Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/1AA65D34B73511EC8392922AC4F9AE02.roa
File: 1AA65D34B73511EC8392922AC4F9AE02.roa (raw, json)
Hash identifier: qrirPCsgHoHDibl0EGtafl3A/sbj3LV1uNqgtw0MNcg=
Subject key identifier: A9:F1:EC:E5:18:4A:91:0B:3C:23:8E:48:30:D2:31:F4:A3:C0:0D:28
Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
Certificate serial: 02CD
Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/1AA65D34B73511EC8392922AC4F9AE02.roa
Signing time: Fri 08 Apr 2022 12:12:05 +0000
ROA not before: Fri 08 Apr 2022 12:12:05 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 7018
IP address blocks: 103.143.160.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
Validity
Not Before: Apr 8 12:12:05 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62502695-1e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:67:d2:b4:bb:87:ff:a3:b0:af:14:f1:c4:
9f:56:68:a7:0f:9d:a8:a6:ea:7b:c3:02:78:2a:2c:
8d:0c:1b:52:9b:da:96:0d:19:44:78:e2:8a:c3:cf:
95:bd:cb:3b:ca:00:dd:b6:95:4b:20:e3:24:44:ca:
58:55:f9:31:d7:dc:fd:48:94:2a:c0:ac:ac:3a:68:
37:28:11:06:57:10:95:98:4a:28:a3:94:c0:44:b1:
1f:3e:7a:36:8e:33:a4:17:f5:c5:9e:4d:b8:ff:37:
8a:4b:d3:d4:c8:90:74:03:fd:44:3c:06:fd:18:ef:
1d:06:9b:38:20:f1:36:9f:a3:0d:85:8f:10:ee:b1:
31:3a:21:b1:78:e6:fc:f3:61:9f:5a:2f:b7:a2:ae:
b0:2f:78:61:39:b5:35:bc:7e:f2:3d:e6:5f:25:6e:
0b:e0:45:fd:ae:d6:76:2b:64:2b:e1:72:d4:88:cf:
b9:ff:e4:08:55:19:2e:2b:22:61:a3:74:06:5e:73:
c7:02:e6:da:bf:85:9b:3f:76:9e:a6:89:fa:bb:c0:
99:ad:7c:25:f3:b6:74:49:a6:e7:95:9e:00:23:9a:
6e:06:5c:f2:d8:76:9e:e5:63:d1:15:e1:3c:d6:23:
66:96:7e:29:f9:13:49:ce:d3:23:c4:04:bc:ee:9c:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:EC:E5:18:4A:91:0B:3C:23:8E:48:30:D2:31:F4:A3:C0:0D:28
X509v3 Authority Key Identifier:
keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/1AA65D34B73511EC8392922AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.160.0/23
Signature Algorithm: sha256WithRSAEncryption
75:29:a0:34:da:57:1d:87:1f:b8:f9:94:5f:08:12:54:06:30:
d2:90:1a:8d:eb:28:5d:ac:09:0e:20:b3:59:7f:b4:ed:f5:0f:
5a:71:2b:19:85:cd:0f:6f:f7:9e:de:87:4d:b3:75:12:a4:0d:
96:79:ff:77:e0:78:3d:81:be:7b:b9:fb:59:96:db:db:f6:8b:
94:01:64:26:ce:05:c2:1f:25:a7:d0:4c:f9:b7:4c:1d:27:fd:
db:94:5d:37:11:0b:30:ab:4a:09:db:71:14:54:b9:3f:cc:ab:
db:c0:63:ef:fd:25:42:c9:ed:8e:42:34:52:f8:cd:91:a2:40:
32:04:47:d3:21:70:9d:cb:61:66:6a:77:9a:a2:20:ce:ce:87:
bc:6a:38:87:97:34:90:46:3e:64:1d:66:af:26:97:51:73:60:
7a:fb:2c:4d:8a:06:3a:0b:24:34:df:1f:fd:8d:78:11:5c:96:
75:d3:3b:96:05:00:fa:c0:15:d6:d1:a9:a1:e8:c4:e5:6d:ae:
0e:43:1e:a0:c4:91:40:c9:b5:c7:92:53:2a:d6:f9:54:a9:f0:
b0:a4:95:7f:ca:65:c7:a6:ff:d7:e5:7b:e5:91:95:5a:c1:f3:
ba:42:2d:15:c6:a0:e7:f4:ec:6c:30:6e:e9:82:50:e3:b0:42:
a5:e1:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org