Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E118158EAEF711EC8AB1B912C4F9AE02.roa
File: E118158EAEF711EC8AB1B912C4F9AE02.roa (raw, json)
Hash identifier: DuAAmkJUyqXeeTA/sWBxC7HRX8g67nkOj7blVD5uZWc=
Subject key identifier: 09:29:D9:E0:E3:FD:05:AF:D4:C9:E2:09:DA:C6:17:AC:FB:F5:D4:A0
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 04
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E118158EAEF711EC8AB1B912C4F9AE02.roa
Signing time: Tue 29 Mar 2022 00:33:40 +0000
ROA not before: Tue 29 Mar 2022 00:33:40 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 17557
IP address blocks: 103.159.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Mar 29 00:33:40 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=624253e4-80ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:39:7a:32:b5:b9:70:ce:07:18:bf:3b:98:
69:e3:a6:22:7f:c2:ea:bb:dc:f8:a0:f3:e7:7f:be:
43:4e:f7:1f:06:9e:ca:05:31:7b:05:2d:83:50:38:
77:bd:a5:19:ac:41:3e:3b:6a:63:e0:d1:6d:9f:c5:
80:23:15:f7:1d:dc:d4:21:fb:96:f8:f3:d9:8b:e5:
e2:57:6a:aa:1e:d9:ec:cb:57:09:67:97:9c:ff:3d:
80:86:bd:7b:3c:db:03:df:d6:c0:0d:58:be:07:7e:
de:d5:10:ec:0c:cc:ec:8f:90:89:3c:b7:f1:2a:59:
49:c0:17:5b:5c:55:fa:00:16:e9:d6:1d:57:4a:1b:
69:3b:15:b8:9c:6c:3d:3d:ee:dc:09:75:f2:e2:fa:
46:48:87:66:0c:f9:aa:3a:bc:10:7e:bd:22:93:6a:
69:6e:6a:55:21:c2:49:7c:23:e2:d7:02:e8:e4:b1:
fa:70:62:e0:b3:cd:8b:d8:7b:3b:95:54:4c:73:da:
88:c9:0b:ec:55:ce:4e:dd:97:fe:da:a0:27:b6:07:
78:e1:99:47:e2:2a:41:82:e9:ea:5d:b9:b0:4a:75:
c0:65:35:84:60:2b:d9:a8:e5:1a:d8:ba:93:6d:e4:
9a:e9:8d:3a:8b:13:44:86:0c:38:e5:1e:cd:29:fd:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:D9:E0:E3:FD:05:AF:D4:C9:E2:09:DA:C6:17:AC:FB:F5:D4:A0
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E118158EAEF711EC8AB1B912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:32:e5:d9:c8:2d:c7:fa:fd:79:5f:6e:40:99:b7:ed:a9:
6b:13:93:08:bd:82:2b:5d:da:04:5e:53:65:b5:97:ce:ca:b2:
00:34:f1:56:1e:e8:d6:84:df:45:b7:3c:6d:57:fe:cf:84:de:
dd:58:f7:64:3c:74:85:d8:9b:0a:32:b0:93:9d:47:27:57:bf:
fb:94:a0:a2:ff:ee:15:e0:46:6c:9e:00:04:44:c4:0f:47:f5:
df:47:5e:fe:1a:88:ad:8e:30:0f:da:51:15:89:63:5a:54:79:
ec:c0:06:df:27:94:4b:a6:ed:b4:95:a9:c3:05:5a:38:fd:1f:
74:b5:c7:2e:dc:57:f8:04:b4:26:ae:f7:5e:c1:da:9a:e2:2c:
47:05:b3:3a:f9:3a:e5:6b:6b:72:b7:b7:26:73:09:7d:c3:98:
6b:e9:16:90:5f:91:bb:0b:ab:4c:8e:ac:92:5e:c0:10:74:da:
87:b6:da:75:1a:79:cb:0c:24:84:46:8f:a6:b9:f8:11:26:1c:
54:85:83:50:6a:f9:1e:f2:ea:7d:d7:7c:09:32:79:fd:1c:c6:
56:82:68:e7:81:e7:94:7d:10:82:2b:30:13:2a:8b:e4:94:cd:
f5:ce:cd:f9:36:6f:d7:2f:7e:09:b5:1a:9a:70:10:2e:f2:60:
0b:15:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org