Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/567E76C49F8211EA986D1C31C4F9AE02.roa
File: 567E76C49F8211EA986D1C31C4F9AE02.roa (raw, json)
Hash identifier: 1jl5OyTH0TWxVKcv91zVLap4/JVkoPveNI31b3qYzmM=
Subject key identifier: 7E:33:F6:76:66:0C:F8:37:6C:D0:B6:3C:E1:DB:79:C5:46:75:C0:71
Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Certificate serial: 066D
Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/567E76C49F8211EA986D1C31C4F9AE02.roa
Signing time: Mon 16 May 2022 22:43:01 +0000
ROA not before: Mon 16 May 2022 22:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140545
IP address blocks: 103.150.50.0/23 maxlen: 23
103.150.50.0/24 maxlen: 24
103.150.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Validity
Not Before: May 16 22:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6282d375-be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:27:ff:78:47:82:06:a7:da:d8:a3:92:f9:
1b:b8:cf:bc:e2:db:06:62:1d:5c:92:f9:14:f1:d1:
7d:97:9d:fd:8c:21:fa:0d:53:af:16:5a:c1:c3:75:
58:6d:96:da:73:5b:33:0f:14:fa:a6:97:88:a4:b4:
b0:9a:9d:e8:8f:76:79:d3:c4:14:ed:0a:66:06:de:
6a:28:53:ff:bf:0b:15:0a:1b:aa:a5:4f:dd:b3:8d:
13:ca:7d:24:f8:b4:08:32:ca:d2:10:f4:76:93:96:
c7:c3:7f:c0:94:47:cd:12:c1:e6:04:bc:95:e4:51:
a1:22:63:c8:8e:62:9e:7b:f7:fe:6d:15:17:24:5c:
e0:19:49:9c:00:a1:d4:b1:da:34:ac:ab:2e:02:a4:
98:68:92:9b:64:6c:28:f9:6e:20:95:bb:f0:ae:6b:
6b:5f:58:2d:b4:46:07:06:74:3e:df:2f:df:8c:12:
2f:e4:a0:aa:14:00:fd:b8:f1:31:90:db:5d:73:7d:
e8:63:2b:b6:31:bf:ca:20:da:b1:4f:39:7d:51:43:
93:b1:5c:ee:f2:24:dc:37:90:d1:46:4e:ea:72:63:
1d:e5:42:9d:1b:09:b8:cc:03:92:bf:0c:f5:b2:45:
19:9c:89:e9:44:dc:ec:b1:b1:fc:06:2e:bd:e0:b9:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:F6:76:66:0C:F8:37:6C:D0:B6:3C:E1:DB:79:C5:46:75:C0:71
X509v3 Authority Key Identifier:
keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/567E76C49F8211EA986D1C31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:61:f8:ae:25:12:dd:9f:0d:d7:68:77:3a:51:75:72:ce:eb:
8e:84:02:30:d0:f6:49:d3:82:4b:c2:25:67:59:05:13:0d:3e:
5f:bf:a2:9e:68:2d:22:98:90:33:4d:6c:e7:65:c1:3d:fb:95:
4b:5a:b3:ba:fb:5b:d7:20:ef:ad:fd:3c:24:66:5f:b1:06:66:
bf:2d:e7:fa:d6:46:14:e6:85:61:44:05:1c:57:7c:6d:70:fe:
a6:2d:2b:82:07:3c:4b:7f:39:84:b8:1b:92:ba:d1:bb:0e:03:
3f:8b:02:31:98:3c:b6:d1:01:6c:fa:d6:c4:a4:b3:56:06:06:
08:35:e8:52:0d:a7:e8:9c:98:c7:4d:90:8e:50:d1:24:d3:86:
23:8e:fa:3f:f8:85:de:6d:c3:ce:25:1b:62:a4:b2:49:a7:cc:
dc:ad:6b:e6:f1:1d:7c:8a:91:81:b6:08:b6:f2:59:62:31:5a:
59:71:9d:fb:19:58:3a:a0:f2:6e:59:35:f1:0a:52:0a:78:a3:
ea:ce:9f:82:be:09:e9:e6:67:e2:e7:d0:36:55:92:62:60:cc:
70:86:31:11:f1:44:86:6e:12:99:e7:33:f6:87:d7:ed:ef:c4:
39:38:66:7f:b4:0c:3e:c1:24:5d:74:5c:fb:9a:c5:db:69:7f:
66:ee:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org