Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/2DCA5FD2B7DA11ECB2295064C4F9AE02.roa
File: 2DCA5FD2B7DA11ECB2295064C4F9AE02.roa (raw, json)
Hash identifier: syLnaIyLjpP7BYai1SkY+qTaUybPieSoR9DOqMeNFd4=
Subject key identifier: 7F:A5:10:51:80:88:0E:A4:41:6D:2D:0C:1F:FA:C9:5E:8E:B9:FF:4C
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 02
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/2DCA5FD2B7DA11ECB2295064C4F9AE02.roa
Signing time: Sat 09 Apr 2022 07:53:44 +0000
ROA not before: Sat 09 Apr 2022 07:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138548
IP address blocks: 103.185.24.0/24 maxlen: 24
103.185.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Apr 9 07:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62513b88-8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:2a:8c:e0:63:68:22:78:06:df:64:62:45:
cf:e7:6f:f1:43:dd:6f:f9:10:75:5a:c0:6c:1d:de:
d8:24:0e:59:df:70:ea:65:13:50:1c:f1:8f:f9:e5:
ea:31:dc:f1:50:12:25:81:4a:ec:c9:e5:b4:36:01:
78:77:b9:d7:c0:bb:be:02:3a:33:7d:aa:b4:f2:02:
59:94:36:d1:b9:33:02:ef:36:f2:1d:9f:bb:ee:8f:
6d:64:06:68:70:de:04:d0:05:23:c8:ce:60:4d:fb:
41:56:b9:9f:b3:6e:1f:59:98:75:87:de:e0:f3:e6:
93:69:d4:4b:b9:f9:d6:39:1b:bd:76:3a:10:d1:98:
07:9b:46:0b:1c:94:05:04:fa:c3:db:f4:28:f0:82:
bb:8a:d5:76:8f:aa:37:e9:c4:c8:e0:d2:f0:aa:f8:
ab:70:7b:df:65:f8:50:73:23:7c:bc:72:6e:8b:f2:
7d:47:88:d6:58:3b:59:ee:5b:ec:ac:64:d6:30:1a:
2e:17:ed:4d:62:20:90:69:25:cc:9a:f8:66:04:7c:
0f:53:1d:ef:50:20:88:15:58:5a:e8:94:6c:37:e7:
a8:6c:dc:e8:e0:d1:89:94:88:53:70:c2:55:05:41:
b1:b3:7c:7b:f3:fb:97:a7:4c:6f:75:1e:fc:03:07:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:10:51:80:88:0E:A4:41:6D:2D:0C:1F:FA:C9:5E:8E:B9:FF:4C
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/2DCA5FD2B7DA11ECB2295064C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.24.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:cd:da:08:f0:92:f8:9d:ae:d6:6c:fe:fb:74:8b:5e:d1:de:
0e:4f:e2:57:af:33:17:56:2b:0d:a3:a7:52:21:d1:25:68:b7:
59:b1:a1:76:23:c2:5e:7f:34:13:f1:7a:dd:fc:83:42:59:7e:
6b:63:fc:71:8d:c4:da:3c:52:5a:34:ab:30:8c:09:ad:74:4a:
b8:e6:9b:9c:fb:51:0d:77:9c:f3:7a:0f:a3:21:a2:20:22:5a:
3c:81:84:5b:63:32:32:3c:06:97:34:05:e8:31:d0:73:22:c0:
f7:01:93:72:eb:dc:04:66:1a:04:13:ae:a7:ce:4d:c2:1b:ec:
db:6e:03:03:5f:a6:50:02:e9:3e:b8:59:61:f3:81:d7:36:b2:
8b:b6:d2:52:df:d0:0d:8a:41:ee:fb:eb:8e:d1:a5:f4:c9:67:
10:fc:a0:3f:03:77:c4:1d:42:ec:f1:03:a5:20:6d:41:00:eb:
0a:a6:31:b9:3a:55:94:48:84:96:44:2b:e7:81:ef:e3:82:d6:
90:81:21:cf:b8:04:2d:34:6c:4d:f2:5e:0a:46:9d:32:7e:78:
f0:2c:f8:48:b7:06:8c:5b:10:25:7f:85:87:47:47:2a:23:98:
e4:ad:c1:71:ce:f7:cc:08:90:e4:a1:52:f6:d6:cf:24:64:f9:
45:72:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org