Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/7568654858B511ECB3E2984AC4F9AE02.roa
File: 7568654858B511ECB3E2984AC4F9AE02.roa (raw, json)
Hash identifier: EUpOj916t4kYjL2scN1SDK5oRjA609IFRxcuxzqZUNg=
Subject key identifier: 71:B9:3B:BA:78:75:14:11:BE:61:CD:B4:CC:49:20:25:C3:5D:E9:17
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 0196
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/7568654858B511ECB3E2984AC4F9AE02.roa
Signing time: Thu 09 Dec 2021 06:01:32 +0000
ROA not before: Thu 09 Dec 2021 06:01:32 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 139300
IP address blocks: 103.167.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Dec 9 06:01:32 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61b19bbc-bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:1e:cb:46:c0:32:ce:05:3e:5c:15:a2:71:
d8:f1:d2:53:d1:9b:5a:64:2c:ec:06:6d:6e:24:7d:
89:ab:a8:5f:a8:8d:78:6b:d4:90:40:25:32:e2:b6:
6f:7e:7f:f9:8d:1c:37:6a:5e:ff:74:86:a6:73:20:
bd:b9:e8:54:a4:43:5c:0b:c8:6f:1c:59:cc:75:0b:
a1:71:54:44:ac:da:49:21:ad:85:50:64:75:97:a3:
1d:63:48:bc:85:5f:a6:da:f6:fb:bc:69:67:8c:32:
81:74:82:26:1e:72:d8:dc:41:ab:f8:70:df:81:76:
91:46:0a:ab:7e:57:70:56:53:9c:2d:b5:ef:f0:cf:
a3:30:d4:26:91:6c:07:42:d7:92:1f:d5:ba:ba:52:
20:72:7a:72:5a:95:37:95:fe:e3:f9:2a:a9:7a:14:
60:b8:e2:fb:37:e2:59:e1:ca:f0:18:53:b5:4a:d3:
2c:9e:fc:a4:2e:70:9f:14:f8:57:7a:d3:33:39:48:
be:cb:36:37:9e:9c:e8:61:8d:0b:da:86:23:ea:d7:
23:2a:63:a6:e0:5e:bd:24:83:08:6f:c7:40:5e:de:
86:2f:6d:05:b6:0d:56:56:8b:3b:61:4b:28:60:18:
88:1f:86:c5:81:5b:7e:6c:5d:93:7c:78:d2:5a:01:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:3B:BA:78:75:14:11:BE:61:CD:B4:CC:49:20:25:C3:5D:E9:17
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/7568654858B511ECB3E2984AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:97:0a:71:f3:91:fd:5d:48:85:18:ce:4e:bd:9d:1a:7e:c9:
a6:15:bc:bb:94:ee:78:9c:be:4f:cc:b7:58:08:89:ba:c3:e8:
e2:07:4f:35:d6:08:3d:68:2f:ff:87:c2:1f:a2:f7:b5:eb:58:
12:c0:a5:7d:1e:41:5a:fb:b4:c8:c3:46:b4:d8:1f:7a:02:40:
87:95:21:e4:7a:70:85:cf:e2:33:31:e6:cf:88:80:18:d2:12:
97:56:68:76:52:2b:57:eb:f3:af:60:3e:db:76:4b:c6:82:ed:
18:b4:36:34:b0:3a:c2:e4:7b:1b:f6:27:26:1f:8e:36:9d:ae:
46:74:7f:80:17:81:a0:b2:18:e5:13:5c:9e:03:bc:de:00:09:
f8:b9:a9:09:4b:cc:ef:f3:e7:46:7b:b2:fc:07:a5:fb:f4:92:
f4:38:41:6e:db:cc:05:9e:85:cf:c0:b9:d4:36:fa:3b:12:b5:
1a:e8:fd:ef:5c:2e:12:37:fe:6a:b2:44:43:3d:f6:59:ab:fa:
7f:65:ea:d0:db:2c:75:23:8d:db:5a:c1:05:08:cd:26:ed:4a:
1d:72:f4:2f:5c:88:f8:41:c1:be:a7:91:75:4f:26:e5:68:3b:
6d:23:d2:b9:68:64:07:e1:33:67:e3:ee:2f:4b:4a:db:6d:0a:
be:dd:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org