Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/79EA633C72E111ECA8A27922C4F9AE02.roa
File: 79EA633C72E111ECA8A27922C4F9AE02.roa (raw, json)
Hash identifier: 8itB6nIR16BVihHfth4Yc+lIeORzMHptgZmrAa9NCqg=
Subject key identifier: 30:11:FC:3A:00:85:ED:42:8E:9A:56:74:18:A7:F7:97:AA:05:4C:24
Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial: 11
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/79EA633C72E111ECA8A27922C4F9AE02.roa
Signing time: Tue 11 Jan 2022 13:22:08 +0000
ROA not before: Tue 11 Jan 2022 13:22:08 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 58689
IP address blocks: 103.178.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Validity
Not Before: Jan 11 13:22:08 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61dd8480-d475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:57:11:29:c7:26:76:74:fb:31:fe:fe:97:
32:65:6e:99:93:b7:c8:12:6a:57:39:ad:7b:fa:0d:
21:c8:05:30:e3:52:6e:d8:0e:f3:89:1a:ef:f0:83:
1d:03:c4:58:3e:cd:7f:c8:0c:e6:3d:e0:7e:ae:b2:
fc:a2:88:db:46:da:52:49:ea:f8:7e:82:74:23:0b:
4c:d4:d1:c0:3c:34:ea:53:5e:4c:25:00:8e:3b:44:
19:c6:d5:c5:59:11:eb:7f:0b:e8:a7:f6:6b:e9:3c:
b1:c2:34:0d:a1:30:d1:ea:fb:85:87:6a:07:65:bb:
d8:55:d0:29:fa:fe:04:f0:a6:b5:eb:b8:55:11:c2:
1c:18:79:0d:7f:6b:f7:56:1d:56:46:d3:6f:35:0e:
01:f4:3f:bd:7e:ab:84:ff:ca:8a:32:fd:42:6f:99:
5d:f5:2b:7d:41:55:53:90:69:94:ab:60:27:1b:d8:
6b:94:5d:69:9b:09:7d:56:70:3c:b1:a8:ff:63:34:
20:00:e5:60:1f:02:0d:9c:ad:a9:17:b8:ee:49:5c:
19:f5:3e:98:74:5d:16:a9:9b:04:ab:88:93:05:1b:
47:82:81:f2:0a:3b:c6:85:5c:6e:71:5b:43:e5:a8:
eb:ea:5d:e5:99:7b:a2:b7:ca:72:cf:e8:32:12:07:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:FC:3A:00:85:ED:42:8E:9A:56:74:18:A7:F7:97:AA:05:4C:24
X509v3 Authority Key Identifier:
keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/79EA633C72E111ECA8A27922C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.189.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c4:1e:d4:d1:65:b5:1f:82:d2:52:b1:9e:fb:34:b0:3d:22:
e2:d7:ed:fd:47:20:8d:bd:4a:94:7c:f9:fa:c0:69:cf:b5:e7:
82:dd:ff:14:6c:61:74:0e:6d:87:16:10:82:08:9b:f1:e0:bb:
d0:bf:1b:f3:9f:2f:14:a1:96:8d:64:73:1d:f8:6d:6e:10:26:
51:c3:f1:e0:11:a3:87:ec:85:fa:d9:f2:9b:d1:5b:c8:04:ad:
62:b1:6e:74:46:91:cd:05:a5:f3:da:eb:ee:b1:ea:25:03:ed:
0a:8c:b9:3e:ec:93:ed:0d:74:76:1a:f4:15:bd:fa:73:3c:33:
d3:03:59:ec:58:61:04:d2:80:54:4d:1b:d0:59:ad:90:0c:33:
5b:90:6a:64:a8:83:7a:1a:ad:1c:55:8e:63:53:67:f9:05:3d:
66:48:90:b6:5f:c0:58:f5:9d:1a:87:eb:3b:22:01:6c:a0:2a:
b4:d0:4b:89:60:42:83:b9:03:57:de:d4:e7:47:0e:7b:6f:cf:
1e:08:90:65:06:7b:df:eb:5e:54:7a:5a:9c:b9:b4:69:b7:f9:
20:ec:5e:58:e7:f4:76:37:c9:4d:13:a1:36:e1:27:dc:2e:28:
30:7f:3d:c7:9b:61:e1:6c:2b:ea:c2:60:52:1c:b4:a8:b2:6f:
5e:27:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org