Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/98A80D3ACC8511EC8D238672C4F9AE02.roa
File: 98A80D3ACC8511EC8D238672C4F9AE02.roa (raw, json)
Hash identifier: And6sBJZSfncpp5AEyZ75CkoneaZiWpRWo7LSwRyPvg=
Subject key identifier: B9:2B:10:4B:9C:13:DB:6E:34:35:C5:C4:49:FB:45:91:A8:68:02:40
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 0528
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/98A80D3ACC8511EC8D238672C4F9AE02.roa
Signing time: Thu 05 May 2022 15:11:11 +0000
ROA not before: Thu 05 May 2022 15:11:11 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136933
IP address blocks: 103.127.80.0/24 maxlen: 24
103.127.81.0/24 maxlen: 24
103.127.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Validity
Not Before: May 5 15:11:11 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6273e90e-5343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:15:c2:a5:89:3a:24:15:9a:de:48:9f:18:
71:43:bc:20:77:74:82:9f:fe:24:f7:5c:3e:46:f3:
04:c8:9a:ac:63:aa:b4:63:f9:9d:4d:58:03:59:48:
de:52:70:19:d5:37:af:e6:96:de:f1:b0:27:d8:f5:
fd:86:8f:33:80:ff:a9:05:5a:38:c7:e5:3a:a8:8a:
e9:73:cf:51:6d:62:6c:4e:25:54:ec:f2:bc:54:29:
24:75:7a:bd:fd:99:a2:fa:d6:d4:72:3b:cf:8d:bf:
bf:1b:94:1d:e6:75:ba:3b:00:12:fa:00:94:45:b0:
63:f5:9d:83:59:3b:cb:4b:5e:33:93:a9:01:ac:08:
40:69:26:6e:bc:09:57:1e:a2:c4:49:1e:79:53:cf:
06:a1:3f:c6:e8:f2:e6:ff:38:cb:b1:93:26:98:9d:
b8:98:dc:61:bc:c4:1e:a0:d3:94:1d:da:39:bb:80:
4d:ad:4c:cc:3b:46:4c:d1:db:78:79:e7:40:91:52:
53:9c:b9:11:c7:31:ad:60:89:eb:98:55:df:69:5c:
99:bf:de:e9:34:64:4a:7d:d3:ed:f7:46:fa:60:d7:
0e:c2:b6:84:be:ca:db:32:e2:be:6b:f5:cc:eb:f7:
b8:59:bc:23:82:b1:12:50:6e:bf:8f:b4:9a:52:2f:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:10:4B:9C:13:DB:6E:34:35:C5:C4:49:FB:45:91:A8:68:02:40
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/98A80D3ACC8511EC8D238672C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.80.0-103.127.82.255
Signature Algorithm: sha256WithRSAEncryption
7d:35:b1:ff:51:42:06:f2:8d:ad:ac:7d:fb:75:0c:3a:f9:aa:
90:7f:2b:cb:fc:42:24:7a:57:2d:47:d8:97:50:d0:6f:1e:98:
74:ae:61:55:48:53:c5:27:98:f5:e3:1a:0e:74:10:87:b8:b3:
0f:54:21:a5:44:91:c3:e1:e2:38:64:35:d5:98:cd:fd:6a:03:
fa:78:9a:6f:ec:c9:2d:c8:aa:54:17:bf:3b:bd:c7:ab:ce:6d:
43:3a:9b:d8:c4:d9:88:ab:4c:c4:38:a6:6a:6f:74:f1:ce:24:
4c:5a:c6:53:26:3b:46:5c:5d:3b:ef:c8:2a:8f:8d:5c:ca:62:
20:b8:e7:3b:ba:ba:6b:60:56:7c:30:aa:81:2c:43:c6:af:02:
37:25:28:42:40:9d:a9:38:2e:ae:48:80:11:97:c5:b2:b7:5a:
d1:9f:20:87:9b:0e:9a:36:de:a0:27:5a:4a:92:c4:ed:ee:e7:
42:7f:0a:ef:8c:64:0d:bb:4a:1d:ad:4b:bb:b6:1d:4d:79:07:
9c:6f:f2:7a:17:73:ca:68:3a:80:9b:61:8b:fa:72:65:be:57:
2c:72:ea:b0:e4:50:62:38:27:41:63:b5:22:6c:1e:b7:04:a4:
13:f2:d8:dd:f0:ee:fc:e1:a0:ff:50:06:5d:58:b8:c2:01:33:
1c:e4:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org