Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2B9324365BDE11EC9D56C95AC4F9AE02.roa
File: 2B9324365BDE11EC9D56C95AC4F9AE02.roa (raw, json)
Hash identifier: zG0mg69lgGY+bDC8EYbK4hMc4KWrGCW55GBn33R3el4=
Subject key identifier: 6E:26:BC:15:42:BB:2B:59:66:58:4B:CF:2F:54:02:DB:F4:40:7D:6C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3772
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2B9324365BDE11EC9D56C95AC4F9AE02.roa
Signing time: Fri 17 Jun 2022 02:20:30 +0000
ROA not before: Fri 17 Jun 2022 02:20:30 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 140822
IP address blocks: 103.175.64.0/23 maxlen: 23
103.175.66.0/23 maxlen: 23
103.175.68.0/23 maxlen: 23
103.175.142.0/23 maxlen: 23
103.180.142.0/23 maxlen: 23
103.180.144.0/23 maxlen: 23
103.180.154.0/23 maxlen: 23
103.180.156.0/23 maxlen: 23
103.180.158.0/23 maxlen: 23
103.183.146.0/23 maxlen: 23
103.183.148.0/23 maxlen: 23
103.183.150.0/23 maxlen: 23
103.183.152.0/23 maxlen: 23
103.185.186.0/23 maxlen: 23
103.188.164.0/23 maxlen: 23
103.189.72.0/23 maxlen: 23
103.189.74.0/23 maxlen: 23
103.189.76.0/23 maxlen: 23
103.189.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14194 (0x3772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 17 02:20:30 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62abe4ed-f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:3c:47:f4:81:87:cf:ae:51:a3:77:05:11:
85:3a:cb:14:fc:3a:f4:d2:cc:72:92:b5:6f:7f:fc:
88:88:c6:0a:2a:ed:44:ea:e3:d5:65:bb:77:3c:49:
77:df:d7:fe:1a:31:89:d5:66:66:5a:ca:c7:e7:1c:
45:28:a0:bb:96:9e:96:11:38:4d:8b:52:ef:c8:f7:
46:0f:c8:8d:6a:d4:0b:2d:b2:5b:c6:a6:ce:ee:7a:
92:2d:19:81:39:a6:7c:1b:b6:9e:b5:fb:7b:fc:78:
1c:bc:41:a4:60:57:09:9d:05:21:2e:2a:67:73:8c:
d4:e4:a8:0b:28:a5:fe:33:1f:9d:fa:18:10:87:9c:
00:a7:56:55:a5:56:76:0a:9b:5f:24:a2:f9:4b:f0:
09:81:ac:59:a3:ab:ff:c9:10:a7:62:da:5e:ac:97:
f6:9a:e0:e6:8a:aa:73:27:90:e8:f5:7d:ea:2f:c7:
e4:ff:8d:cb:44:0d:2d:6d:37:4d:f5:64:13:55:8f:
f2:1a:42:7c:97:4d:88:79:f5:e1:e8:60:96:4c:5d:
18:a2:f6:9c:dc:0d:22:17:74:d0:80:fb:8c:09:7f:
85:f4:01:90:67:5e:aa:7c:d6:d0:b4:98:cc:67:14:
e8:5c:37:d7:1c:77:e3:f8:d7:14:af:19:c2:d2:76:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:BC:15:42:BB:2B:59:66:58:4B:CF:2F:54:02:DB:F4:40:7D:6C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2B9324365BDE11EC9D56C95AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.64.0-103.175.69.255
103.175.142.0/23
103.180.142.0-103.180.145.255
103.180.154.0-103.180.159.255
103.183.146.0-103.183.153.255
103.185.186.0/23
103.188.164.0/23
103.189.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:49:4c:ce:96:62:b8:9b:fb:2e:eb:e0:da:b3:5b:89:4f:68:
f5:5c:b9:dd:45:90:13:ba:3c:8d:6a:ab:f5:e1:32:3a:a3:22:
ce:b5:33:5b:db:e4:e3:26:3b:f8:60:f6:d5:e3:cf:99:67:09:
d7:85:4b:ce:06:22:13:a8:5c:82:21:3c:63:14:69:14:db:b4:
c5:0f:66:92:8f:52:08:ae:c6:a2:27:5e:69:e5:40:f0:5c:c5:
02:cd:1e:16:b2:4b:30:16:dc:2b:2a:c0:91:5c:45:92:f9:3a:
db:45:ba:da:58:e4:65:35:29:06:5a:7f:66:98:90:8c:cd:07:
a2:b5:84:f1:f0:82:a8:1a:a5:b0:58:b7:c8:e8:90:59:fa:95:
b0:ff:64:47:19:72:77:df:76:5b:41:14:70:57:43:63:69:71:
d6:d1:e6:76:78:6b:ba:33:14:d7:c1:c2:b1:aa:46:05:e6:c3:
ed:fa:a5:d9:c3:84:a8:fb:ea:0f:a5:40:44:e0:30:57:0c:6e:
aa:e8:e7:b4:84:74:db:ef:3f:16:dc:25:7f:48:1d:be:e5:00:
cd:24:eb:bc:49:48:7a:cb:e4:00:b3:2d:b4:73:c6:a2:49:c9:
de:bd:eb:e1:9c:7f:51:b6:d0:d9:d1:2f:51:c8:f6:78:4f:13:
b8:d0:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org