Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6BC819D625EF11EDB8A95C3BC4F9AE02.roa
File: 6BC819D625EF11EDB8A95C3BC4F9AE02.roa (raw, json)
Hash identifier: jS7vGtOwWLxTzPIafRJGjR8L4uiBMJkQNjgZdqvrBqE=
Subject key identifier: 3A:DA:A7:B4:C0:7D:ED:9B:53:89:79:E9:FE:28:84:BC:2D:81:F4:62
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 022F
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6BC819D625EF11EDB8A95C3BC4F9AE02.roa
Signing time: Sat 27 Aug 2022 10:02:56 +0000
ROA not before: Sat 27 Aug 2022 10:02:55 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 7586
IP address blocks: 103.177.44.0/24 maxlen: 24
103.177.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Aug 27 10:02:55 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6309ebcf-2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:ba:46:29:4b:6d:ba:09:3e:9a:1a:40:eb:
a3:9a:8c:67:c7:0c:76:5e:cb:0d:6d:f5:b1:73:d1:
14:2c:ff:48:b3:1e:a7:fa:a3:e5:e0:67:ce:3a:c0:
8a:62:b7:1e:7b:fa:7f:a8:6b:bf:11:af:b9:e7:29:
90:86:46:11:ba:aa:5d:ff:11:8d:87:5d:58:ec:80:
1d:3c:0a:7b:6e:be:aa:04:a7:7d:df:23:7d:64:6a:
6c:84:c7:59:71:bd:de:65:00:38:a1:66:8d:06:c6:
34:11:d2:53:b0:95:c4:0d:49:5e:f0:dc:20:b4:0d:
70:3c:12:70:ad:10:45:e7:62:5c:4b:b6:df:ae:cb:
3d:97:94:51:17:af:e0:1f:dc:6b:eb:a0:7e:cf:24:
29:50:ee:aa:6c:96:86:90:02:d8:95:c8:ff:bf:f1:
c3:42:28:cc:fc:a0:b5:a0:47:9e:96:62:59:8b:98:
b9:c9:f1:38:e3:c5:49:94:35:e9:c7:46:e5:a1:c2:
55:b7:c1:14:03:ef:75:62:fe:08:9f:14:c0:26:2e:
d0:04:fa:95:23:c6:f6:0f:08:b9:2f:93:da:be:9d:
ff:e0:21:0a:86:01:05:dc:87:cc:59:39:0e:1b:d5:
e7:aa:6b:e3:08:85:88:6e:a3:a6:2f:94:e0:b4:33:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:A7:B4:C0:7D:ED:9B:53:89:79:E9:FE:28:84:BC:2D:81:F4:62
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6BC819D625EF11EDB8A95C3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/23
Signature Algorithm: sha256WithRSAEncryption
05:38:e0:a3:a2:43:99:fb:ea:22:5c:18:e8:ee:b6:6d:e4:7b:
d9:0b:04:3c:ce:d8:7c:84:78:d6:c3:8b:c7:e8:4c:cd:b7:bd:
7d:e7:6b:f2:61:70:c5:fe:4c:c8:c5:71:53:b5:47:c1:a2:55:
5d:4a:13:11:74:19:bd:00:4e:a9:f1:82:d4:29:cc:a2:c5:ee:
c7:6e:d5:2a:15:d0:a9:57:b3:e6:dd:95:66:14:d8:f4:12:7e:
67:9f:62:ec:ee:c7:2e:60:25:c6:e7:51:c0:96:2e:f2:14:22:
d9:64:9a:92:94:5f:87:9f:1b:92:f1:74:b3:f2:54:bf:4e:96:
17:5b:9c:64:42:0c:22:f1:c7:a6:a3:ef:f0:64:e9:a2:32:b4:
47:33:74:78:84:1d:28:14:fb:35:1d:fa:01:4a:1f:eb:f5:45:
10:80:ef:03:96:ed:79:a4:d5:55:f6:54:d3:32:75:09:c7:9b:
b9:50:28:5c:39:6b:30:0d:5f:e6:7e:ed:0b:ce:f1:3f:c8:17:
a0:9a:56:98:e1:79:b6:95:d6:8f:33:78:4d:c6:d2:34:ee:d6:
da:44:88:22:cc:df:65:55:e9:c7:c6:fd:9e:c5:1b:10:61:a4:
ef:55:07:8c:49:58:8b:7c:45:b1:78:a1:31:b6:90:4c:b3:5f:
60:cc:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org