Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/5FC09ECEDE2911EB9B09A334C4F9AE02.roa
File: 5FC09ECEDE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier: H3LpBoTLkugIKeNJltpSHs/mPCC4SO197gUnIX5cdwE=
Subject key identifier: 8E:9E:1A:26:ED:B3:43:BD:58:54:38:8C:C3:7A:10:FD:39:6A:34:E1
Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
Certificate serial: 016E
Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/5FC09ECEDE2911EB9B09A334C4F9AE02.roa
Signing time: Fri 15 Oct 2021 14:31:09 +0000
ROA not before: Fri 15 Oct 2021 14:31:09 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 48024
IP address blocks: 103.143.160.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8
Validity
Not Before: Oct 15 14:31:09 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=616990ad-eba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:14:16:07:ff:17:a8:c6:00:48:88:06:b8:
16:2a:42:54:08:33:7b:51:79:71:0f:63:19:16:d0:
35:41:19:f5:b4:65:bd:ed:fd:42:b9:07:be:25:96:
9c:67:b7:e1:35:93:bd:75:d4:ab:1e:f5:02:67:75:
2c:21:6d:a5:63:44:91:8a:a2:5a:23:33:65:42:0f:
67:46:4e:a4:b7:b4:1a:d4:c5:b4:f1:e2:8f:df:fe:
8f:f8:fc:69:ca:fe:a3:6e:85:cc:4b:94:c0:49:b7:
d6:5d:19:c4:69:d8:57:88:b2:3b:fb:4a:35:4d:7b:
40:28:cc:02:47:62:8c:7c:ab:58:bf:2f:d0:05:25:
7b:b0:2b:fb:9a:10:90:41:03:2d:a7:b0:0d:49:9f:
e9:d3:ca:91:cd:b1:ff:be:66:59:7f:43:01:31:23:
1e:b5:84:4f:cc:80:91:c9:53:92:d4:04:93:e1:8e:
23:3c:f0:fd:1b:5f:d6:08:65:5d:f6:1d:7e:de:01:
b6:46:59:17:27:2d:2a:c1:7c:14:9f:a9:fa:e1:80:
cf:1a:33:c5:5e:60:89:c0:74:59:09:e0:cc:6b:d7:
67:16:78:2d:7a:42:7a:2d:eb:55:3d:a8:57:1f:05:
e9:ef:86:7a:6a:9e:90:83:0f:4e:d7:ef:a6:27:b8:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:1A:26:ED:B3:43:BD:58:54:38:8C:C3:7A:10:FD:39:6A:34:E1
X509v3 Authority Key Identifier:
keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/5FC09ECEDE2911EB9B09A334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.160.0/23
Signature Algorithm: sha256WithRSAEncryption
db:05:f0:b9:e5:98:bd:00:30:a9:32:91:dc:47:0d:dd:a4:a7:
b6:36:93:c2:6a:ea:87:d5:56:57:c8:55:40:14:f9:a8:42:0e:
44:55:ef:04:61:a3:4c:85:0f:95:e7:9a:f1:f3:f5:d3:e2:86:
a5:b2:23:79:e7:84:69:02:9d:fd:46:4f:a4:0c:31:ef:78:ad:
fc:72:db:38:fe:ed:5b:e9:99:78:da:5a:40:7a:c5:ae:48:ec:
6c:bd:e2:fc:8b:4c:d8:db:42:07:fb:97:5d:e6:a6:4b:b8:28:
3e:84:4b:68:b1:bb:e6:d1:d7:45:2c:98:fc:66:4c:d1:82:08:
b7:62:22:98:34:df:26:1a:33:9f:d9:cd:1f:c5:46:22:52:d6:
e4:19:0d:34:92:6e:b2:0c:9a:57:77:c2:5b:eb:3a:ab:f7:f9:
27:20:d7:23:9d:df:3d:56:50:27:7b:0b:fa:f4:9c:d2:84:74:
b6:b6:f3:f9:72:5f:22:08:cb:80:c6:d2:f2:a6:17:73:c6:b5:
98:57:6e:6f:65:37:ef:c3:ca:3f:49:e5:78:2d:0c:aa:45:1c:
4f:cd:e0:b1:71:f8:bb:ba:5a:c6:15:af:1b:45:02:a8:e7:48:
86:e2:3a:df:6e:cc:e9:a7:a6:9d:cf:de:6f:09:91:c0:c9:18:
f9:de:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org