Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/487A05588FDA11EC99305614C4F9AE02.roa
File: 487A05588FDA11EC99305614C4F9AE02.roa (raw, json)
Hash identifier: /Eh/wvl7LRlNylLSYYowNFNOTJ3hTXo/ytAPzwQycE8=
Subject key identifier: BF:9C:DB:F0:6F:4D:16:88:1A:F3:63:F1:46:43:09:14:D1:31:D1:DA
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 09
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/487A05588FDA11EC99305614C4F9AE02.roa
Signing time: Thu 17 Feb 2022 10:13:43 +0000
ROA not before: Thu 17 Feb 2022 10:13:43 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 134428
IP address blocks: 103.176.206.0/24 maxlen: 24
103.176.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Feb 17 10:13:43 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=620e1fd6-d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:2f:1e:e2:5a:45:bb:6d:69:e0:6c:86:18:
e4:4c:45:9a:ed:1c:b5:05:55:93:79:c1:11:c7:9c:
ac:9b:51:8a:41:08:a5:ae:a5:9a:d2:68:8b:5f:0c:
73:b9:3e:44:3d:6e:ad:e6:be:06:65:9b:9b:d5:b8:
16:96:73:c4:f3:cd:20:e5:f0:27:61:52:d9:d6:6b:
b2:d0:69:3a:b4:f8:6f:37:8b:37:68:5d:f3:d8:91:
56:33:48:59:6c:af:38:c7:19:e2:d0:be:84:bc:39:
12:00:1e:56:ec:d5:bd:de:9f:73:2b:91:0a:28:92:
1d:76:43:6d:7b:67:6f:7a:c8:6c:6a:b7:a4:08:ab:
5a:95:7e:16:85:1c:88:66:99:64:1c:6d:73:8c:50:
46:42:dd:20:4e:30:06:d8:a8:87:cc:a6:c9:68:14:
ae:cf:d9:68:2c:2b:08:e0:41:c1:37:85:28:f2:63:
20:d6:ec:46:0b:b4:d3:7c:2f:0f:a5:40:94:41:18:
7f:61:a8:00:af:54:7b:03:f3:e6:3b:26:fb:fa:49:
50:65:81:93:9f:29:bd:4f:43:4c:7d:eb:0f:85:d0:
ec:41:d9:24:6a:9f:b0:54:de:17:b0:53:d4:88:82:
00:6c:79:90:0c:9b:f6:5b:8d:11:1a:d2:d6:87:0f:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:DB:F0:6F:4D:16:88:1A:F3:63:F1:46:43:09:14:D1:31:D1:DA
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/487A05588FDA11EC99305614C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.206.0/23
Signature Algorithm: sha256WithRSAEncryption
69:4d:e5:24:67:02:00:b8:f5:d6:34:b6:18:45:7d:ca:7e:87:
e3:bd:c0:c9:ae:66:06:be:3f:2f:54:44:a4:f4:ed:6e:50:2c:
25:6b:0e:0a:54:ed:98:7c:9b:bc:d9:8c:f4:d6:de:f3:bc:58:
ec:e4:02:f4:fd:52:e9:65:4f:83:22:f1:b1:f1:94:a3:55:81:
e5:78:5a:7c:a0:60:7f:dd:ce:a4:d0:21:d7:56:2c:e1:01:a7:
2f:bf:7a:b4:06:43:8d:5f:ed:3e:23:59:9f:5b:24:5d:91:c2:
23:42:18:88:4e:b7:be:e7:aa:ca:bb:ef:2a:36:d5:a6:c6:b0:
79:1c:e2:ce:c1:52:a8:f2:2f:ce:1e:29:33:96:d7:ed:c2:d6:
1f:3b:05:2a:fd:97:c9:ac:02:4d:2a:5b:fc:38:89:6b:3c:1b:
a6:4e:d6:9c:c4:b4:2b:3d:1d:d1:9d:5f:04:68:10:04:e7:c3:
98:30:f6:26:d3:d2:35:67:8f:54:aa:b6:b6:6b:77:02:98:dd:
a5:4a:b7:56:79:94:e6:89:8e:2b:35:b3:27:a7:7e:48:a9:dd:
e2:92:4d:51:aa:dd:ec:71:cd:20:e9:7b:f3:ab:6f:87:e6:da:
46:3d:3d:f1:0a:31:4a:1c:4c:7b:cd:50:e1:13:2e:3b:4d:87:
50:fd:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org