Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/0741F34E9E0211ECB709C970C4F9AE02.roa
File: 0741F34E9E0211ECB709C970C4F9AE02.roa (raw, json)
Hash identifier: fKKQdIg21VsboQJjIeYAhhdnnV5jUwAncqtd/MWJ6QI=
Subject key identifier: EB:E2:68:77:29:1E:5A:95:1B:05:1A:8E:B5:C4:4D:41:D4:10:D1:E2
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 02
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/0741F34E9E0211ECB709C970C4F9AE02.roa
Signing time: Mon 07 Mar 2022 10:33:29 +0000
ROA not before: Mon 07 Mar 2022 10:33:29 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136970
IP address blocks: 103.146.158.0/23 maxlen: 23
103.146.158.0/24 maxlen: 24
103.146.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Mar 7 10:33:29 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6225df79-46a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:7d:37:eb:3f:f0:bc:b4:d3:71:d2:f5:d3:
3f:a1:29:a2:27:9b:bc:ef:19:9f:16:d7:4a:d0:a4:
c6:fa:52:37:bb:b3:5b:8c:95:52:2e:a9:6f:ab:de:
70:24:27:7c:60:3f:48:76:11:ec:14:ac:9d:d0:2d:
f6:28:c9:6f:d6:ab:08:ef:75:b0:07:b4:bf:6c:01:
6d:8f:62:2b:42:b0:5a:ad:ff:5d:95:fb:bc:08:9a:
15:b5:80:16:8d:4c:00:2f:d7:c5:81:69:8b:23:89:
02:b0:d4:16:53:98:65:0e:56:4f:13:5e:4f:e7:95:
21:f8:c2:a2:6e:27:f8:29:72:8b:8d:da:7b:b4:6a:
1e:1d:54:96:1b:b7:a5:69:d3:56:55:ed:60:3d:d5:
03:9f:c9:ba:c6:a2:aa:be:30:6a:88:59:3d:da:d1:
30:06:5e:eb:d5:72:bd:99:a6:9d:c9:c0:92:46:40:
7a:34:16:04:85:27:bb:95:33:5e:b8:b7:f1:a4:6a:
cc:04:1c:06:c4:5b:c7:fc:27:4a:d8:ac:86:af:f2:
53:7d:d7:9b:dd:9c:b8:ea:1d:df:80:cf:58:a8:d8:
e4:47:5c:54:33:9e:75:09:df:81:73:e1:d5:6f:b5:
fc:57:09:e4:fe:a6:f0:55:77:af:39:2f:6d:ad:e3:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:68:77:29:1E:5A:95:1B:05:1A:8E:B5:C4:4D:41:D4:10:D1:E2
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/0741F34E9E0211ECB709C970C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.158.0/23
Signature Algorithm: sha256WithRSAEncryption
28:ec:89:e7:34:ba:e3:36:48:af:d6:af:dc:e6:59:88:5d:47:
df:f3:95:f8:37:18:fe:18:ef:6e:ba:0b:38:77:03:3a:81:a7:
3c:62:4a:cd:61:75:18:94:c4:32:8c:81:a4:e9:1b:ba:5d:19:
9b:d4:74:c2:e6:19:d8:22:bc:13:e0:cf:4b:5f:53:d9:67:ab:
e5:10:bf:7a:ca:2e:fb:d6:4b:1c:8c:65:0c:eb:c3:ca:37:ce:
ae:a1:6a:67:ff:3a:2f:ed:53:45:72:eb:7c:f3:d8:ab:be:cc:
dd:96:a2:36:55:c7:59:27:9a:65:6b:c3:da:8f:69:a6:8b:2d:
78:e8:cc:e9:af:25:25:f5:31:b5:04:35:05:24:5e:8c:72:11:
b5:83:61:bb:82:e0:e6:ee:e0:ec:1c:4a:33:91:d3:cf:9d:5e:
cb:88:c7:7e:54:4e:24:86:fd:df:27:54:6d:46:ab:ab:40:74:
0e:f2:47:91:46:e5:f7:17:44:17:bd:0a:aa:f6:d9:d2:52:4d:
81:90:89:da:2a:62:f6:29:35:a1:9c:05:2e:2f:59:19:5d:8e:
2e:0b:27:92:47:37:35:00:f4:66:a2:2e:d7:51:43:a8:c8:14:
30:9d:9f:33:9d:8e:4e:8c:da:92:ff:6a:b2:f0:b0:ed:1d:13:
c8:40:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org