Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/250F0E9C7BCC11EB91CCFB33C4F9AE02.roa
File: 250F0E9C7BCC11EB91CCFB33C4F9AE02.roa (raw, json)
Hash identifier: 2qD6OqnnumJW9iepDgFnoiswng+0pBO6wohQbUXXyrE=
Subject key identifier: 43:F2:B6:EF:DA:05:E3:B3:F3:06:AD:CB:5B:F7:0D:26:05:EC:67:B2
Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial: 01A6
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/250F0E9C7BCC11EB91CCFB33C4F9AE02.roa
Signing time: Wed 29 Sep 2021 14:33:24 +0000
ROA not before: Wed 29 Sep 2021 14:33:24 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 58507
IP address blocks: 103.14.172.0/24 maxlen: 24
103.14.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Validity
Not Before: Sep 29 14:33:24 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61547934-8169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:8f:62:b0:2f:9f:71:01:54:bd:cd:e9:0b:
af:b1:07:f3:06:5b:61:0c:59:52:4d:30:7e:23:41:
9f:c9:24:70:c1:f2:2e:af:1e:69:da:bf:ab:57:4b:
bc:3d:e5:e8:b9:f4:05:9d:53:13:bb:2d:1a:a6:30:
6f:ad:20:a6:3d:80:70:27:8a:22:08:7b:6d:05:47:
17:3e:af:bb:f1:09:39:cb:e9:49:a8:60:c5:f4:d6:
c0:3f:d1:e0:db:45:02:65:ed:e6:53:24:1e:9d:4e:
ac:d3:14:f7:67:9f:31:a9:6b:0c:22:95:9a:3c:91:
c0:e9:f9:96:89:05:b8:25:22:f2:75:e8:1b:d0:9e:
6c:50:37:1f:84:58:51:63:4a:83:0a:28:95:c3:84:
bd:19:77:01:5e:c9:13:ef:19:3f:14:e7:90:e3:a4:
80:2c:db:6a:f4:18:79:06:28:58:f0:0c:ba:07:7c:
8b:01:70:ed:71:4b:0e:c6:3b:6f:a1:cb:d5:52:f3:
6d:cf:d0:f6:49:55:70:8a:9c:1c:19:30:d4:04:26:
25:d0:6b:6a:e3:98:9d:36:3b:25:ce:a4:a5:94:0e:
1d:5f:84:fc:49:d9:63:ba:39:29:8f:f6:2c:ee:81:
35:b8:bb:60:e4:98:d2:ba:ad:08:5e:af:40:03:ce:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:B6:EF:DA:05:E3:B3:F3:06:AD:CB:5B:F7:0D:26:05:EC:67:B2
X509v3 Authority Key Identifier:
keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/250F0E9C7BCC11EB91CCFB33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.172.0/24
103.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d0:2d:a5:b6:a0:17:7f:2b:1e:c9:d5:c2:2a:76:86:c0:1c:
57:18:e9:90:96:71:bf:b6:1e:b7:d5:c7:7f:2c:7c:16:5b:4c:
26:96:a9:d4:ec:51:30:1a:ed:7e:60:e8:95:de:52:42:a9:12:
d0:67:9d:e2:fe:3b:30:1e:65:ea:04:81:25:92:22:a7:9a:0d:
13:62:d0:47:04:28:3b:e8:3a:e1:06:26:2d:42:a6:ee:5e:73:
63:f1:22:a6:da:f7:f6:c1:55:02:f9:a2:dd:f2:ff:49:36:c5:
a6:8b:8f:11:d3:72:c9:ea:ab:72:a5:b2:76:71:11:26:33:d8:
96:fd:bc:b8:f7:e9:86:a2:98:fe:33:46:16:ff:23:77:31:bc:
e8:a4:20:ce:8e:ce:57:05:d1:7a:fb:f7:7c:db:52:d0:13:7f:
89:a8:d6:d8:a8:63:77:dc:32:c8:cb:ee:11:04:fe:7a:e3:13:
75:56:de:8f:8b:00:52:03:64:e1:f8:6f:4b:2a:cd:05:a6:2c:
09:ec:af:53:02:86:0d:98:a4:a1:d9:5b:de:19:1d:12:a0:57:
e5:e6:e9:8b:2a:d1:07:0f:e9:80:07:a7:ee:38:65:8c:eb:b8:
50:b7:45:33:8d:76:b0:84:66:8d:91:70:ae:cd:81:f4:42:14:
56:d5:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org