Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/6CC2905A598F11EC85225664C4F9AE02.roa
File: 6CC2905A598F11EC85225664C4F9AE02.roa (raw, json)
Hash identifier: A/FtAdNGk0EkJ3NpyKGMP5EvteCGQmUiWLia0Kr7GuY=
Subject key identifier: 45:B6:D3:1A:A3:05:70:0E:97:2F:F4:A9:6C:DE:F5:EE:C1:07:BF:2E
Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial: 19
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/6CC2905A598F11EC85225664C4F9AE02.roa
Signing time: Fri 10 Dec 2021 08:01:48 +0000
ROA not before: Fri 10 Dec 2021 08:01:48 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 21859
IP address blocks: 103.177.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Validity
Not Before: Dec 10 08:01:48 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61b3096c-e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:7d:25:20:2f:dd:9f:08:1f:d2:9f:0e:6e:
10:49:c7:97:6a:98:54:ed:29:f3:fd:73:9a:8a:bf:
ae:74:c4:89:db:2f:eb:c3:44:61:e5:1a:fc:7f:a8:
97:9f:7e:3c:48:c9:31:80:a8:6d:29:58:d0:a3:f3:
d9:8c:e6:f0:dd:ba:d9:c5:7a:43:43:f3:63:83:7b:
96:98:a5:97:b9:41:e6:7f:5d:0c:e0:db:c5:32:cd:
a1:6f:82:10:c3:c7:11:78:8d:cf:c3:3b:40:f8:96:
e5:d2:12:8e:0b:44:6a:56:6f:04:e1:a4:33:db:80:
52:fa:2a:69:7e:65:70:12:46:67:5c:8b:82:47:a2:
85:da:57:a8:cf:2f:10:ab:8f:bc:5c:97:4c:2d:14:
69:ce:c8:82:02:f4:02:c5:39:7d:ee:f8:53:40:8a:
ee:c7:18:0d:43:57:d0:e8:ce:91:9c:a3:e8:c8:45:
3a:7b:aa:a4:44:89:2e:c1:e8:c6:10:ef:e0:3c:d7:
b5:b2:9c:80:5e:24:83:06:9e:6e:e9:21:48:69:a3:
76:70:00:e5:37:af:73:90:60:63:4c:60:bb:9d:b2:
3a:cc:bf:65:5c:ca:f5:29:cf:d8:d4:92:67:00:4f:
c4:43:18:ba:37:5d:aa:b5:ab:16:03:93:ea:6d:e1:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:D3:1A:A3:05:70:0E:97:2F:F4:A9:6C:DE:F5:EE:C1:07:BF:2E
X509v3 Authority Key Identifier:
keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/6CC2905A598F11EC85225664C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.80.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:32:6e:30:d5:e3:84:08:c5:7c:24:fb:f4:f2:d2:08:1f:c7:
c4:a9:7a:78:53:94:41:e8:fd:90:6f:b8:90:e5:8f:8f:32:dd:
b5:9d:fc:60:28:c8:bd:10:1e:98:bd:1a:e1:be:29:29:54:10:
df:95:a4:61:17:2a:d4:5b:d4:77:6c:47:2e:0c:7d:47:79:de:
3e:d5:c7:91:c3:92:69:11:6d:75:99:d5:b6:81:41:07:09:4f:
01:ef:19:43:56:ca:14:2d:6f:d3:52:fb:ff:88:a4:e9:dc:3a:
d4:47:cd:b2:c5:9b:59:19:53:02:cb:87:de:35:56:ab:85:6a:
20:a2:90:a4:38:ce:f3:9a:5e:72:98:8f:cf:eb:8e:da:dc:09:
9c:13:45:8c:f4:4f:f4:95:82:e7:3a:17:c2:40:aa:c9:30:16:
3e:a5:28:ac:81:b4:7b:fc:6b:6b:11:c6:c1:6c:b7:bf:0a:21:
69:43:e0:67:50:41:02:5d:aa:4b:c7:2c:23:38:2b:3f:42:60:
91:86:e0:bf:e6:ce:05:2e:27:3b:6e:7a:d9:66:96:8e:a5:1f:
c3:dd:ba:be:77:98:f6:fd:c9:c4:c2:9d:81:71:35:03:2c:61:
a6:e0:66:be:c3:ab:60:fd:04:53:9b:cb:ad:3f:df:6b:99:70:
b3:cb:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-fra.rpki-client.org