Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/45F198F234F111ED8BDEF522C4F9AE02.roa
File: 45F198F234F111ED8BDEF522C4F9AE02.roa (raw, json)
Hash identifier: D5XDsPfWA48mjR/1fPyb78AiEB7OMCjdsGPFlqtPsJA=
Subject key identifier: 82:8B:EB:ED:6C:9A:76:E6:53:19:E4:E7:2C:CD:C4:55:7C:48:C3:5F
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 0143
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/45F198F234F111ED8BDEF522C4F9AE02.roa
Signing time: Thu 15 Sep 2022 12:23:58 +0000
ROA not before: Thu 15 Sep 2022 12:23:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134806
IP address blocks: 103.185.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Sep 15 12:23:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6323195e-ef54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:e9:ac:68:52:3a:97:1e:24:31:83:6b:f2:
cd:5b:25:ef:f1:9c:85:c9:15:01:bf:80:fc:05:f0:
c6:b4:82:1a:2c:55:67:9a:5a:f5:46:98:5d:19:03:
2c:6c:52:2a:da:fd:e8:e6:88:af:1b:5c:19:e3:e2:
36:04:36:c0:7c:75:f6:54:1c:64:aa:bc:6f:1d:2c:
d1:24:8c:b9:c4:0f:75:be:fb:f3:9b:5e:9a:32:e9:
32:08:40:2d:75:ce:90:2d:47:05:6b:92:88:ae:be:
da:32:37:a8:56:f7:a2:96:59:df:d8:4a:e2:50:77:
b9:8e:fa:e0:bc:18:34:86:0d:f2:0e:f3:18:5a:db:
5e:41:41:83:ca:55:73:12:b4:8b:11:34:e9:8d:1e:
95:cf:7d:b0:87:d3:6b:58:64:cc:01:33:cf:f4:8a:
bf:2a:50:0b:ee:fc:f3:44:3a:02:51:10:e5:57:d0:
e3:cf:68:0f:ec:38:8d:2b:70:dc:43:52:d4:cd:59:
e6:12:17:35:9d:00:36:14:c9:29:93:91:52:af:1d:
f3:b8:09:0a:01:a0:45:07:ea:e3:ae:2e:9a:89:9a:
6b:5c:ae:ea:cc:90:e1:46:bf:75:1c:1f:29:f0:32:
2d:24:8d:3c:a9:2a:29:bb:c4:c1:fe:f7:9d:9b:c2:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:EB:ED:6C:9A:76:E6:53:19:E4:E7:2C:CD:C4:55:7C:48:C3:5F
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/45F198F234F111ED8BDEF522C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:41:bc:d9:49:fe:09:85:9f:0f:f3:a7:f8:d3:a1:40:db:09:
da:58:02:6a:dc:6e:d2:41:26:42:9e:b8:d2:4a:56:00:fc:16:
89:92:c9:99:9e:8f:d7:53:82:b3:03:a5:f1:36:38:dc:c8:71:
5f:f0:3f:70:42:cd:2c:77:fc:29:72:fe:85:d4:03:3f:ca:50:
99:b3:7a:10:d6:a1:39:f9:df:de:1a:40:e7:db:a6:1f:a4:4e:
ff:35:a4:f2:1d:64:c8:b8:4c:91:3f:6b:d2:6e:85:33:cc:4a:
dc:64:47:02:bc:5f:2e:26:9c:6b:43:26:26:be:8c:17:34:4a:
ff:ef:f8:ec:af:9b:bd:76:5f:05:d2:af:aa:14:7b:ad:b4:f2:
64:eb:35:dd:90:d0:5c:ba:b8:0a:c5:5e:4d:1d:cc:fa:31:d0:
af:39:ef:c7:5e:ab:f0:8c:d0:d3:c1:f1:2a:89:0c:de:c2:2b:
86:3f:58:cc:a3:91:c2:11:2f:5e:f3:7e:83:14:cd:52:32:9b:
50:bc:30:d9:f3:ad:dd:ac:21:80:57:b7:7e:1f:67:5a:21:60:
8d:b2:9a:59:39:b0:29:5f:55:9e:18:ca:5f:35:37:24:fd:a5:
fd:87:61:ca:0f:79:e5:93:91:f6:9f:65:e9:b6:ff:33:53:5e:
01:54:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org