Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/17B0CA88AC2711EC9977D033C4F9AE02.roa
File: 17B0CA88AC2711EC9977D033C4F9AE02.roa (raw, json)
Hash identifier: vAYscOyWDjhkdFPcaw1GkHUONpb86ZiGL6AyPhSgS8E=
Subject key identifier: 93:40:42:20:C8:45:F0:85:A6:1B:9B:00:25:9B:73:A5:03:9D:F2:EF
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 0B
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/17B0CA88AC2711EC9977D033C4F9AE02.roa
Signing time: Fri 25 Mar 2022 10:34:05 +0000
ROA not before: Fri 25 Mar 2022 10:34:05 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 16839
IP address blocks: 103.23.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Mar 25 10:34:05 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=623d9a9c-6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:64:a3:cd:f8:e2:c3:2c:82:78:61:46:1e:
71:a3:c7:9b:1b:59:ea:f7:74:56:3f:2d:cc:54:cc:
ed:48:6d:4d:22:c8:57:b5:58:03:f4:23:c1:a3:4f:
47:89:da:74:d1:5d:59:a4:35:58:fc:17:d4:ac:0a:
d9:6c:e8:43:62:e8:f8:e2:e0:e1:32:4a:e0:6c:22:
80:5b:c6:99:2d:00:05:56:42:8f:dc:a4:c6:69:e3:
29:a1:f7:1d:0a:b8:e2:5b:fc:3b:d5:53:81:4e:91:
79:f1:d9:75:f8:3b:04:a9:3c:1a:e4:36:48:8d:fe:
a9:fd:e9:47:7f:a2:44:91:e8:44:88:ca:e4:e0:db:
8d:43:ec:08:d1:36:13:ba:fd:14:fd:0f:17:9a:11:
31:a9:67:39:38:67:be:ec:1b:bb:e0:d8:e1:e3:bb:
86:05:7d:5b:cc:72:28:48:3a:01:39:38:4f:4c:4d:
46:44:c0:82:1c:79:0b:4c:e6:8a:af:89:16:53:2d:
f0:a2:b8:1d:27:65:46:c0:97:34:97:ad:4a:35:11:
6d:bc:19:9c:cf:12:30:4b:6b:74:de:4a:aa:22:87:
6e:ae:12:70:99:d3:e7:27:46:ec:17:3e:c9:d9:69:
f4:31:97:3f:15:5c:b8:f2:10:c5:c0:59:63:57:8c:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:42:20:C8:45:F0:85:A6:1B:9B:00:25:9B:73:A5:03:9D:F2:EF
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/17B0CA88AC2711EC9977D033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.64.0/22
Signature Algorithm: sha256WithRSAEncryption
27:64:44:2f:87:b3:ca:85:e2:ef:29:87:97:a1:a4:6e:36:ea:
71:6e:82:bb:d9:b5:54:7c:53:08:4b:f9:b7:54:db:2c:ad:6f:
38:26:6f:48:09:05:59:7d:4f:e2:69:34:ec:1d:69:23:7a:f5:
9c:e7:89:6e:dd:e0:6e:c0:f7:7e:62:ce:8a:87:9c:01:74:be:
da:fe:35:8f:f9:2c:d2:8f:f4:0d:18:8a:57:20:50:e3:30:d5:
68:b2:e7:85:14:0f:5f:38:19:99:e9:bf:e9:9e:fb:02:be:ad:
18:51:06:bc:77:79:39:b5:29:6c:81:bc:6c:d4:10:f6:5a:f9:
ab:6e:99:13:12:54:60:16:bf:58:fb:dd:35:8f:cb:41:9e:19:
f2:32:60:3a:a5:49:5d:3a:ee:8f:78:73:72:34:57:d6:f7:22:
76:a5:15:8c:40:b5:d6:a3:66:2c:61:38:87:be:cf:3f:cf:f1:
a8:4d:90:06:1d:a8:9d:ec:0b:67:98:f1:97:32:b3:ef:74:71:
67:36:3a:39:05:7c:e2:64:57:84:c4:1b:22:e5:e9:5f:eb:bb:
47:1b:59:bc:99:ec:70:f7:19:5e:ea:9c:39:a4:dc:4f:f4:65:
17:e6:68:f5:86:49:09:b4:8f:5f:6c:50:25:b4:dc:91:24:c2:
b7:dc:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org