Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/3517A516B10811EC98CAA965C4F9AE02.roa
File: 3517A516B10811EC98CAA965C4F9AE02.roa (raw, json)
Hash identifier: gFRslohusu4/kHhKy73KS59z+QCdFpFXeH+tgVGhSZQ=
Subject key identifier: 5B:88:EC:7C:FB:F6:70:07:D7:37:38:3A:FE:7B:FC:89:DF:7A:8D:C0
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 0C
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/3517A516B10811EC98CAA965C4F9AE02.roa
Signing time: Thu 31 Mar 2022 15:35:35 +0000
ROA not before: Thu 31 Mar 2022 15:35:35 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139088
IP address blocks: 103.159.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Mar 31 15:35:35 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6245ca47-6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:37:fd:3e:94:ec:c4:02:b4:4b:fc:e3:dd:
eb:39:01:e3:22:2a:80:58:24:7e:ee:1c:c4:cd:ca:
66:d2:93:1f:41:68:f7:a9:d3:9f:d7:fc:50:0b:62:
71:77:a5:df:33:50:6b:96:47:ce:a2:cf:99:ba:6d:
50:bd:56:02:f2:03:9b:80:b3:f4:fd:71:ec:10:07:
44:ac:22:bf:4c:9a:9d:3d:92:79:6a:b8:80:1b:11:
8d:7e:ac:fe:6f:60:70:96:1d:ad:42:7b:55:ab:2b:
dc:34:b0:f8:7e:de:cd:a7:af:1a:30:a3:06:e4:9f:
3f:fc:5e:5c:f8:78:61:66:03:e0:ee:07:6b:6d:3a:
85:86:f2:95:61:16:13:d4:35:a4:db:ae:ad:2b:ba:
aa:cf:62:53:e9:8d:19:b8:6a:0a:06:af:c6:f5:80:
9c:f2:f5:ad:47:92:f9:76:92:fe:32:3f:f3:06:14:
20:fb:f1:ee:91:2e:d2:60:b2:0e:06:00:a0:8c:21:
32:2a:f7:70:d4:30:3a:75:f3:11:5a:6c:79:0f:85:
45:95:60:02:1b:1e:41:71:db:cc:66:15:90:d3:ca:
b8:af:02:97:bf:44:4a:39:d8:f1:e7:12:4f:48:c8:
f8:55:7a:cf:a8:b9:2e:81:49:2c:44:8b:9c:c4:2c:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:EC:7C:FB:F6:70:07:D7:37:38:3A:FE:7B:FC:89:DF:7A:8D:C0
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/3517A516B10811EC98CAA965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:93:cc:14:95:19:48:a5:2c:61:30:00:c0:3f:13:ff:30:57:
e1:e5:3b:be:e8:63:8a:2c:a5:e6:1b:1f:12:c3:ee:2d:fe:1d:
38:59:4e:d3:4f:4a:e0:a3:2c:cf:04:1c:47:78:31:41:aa:0e:
43:44:20:51:a3:46:c4:ed:5b:1f:44:20:32:3f:a2:9d:2d:7b:
44:af:4f:d1:0b:e4:28:2d:d3:85:92:9d:a3:5c:bf:81:b0:06:
ea:a3:29:6d:56:fb:2d:7a:a7:b6:0d:09:fd:c7:a7:f2:fb:d1:
83:68:c7:59:53:53:47:79:1d:bc:03:cc:06:20:b8:65:2e:a9:
ef:b7:3c:e6:3c:a8:d6:ee:1b:e5:70:b4:49:e8:a5:ea:1d:ec:
bb:1d:fb:fc:ea:17:04:9c:a7:7c:e2:4f:e3:33:04:5b:b4:a9:
c8:82:cb:f2:a4:53:42:dc:3c:a9:fd:35:91:b7:86:be:04:9b:
fc:57:7f:b8:0d:42:15:13:f4:88:ad:17:a8:6b:4c:49:73:70:
c5:9f:20:2f:9a:58:79:7e:0c:e8:a3:f2:00:8d:fa:60:a0:a9:
6e:3f:ac:ea:39:3f:e9:7a:54:c3:8d:10:df:e0:7d:2c:4e:53:
4f:88:fa:5f:4b:b3:35:7e:11:d7:b3:8c:85:39:7e:34:06:1c:
ed:26:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org