Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/932F2388851411ECAFBA9D81C4F9AE02.roa
File: 932F2388851411ECAFBA9D81C4F9AE02.roa (raw, json)
Hash identifier: ev9zYC39ftCOHJ602H8eWqOavffs3umu34TE7tGfues=
Subject key identifier: E3:55:62:3E:D4:C5:C2:12:96:40:E9:03:56:00:BB:30:83:54:F5:80
Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial: 02
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/932F2388851411ECAFBA9D81C4F9AE02.roa
Signing time: Thu 03 Feb 2022 17:13:16 +0000
ROA not before: Thu 03 Feb 2022 17:13:16 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 134802
IP address blocks: 103.13.184.0/24 maxlen: 24
103.13.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Validity
Not Before: Feb 3 17:13:16 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61fc0d2c-d3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:16:72:eb:d6:cc:28:14:2c:b2:2e:f4:aa:
48:5f:86:bb:66:f6:bd:4a:79:e0:65:ea:fd:cd:3f:
7f:e0:30:b8:04:7c:07:2c:5e:6e:fa:aa:15:4a:20:
dc:bf:65:af:58:1d:da:3c:b3:7a:87:e8:9f:8b:81:
e1:10:84:cc:50:c6:01:2e:52:74:14:5f:62:35:83:
5b:46:30:83:fb:79:7f:6c:c0:39:1e:e1:9f:cd:2b:
08:94:bd:58:f0:21:26:55:b4:5f:8c:b5:87:7a:f8:
59:d6:eb:9e:82:59:5f:e3:03:d9:dd:97:59:68:c6:
38:07:2d:b4:6a:b5:8f:71:40:17:8e:a3:eb:46:80:
69:f2:3c:90:5d:06:08:2b:c3:15:8b:2f:50:c9:ad:
3c:31:b1:f5:2f:1d:94:bd:fc:77:f6:f7:31:16:1a:
bd:44:31:07:58:a7:35:7b:bc:5b:f4:60:50:0b:6e:
81:87:85:35:56:83:93:06:0c:64:11:a2:5e:e7:fa:
9c:d4:63:80:7f:c7:f6:b3:ad:63:c5:5e:5f:f5:04:
d5:e7:89:97:40:f6:6e:62:2b:a9:83:15:68:e1:c9:
db:2e:b2:10:cf:7c:a0:5b:f2:92:b3:39:c4:e9:d9:
30:13:e4:66:a9:b6:ab:a8:75:94:da:0b:46:33:7d:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:62:3E:D4:C5:C2:12:96:40:E9:03:56:00:BB:30:83:54:F5:80
X509v3 Authority Key Identifier:
keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/932F2388851411ECAFBA9D81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.184.0/23
Signature Algorithm: sha256WithRSAEncryption
09:fb:6e:ea:4e:e5:9e:16:41:61:0b:6f:55:5f:fe:6c:00:06:
cc:8e:2c:2c:62:ce:0d:d4:73:31:36:39:67:2b:00:a9:47:9f:
3e:6c:04:09:7c:d7:f1:9f:7d:50:e4:44:45:4a:a9:d1:5a:6b:
b9:9b:d8:d8:46:28:5f:50:7c:33:e0:f2:7d:bd:b0:0c:01:e8:
fb:da:0b:3f:04:7e:51:a3:31:fc:d1:a2:c1:66:0b:ff:9f:3f:
33:79:d0:8f:c4:e2:b1:55:13:6b:6c:9c:4b:50:58:ff:ab:ed:
c2:37:a2:f5:0c:89:b9:cf:8a:cd:a7:1c:0c:d3:81:66:42:76:
ba:41:a8:c5:bb:84:ea:66:93:5b:19:c2:b8:af:9c:23:bc:e7:
7e:bf:be:36:8a:8d:61:c7:00:61:c0:2b:a6:82:d1:4e:e1:87:
44:4e:d8:f9:20:74:57:62:f7:7d:14:8c:4e:7b:a6:35:1d:67:
18:0e:b3:d7:c5:10:ce:1e:cd:d9:6f:10:fe:2d:c9:7e:4e:24:
6c:ef:dc:17:ee:15:db:69:e2:7b:56:20:b0:53:48:3c:4b:77:
c6:d3:2e:13:8d:fe:bf:a7:5f:fa:17:eb:39:fd:2b:9b:b6:68:
86:d7:4c:20:66:7f:a7:bb:0d:8c:ac:6d:d3:da:09:59:df:ea:
e5:9a:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org