Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/9BB165F81BAE11ED9B3B6A1FC4F9AE02.roa
File: 9BB165F81BAE11ED9B3B6A1FC4F9AE02.roa (raw, json)
Hash identifier: hApGP+RUsEQAF5fNlUv8dzpNPAs7wwtKCu77idnDxa8=
Subject key identifier: 2A:1E:1D:54:31:8C:25:F0:26:97:EB:1F:00:23:69:ED:D4:2C:8F:7F
Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E
Certificate serial: 04
Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/9BB165F81BAE11ED9B3B6A1FC4F9AE02.roa
Signing time: Sun 14 Aug 2022 08:53:47 +0000
ROA not before: Sun 14 Aug 2022 08:53:47 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 142278
IP address blocks: 103.108.178.0/23 maxlen: 24
2400:a020::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E
Validity
Not Before: Aug 14 08:53:47 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62f8b81b-652f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:d6:ed:a3:41:e5:fe:34:aa:e5:56:3d:a1:
60:eb:00:3c:5b:0a:a8:b2:78:8c:20:05:64:4d:bd:
d5:89:a8:58:7e:a6:e0:fe:ab:29:e9:a2:43:da:87:
4d:15:f6:a6:ac:4c:5f:e3:f5:39:60:43:19:59:a3:
f8:80:4c:0e:b4:44:05:7b:17:42:a5:55:30:dc:8c:
cd:4e:28:a0:07:b9:a5:71:21:4a:25:26:91:ab:b3:
b0:94:33:07:be:83:9a:81:ec:4c:b0:b5:b9:f9:f2:
20:4e:1f:07:f4:48:33:b5:c5:a9:af:03:b1:43:2c:
6a:14:c8:85:8a:36:65:25:ab:5a:fd:6b:f3:c0:aa:
5b:51:13:4c:d5:1c:28:09:3a:9c:97:89:3e:52:a9:
80:76:6c:33:fc:35:1e:fa:fc:01:8b:93:eb:b5:64:
2f:05:2b:71:f8:84:0a:12:b7:a0:c8:34:79:9a:94:
ec:e0:41:06:d4:4d:0d:28:8b:81:cc:16:50:1f:52:
e8:0b:b5:aa:02:61:39:8d:3c:6e:a8:ad:c6:84:9c:
bc:9b:57:c6:9e:78:21:c5:29:0d:ca:b3:c8:59:0a:
4a:12:fb:a6:0a:e1:6e:fe:6c:c0:54:26:17:53:d0:
8b:02:8b:33:4c:ad:18:ee:8e:7a:a8:07:00:dc:bd:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:1D:54:31:8C:25:F0:26:97:EB:1F:00:23:69:ED:D4:2C:8F:7F
X509v3 Authority Key Identifier:
keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/9BB165F81BAE11ED9B3B6A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.178.0/23
IPv6:
2400:a020::/32
Signature Algorithm: sha256WithRSAEncryption
0d:10:8a:ed:d9:5d:e6:a9:a1:01:b5:c7:72:27:bb:62:6c:d3:
7b:95:29:c4:35:8b:1e:f4:19:77:e2:f8:98:bf:ed:82:fc:cc:
b4:c8:b4:69:af:95:34:8c:8b:03:91:24:1e:be:07:d2:01:ba:
0d:c3:13:ff:03:24:c3:e9:94:c1:39:91:b6:7b:5c:35:03:d2:
0d:33:90:ff:04:3b:d9:92:20:b4:1a:83:be:e0:86:19:8f:13:
a4:73:36:ca:f3:01:59:10:3f:41:ea:3a:dd:19:74:31:4b:3f:
10:29:4f:4a:d9:75:20:08:08:25:d6:0f:c1:39:69:d3:e9:16:
70:7c:4d:c0:ce:e8:e6:1e:e1:c5:8e:f3:82:53:30:7a:e0:91:
40:ca:1f:49:cf:f2:e2:d7:28:86:9f:5a:94:25:e6:6a:75:c6:
f3:0f:ac:ea:c2:7b:23:b4:78:50:81:80:3b:51:fb:d1:dd:7d:
41:70:bc:94:ef:ca:f8:28:1b:81:ee:f0:3e:55:d4:39:4d:b4:
9e:63:80:28:74:52:5e:61:3f:7c:34:de:41:32:22:af:21:7f:
a0:af:e7:10:5e:03:f7:01:78:e4:54:1e:7a:fe:6e:33:d2:b0:
0e:1f:77:3e:1d:a3:16:b2:ca:1b:e8:67:39:e1:ed:14:b8:e1:
01:af:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org