Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/163B49065E5F11EBBE37FA4CC4F9AE02.roa
File: 163B49065E5F11EBBE37FA4CC4F9AE02.roa (raw, json)
Hash identifier: oNik4sq7fWamz+tPn+F9kiMk5/DXpN4mG7S7VSwzA5w=
Subject key identifier: 50:DD:0B:CA:28:C1:20:F0:E5:60:65:DC:EE:BD:A6:2F:FC:C2:50:6A
Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial: 0CED
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/163B49065E5F11EBBE37FA4CC4F9AE02.roa
Signing time: Thu 10 Mar 2022 19:05:20 +0000
ROA not before: Thu 10 Mar 2022 19:05:20 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 137385
IP address blocks: 103.132.182.0/24 maxlen: 24
103.132.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Validity
Not Before: Mar 10 19:05:20 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=622a4bf0-76d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:67:ae:b3:8a:1f:6e:74:65:3e:ee:c0:fe:
45:fa:b5:fe:46:2f:78:03:fc:3e:1f:f6:70:4c:be:
29:65:76:3e:ae:e8:66:3b:aa:27:3f:b4:11:b6:0d:
2d:e7:21:5c:f5:ae:54:2d:ed:37:fa:de:8b:4b:70:
da:e8:f8:10:93:db:e1:15:98:7a:5e:28:74:40:af:
b2:56:25:89:8c:66:86:57:85:26:d0:46:c9:2c:39:
d2:96:cd:b5:bb:69:16:3c:da:59:e6:0c:a8:22:46:
a3:32:9b:e5:dc:89:df:85:1d:51:dd:66:e8:eb:df:
02:af:94:85:4b:5b:03:9f:5e:04:c4:b3:f1:cf:db:
80:f7:3b:b2:80:73:4f:1c:d2:50:30:77:b3:ff:75:
2c:80:58:79:d5:49:1e:d2:7b:e1:1a:26:71:a0:9f:
30:52:80:16:7d:a5:0e:ec:2b:e3:00:f2:01:37:a4:
80:58:22:f2:f2:15:42:51:dc:e5:0f:8b:60:86:4d:
0b:08:75:c7:7d:ec:d0:c6:40:62:ce:ba:2a:6e:72:
7a:72:5c:31:5e:79:ae:99:03:b7:fa:19:e0:4f:c5:
74:d8:a0:f3:d4:38:9b:6b:b6:b1:52:03:a0:13:1a:
9f:1c:8c:86:b8:17:7f:d3:0c:f2:ae:75:9d:4b:b3:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:0B:CA:28:C1:20:F0:E5:60:65:DC:EE:BD:A6:2F:FC:C2:50:6A
X509v3 Authority Key Identifier:
keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/163B49065E5F11EBBE37FA4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.182.0/23
Signature Algorithm: sha256WithRSAEncryption
11:e4:a2:b2:d8:a3:1d:fd:48:95:c6:77:c3:d4:9d:52:26:b6:
af:7d:df:27:dd:a7:ee:26:b2:ce:66:8d:02:c2:5c:66:28:78:
2c:b5:41:ac:ef:82:03:ef:5f:96:a0:ab:d4:8e:e9:cc:6d:de:
aa:24:a3:b9:f8:6b:c1:1f:6e:7e:0d:d1:74:80:54:57:3d:0e:
a8:16:35:7a:1d:79:a1:f1:f2:5c:da:e6:c9:3a:bc:70:8e:c2:
f2:8e:e6:95:8a:47:f2:a6:aa:58:e4:25:6c:1b:25:2b:46:37:
2c:3e:97:83:eb:af:6c:9d:30:36:8a:65:c9:c3:76:2d:94:e9:
4b:9e:dc:50:9e:67:e0:c3:e0:fc:92:0d:a0:46:d8:b9:25:61:
8e:c6:5a:4b:88:10:76:f1:68:8e:b4:76:3c:9f:f5:7f:30:67:
ac:ec:45:78:ab:76:95:ad:60:0c:fc:59:c2:38:cb:55:d4:eb:
f0:06:a1:49:dd:c0:ab:bf:cc:ea:79:07:f4:9e:cb:07:9f:56:
26:bd:b4:54:d2:b2:f1:64:f0:57:73:d8:f2:29:cc:dc:b1:e7:
4a:67:0e:a6:a8:3b:07:3c:13:c2:8d:68:3c:1b:82:06:a3:69:
ab:8e:7d:ee:2f:11:f4:a4:78:26:94:69:24:7b:41:7f:c0:b3:
54:ae:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org