Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/999E8A340A9A11EA9A5EC67FC4F9AE02.roa
File: 999E8A340A9A11EA9A5EC67FC4F9AE02.roa (raw, json)
Hash identifier: CDbpEYz6Wy1MyqplWLlCYrDQO9DetdSC0CQ5I5msuKM=
Subject key identifier: DF:E7:6D:CD:27:C8:6F:1C:AD:7A:53:AA:81:8E:0E:CB:9F:CC:81:E6
Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Certificate serial: 0874
Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/999E8A340A9A11EA9A5EC67FC4F9AE02.roa
Signing time: Sun 20 Feb 2022 20:26:17 +0000
ROA not before: Sun 20 Feb 2022 20:26:17 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 138541
IP address blocks: 103.132.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Validity
Not Before: Feb 20 20:26:17 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6212a3e8-6f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:98:87:a4:6f:5d:59:95:24:5a:91:5f:9e:
2b:2f:1d:e3:5d:ae:86:2c:a5:ee:8b:41:dd:14:65:
23:fa:69:ea:fa:d3:29:8c:65:b9:e5:d1:86:7b:7f:
7e:d0:88:66:fa:08:c9:08:a3:f1:09:9d:db:31:00:
58:49:a1:9f:d4:1a:a3:57:2d:e1:fb:29:00:b4:e1:
59:d9:7d:a4:a8:e2:2d:04:71:0d:3f:7c:32:50:96:
29:c2:b6:23:eb:55:aa:19:4f:bf:2f:54:d9:94:2b:
6a:35:9e:6d:1d:ff:5f:d6:67:1b:ec:2e:f9:50:14:
1d:dc:a8:da:f5:a6:34:98:2f:43:84:86:83:54:05:
d5:79:fd:39:c8:9f:61:0f:57:8e:3a:57:a9:6f:3c:
e9:a0:0f:dc:cf:f8:ed:27:d6:8b:5f:e9:2a:a0:97:
a7:39:f1:c3:2c:d4:26:0b:10:cb:38:c9:27:6b:fb:
39:3a:50:90:4d:97:3d:b1:71:6a:9f:b5:d5:a6:d9:
01:6e:5e:e5:9a:96:77:c2:5d:f4:6b:d4:6d:90:3b:
7f:a7:ff:ce:7e:9c:c2:c3:aa:c9:9b:a8:f4:4c:45:
8e:95:ca:e7:0c:4a:42:aa:76:86:8d:4f:59:19:53:
4a:1e:90:d1:9d:99:66:7c:03:38:80:37:c9:a3:69:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:6D:CD:27:C8:6F:1C:AD:7A:53:AA:81:8E:0E:CB:9F:CC:81:E6
X509v3 Authority Key Identifier:
keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/999E8A340A9A11EA9A5EC67FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:2e:fe:bd:38:a3:a1:8b:30:cd:eb:2d:db:89:d7:91:0f:43:
34:ea:ad:3b:e3:65:73:13:96:32:4c:5e:82:ac:56:eb:8b:51:
6f:77:13:9c:c3:46:03:14:8e:14:3c:6f:bb:f6:38:eb:ed:ad:
61:ac:98:eb:b0:15:98:6c:c5:c7:ae:a2:49:02:38:3e:aa:db:
d8:71:51:67:81:a6:d1:16:de:53:b6:1a:00:e2:33:e4:8f:8a:
7f:cd:cf:2a:83:4c:96:74:87:35:f3:d4:8f:8c:ad:e5:aa:c1:
d3:3b:88:ab:b1:85:7e:63:f0:0f:62:d3:18:29:47:b8:9b:14:
bd:34:e8:6d:3f:3f:94:c5:20:79:52:69:34:d5:43:02:c7:f9:
65:23:35:01:4d:5e:ac:2e:64:b1:14:06:96:51:b8:78:a0:bf:
da:92:88:ee:6c:df:25:d5:be:ce:14:72:79:3a:39:cc:25:ff:
3d:12:f7:91:4a:73:ee:3d:62:89:51:c2:cc:80:e5:46:6a:86:
f7:67:19:17:a1:81:41:43:e9:c6:cc:c5:0d:21:0f:c5:c0:cd:
d4:07:90:c3:63:3a:6d:ca:5e:3c:a6:57:c2:ec:56:db:94:64:
94:79:26:36:96:40:45:33:fc:a6:55:99:a1:5a:c0:5c:d8:db:
c5:74:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org