Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/FCF7FAECA04911ECAD2B603FC4F9AE02.roa
File: FCF7FAECA04911ECAD2B603FC4F9AE02.roa (raw, json)
Hash identifier: 7APcl3EBD/H0M/TCqBhCZcMNiJB0wLgBwzunmu+WnNE=
Subject key identifier: 61:5A:5B:55:32:BC:E9:A2:B6:0D:77:89:DA:2F:CE:8A:43:B3:91:3D
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 5E
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/FCF7FAECA04911ECAD2B603FC4F9AE02.roa
Signing time: Thu 10 Mar 2022 08:13:39 +0000
ROA not before: Thu 10 Mar 2022 08:13:39 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149419
IP address blocks: 103.178.216.0/24 maxlen: 24
103.178.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Mar 10 08:13:39 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6229b332-4523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:41:80:fa:6c:8a:0a:e8:f0:7b:3e:43:0e:
c8:ac:ee:29:ab:b4:ec:54:52:18:6d:27:4e:03:d0:
c5:97:4d:8c:e8:f2:50:40:1f:f2:14:cc:b4:d2:cf:
ea:06:a9:bf:07:d2:c9:01:28:66:76:e8:93:e1:42:
dd:aa:8e:3b:a0:c0:be:b1:95:51:bd:04:38:36:29:
d9:83:6e:17:38:a9:9a:b6:14:87:ab:21:c4:67:98:
5a:54:b3:e9:29:82:45:d0:cf:f4:d4:1b:bc:0e:28:
86:30:be:41:ed:9e:a5:b7:d8:35:50:80:51:da:d3:
a0:45:d8:bc:fa:29:ee:dc:56:04:be:33:c9:e7:88:
2e:06:19:f9:8f:92:d6:c6:d2:97:18:d7:cb:1a:54:
05:e9:e4:09:48:2c:f0:a4:06:72:7e:82:07:80:28:
d1:ae:8e:a4:e0:1b:58:4d:67:f3:f4:cf:92:08:56:
e0:74:09:a3:c7:d6:5c:5e:60:fd:e3:ad:6d:d8:a3:
8b:40:fd:0c:5f:de:29:da:11:fd:34:5e:2a:fb:74:
ac:40:49:ac:9b:79:14:54:a0:7a:a4:0b:eb:b9:00:
0d:7d:f4:bb:92:7f:5f:3b:87:a9:37:a1:1b:98:4c:
6a:e9:2b:7a:2f:e6:ad:e8:4e:7f:29:c2:75:cd:a0:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:5B:55:32:BC:E9:A2:B6:0D:77:89:DA:2F:CE:8A:43:B3:91:3D
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/FCF7FAECA04911ECAD2B603FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:58:0c:ee:d7:f2:21:60:dc:a2:bb:e9:fd:9f:98:cc:9b:6c:
77:92:16:d2:54:fd:61:d2:02:7b:f7:e4:df:e6:43:10:46:7f:
33:41:42:21:15:77:f5:89:19:5c:76:09:6a:c4:59:05:f2:f3:
86:eb:33:41:c5:e4:b2:88:c7:90:62:ab:40:58:9d:cd:6a:06:
ab:a5:2b:ba:63:4b:91:f0:10:09:54:51:7e:dc:31:c6:d8:08:
52:59:38:13:d3:01:df:08:e5:6f:ac:4e:02:65:7e:9c:aa:4f:
3c:ca:b0:d5:65:77:0a:54:a2:7c:ae:e2:9d:96:84:dd:3c:76:
d2:f8:da:18:cf:c7:50:c0:5e:08:7e:71:c7:e1:a3:08:fb:86:
45:d2:7d:e4:e2:dd:d6:63:f1:ce:46:5a:d1:fb:c5:ce:14:de:
55:5e:03:4e:f9:8c:c6:88:f3:7f:fb:2b:94:86:e1:33:27:34:
4f:a8:7b:98:62:63:c1:74:78:cd:d5:b2:4d:7b:d0:62:94:b9:
fc:69:c8:c3:45:bd:22:a1:9f:ba:6f:f3:6c:45:98:d2:e4:cc:
d7:7c:5e:16:d4:fd:58:7b:77:17:06:af:7f:83:ad:b4:73:59:
95:c3:f1:21:c2:fe:c8:eb:3b:a7:e2:9b:08:d7:41:6e:47:23:
d8:d3:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org