Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/994FC91AF6D011ECA5870083C4F9AE02.roa
File: 994FC91AF6D011ECA5870083C4F9AE02.roa (raw, json)
Hash identifier: 4mTvBSbU2DgBW8XdjGFXIGVvLYWvA/VhL0NQQT38lAI=
Subject key identifier: D7:AA:2D:52:51:D1:57:23:3F:40:68:AB:5F:3F:86:F0:33:33:8A:59
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 0112
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/994FC91AF6D011ECA5870083C4F9AE02.roa
Signing time: Tue 28 Jun 2022 10:53:53 +0000
ROA not before: Tue 28 Jun 2022 10:53:53 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139855
IP address blocks: 103.176.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Jun 28 10:53:53 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62baddc1-eef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:79:0b:85:b0:6c:54:55:ab:8c:3d:bd:87:
e6:17:9f:d4:32:15:1f:ef:63:11:10:d3:4d:b8:9d:
42:4f:4c:fb:ec:76:e9:f4:c4:eb:dc:e7:15:77:9d:
73:1a:84:73:71:0f:1a:ee:bb:c8:25:f9:6e:eb:eb:
43:7c:ea:5d:a2:b7:25:ab:86:4c:e3:a3:9d:e4:27:
06:74:e6:89:a5:94:40:6c:8b:23:68:e7:5d:3b:9d:
69:e8:da:3b:cf:af:03:d5:a5:87:13:7a:02:0c:cb:
7a:d5:e3:1c:6e:d3:83:09:18:f3:af:0c:1c:c9:0c:
46:4e:cd:29:d5:a1:30:eb:b1:a6:4e:85:b0:9c:dc:
32:03:ad:a4:dd:32:58:f8:cc:3a:62:84:95:3d:30:
03:0b:43:73:b4:be:09:d9:a2:4f:97:31:7c:f3:3a:
e9:8f:4e:cb:84:4c:67:ea:d0:57:a3:ae:76:aa:6c:
84:64:95:cb:86:33:af:87:28:a5:49:4f:30:30:12:
10:c5:a7:c2:50:2f:be:9e:6f:ef:c3:20:38:85:0b:
42:78:53:8d:ca:43:a8:71:44:7f:27:cd:fb:42:a3:
17:0b:09:4f:f2:4a:08:f7:25:18:74:ee:ca:39:6e:
c8:ee:3f:c6:8f:3a:96:2b:88:6f:96:0b:3d:82:df:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AA:2D:52:51:D1:57:23:3F:40:68:AB:5F:3F:86:F0:33:33:8A:59
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/994FC91AF6D011ECA5870083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.206.0/24
Signature Algorithm: sha256WithRSAEncryption
54:04:ef:2f:02:2d:51:ac:79:ad:5e:4f:9f:0d:20:09:38:ec:
35:28:24:64:77:77:cb:31:ef:90:a4:29:f4:b6:f8:8b:fa:9d:
9f:08:6d:23:41:72:39:cd:f1:f5:9c:b1:d3:93:99:22:c4:48:
a6:db:32:fc:ac:4a:91:43:d6:45:65:b9:fc:40:32:52:d4:b4:
ea:aa:60:a7:43:2f:41:8b:ba:e0:dc:d8:6a:a3:04:a1:1e:aa:
7e:e9:87:9e:b7:46:2f:4e:0d:9a:fe:9a:ee:da:a5:90:cd:11:
27:12:89:32:0a:93:10:53:e4:4b:4e:07:8b:83:2f:ef:c1:25:
1a:ac:8b:45:5a:c3:34:e2:e7:37:ec:0e:13:11:22:03:a8:8d:
53:0c:1e:d1:bb:00:29:11:e7:99:b5:b6:c7:c0:02:06:44:45:
aa:ed:b6:0d:04:e7:c3:e7:2c:af:21:1c:9d:56:bb:34:d7:c1:
77:df:26:d4:f6:1f:53:3a:22:67:49:15:15:40:c1:02:b7:1d:
94:73:26:ac:6a:41:25:37:48:31:3f:ed:1e:5e:07:5a:d1:47:
f1:ac:d5:7c:fa:c2:d2:c2:5c:db:60:1f:18:32:c8:25:c0:09:
5f:55:72:d4:f0:d4:9d:d3:3b:d8:e7:94:20:9a:81:0c:b6:34:
38:12:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org