12:e0:54:f7:94:a2:e8:8d:ed:6d:de:a6:bd:
50:db:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org