Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/AD8DAE88A80211EB876A534BC4F9AE02.roa
File: AD8DAE88A80211EB876A534BC4F9AE02.roa (raw, json)
Hash identifier: 4Du20fCYDiGiM0QJ1TlxaEty6zz1RwRU3e6zI7L2yNk=
Subject key identifier: 14:9E:C6:8D:63:1B:D7:04:8F:DC:78:61:4C:E6:A7:14:67:41:AC:76
Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial: 02
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/AD8DAE88A80211EB876A534BC4F9AE02.roa
Signing time: Wed 28 Apr 2021 09:18:22 +0000
ROA not before: Wed 28 Apr 2021 09:18:22 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 142124
IP address blocks: 103.166.170.0/24 maxlen: 24
103.166.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Validity
Not Before: Apr 28 09:18:22 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6089285e-f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:c7:46:46:c1:a3:ba:2d:79:2a:7f:a8:56:
b3:d5:10:8e:e7:1e:b3:f0:b0:59:16:0b:c5:0e:49:
46:7f:8f:c0:c1:67:22:3a:51:38:d4:8d:73:30:78:
d9:2c:8d:48:5c:12:95:e7:31:58:8a:4f:a9:e3:9f:
9f:1d:f2:e8:05:da:31:98:3f:df:cb:cf:0a:d1:96:
29:2a:02:64:e6:92:cf:15:d9:31:f5:ab:78:d7:60:
cb:c3:f5:22:29:3c:2c:77:3a:cd:d1:35:cd:88:99:
3b:b7:13:f8:70:1a:3c:88:7e:44:a0:70:68:60:18:
2a:9f:fc:4c:26:f0:64:26:40:89:59:c3:56:72:91:
53:91:d2:2d:49:51:5a:f4:32:57:2c:b6:74:d9:89:
55:77:23:21:65:56:fa:ed:89:ee:d7:ff:ee:76:ba:
04:81:16:e8:1f:d2:05:4e:2a:94:1a:f5:68:87:14:
ef:75:37:7f:6c:ec:cd:93:d9:c3:7e:f0:1d:86:1d:
d6:54:0c:7c:98:d8:82:c8:84:67:17:2e:9b:3d:65:
3d:f4:db:8d:47:1f:b8:cd:ed:4c:8f:bf:3a:24:8e:
72:1d:2b:e4:d8:d6:22:dd:92:19:70:eb:a3:15:eb:
f8:28:b7:53:17:35:11:72:03:49:a7:fe:b4:41:08:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:C6:8D:63:1B:D7:04:8F:DC:78:61:4C:E6:A7:14:67:41:AC:76
X509v3 Authority Key Identifier:
keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/AD8DAE88A80211EB876A534BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:e5:ae:dd:c0:35:d1:48:88:6a:ab:92:08:d8:fe:04:e5:09:
ed:4f:60:0e:18:eb:74:8a:39:c7:c0:55:52:4c:14:1a:f2:e0:
10:88:d7:ec:96:86:6a:ae:6c:85:3a:66:a6:8c:31:9a:e2:65:
d6:bd:7e:68:da:db:36:a7:ce:b3:55:48:5c:c0:1e:a3:8e:c5:
a3:97:0f:5d:c9:14:28:3d:37:25:48:92:40:03:20:13:7c:fe:
d8:83:a2:12:44:10:96:84:4b:20:bb:96:f2:89:a5:cf:27:c1:
93:2a:5a:a9:55:e6:55:0a:30:7e:ee:0f:de:6d:bf:d6:b2:12:
d9:68:96:db:07:37:31:eb:a6:3e:ef:a3:be:98:dd:7f:ea:af:
f0:a6:f1:f5:c4:f8:48:23:d8:8b:fe:c2:8f:f6:b5:b6:52:bb:
23:c7:03:1d:a5:42:33:56:71:01:d5:48:8b:69:9b:fd:72:06:
56:e8:0c:7c:50:25:94:52:3b:75:59:4a:24:42:0f:25:0e:4d:
68:be:10:ce:4d:28:e8:00:f9:3b:99:34:66:ef:44:ce:fe:91:
43:df:df:21:8d:31:a6:dc:91:56:d3:d9:39:26:3e:fa:69:11:
13:20:f3:b7:8a:5e:67:2f:54:4d:0f:67:df:05:b0:c3:be:49:
98:3c:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org