Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/0ADB7F9893E411ECBBA7BE28C4F9AE02.roa
File: 0ADB7F9893E411ECBBA7BE28C4F9AE02.roa (raw, json)
Hash identifier: eXHDaHhgk3+SoX2fRBiZ5X6OE38yYT9+xPr7s4zWNLA=
Subject key identifier: 79:69:3B:EE:6D:8E:DA:41:18:66:0B:3F:F1:08:E2:21:47:FC:A2:53
Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Certificate serial: AB
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/0ADB7F9893E411ECBBA7BE28C4F9AE02.roa
Signing time: Tue 22 Feb 2022 13:33:39 +0000
ROA not before: Tue 22 Feb 2022 13:33:39 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 10103
IP address blocks: 103.177.248.0/24 maxlen: 24
103.177.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Validity
Not Before: Feb 22 13:33:39 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6214e632-dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:3a:52:8f:b5:1a:a3:3f:73:d1:74:4f:c9:
27:f0:e7:c6:89:ec:07:8a:a7:24:d2:51:77:cd:32:
23:27:ed:2b:f2:5e:2c:36:2b:43:40:a7:07:73:51:
80:60:43:b3:ae:b6:a1:5a:80:d6:83:e9:61:12:51:
c7:a3:4b:4b:76:da:4b:d5:ef:4c:49:02:71:37:2a:
f3:d2:ac:2c:b3:ef:a8:b4:24:86:c3:cb:2f:27:55:
40:9d:f3:72:a2:c8:5e:63:74:1b:e1:ed:29:d7:d9:
74:3f:cb:93:cc:13:71:7e:7e:d4:07:cb:f2:c7:56:
6d:41:b6:0f:d0:6c:44:71:01:ab:83:95:92:db:df:
e3:a0:27:ea:14:5e:af:93:a3:6d:70:81:bd:96:02:
d6:19:10:3a:fe:c7:b8:47:80:72:95:b3:b2:2b:26:
a8:cf:1a:a0:07:a7:1d:c0:8a:6b:26:57:69:be:a9:
2e:56:32:01:a4:bd:66:23:f9:58:a2:2e:bd:2c:b4:
9c:14:4d:c4:9d:bb:e4:ba:49:6d:d8:6f:90:4e:a1:
0a:a3:92:0d:eb:7a:1a:ae:db:67:94:7c:c3:ce:54:
e1:4c:9f:cf:b9:c6:a7:e6:ce:d0:07:7c:03:0a:9f:
fc:b3:51:76:a6:c7:b0:d9:1f:6e:fc:c2:ac:e2:3b:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:3B:EE:6D:8E:DA:41:18:66:0B:3F:F1:08:E2:21:47:FC:A2:53
X509v3 Authority Key Identifier:
keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/0ADB7F9893E411ECBBA7BE28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
90:fe:00:d4:cd:35:c2:ef:97:72:73:7d:a0:f0:e2:90:cc:52:
bd:19:09:97:15:c9:53:36:0d:4f:ed:f3:be:5f:f6:e1:35:84:
1d:72:47:21:3b:e5:7f:a1:d8:b0:c3:8b:a9:71:97:d0:c6:fa:
6e:21:0b:cd:d1:4d:6e:42:8a:a6:b5:94:9f:54:c6:7c:af:f2:
ea:4b:b0:64:46:14:8f:30:22:16:4e:19:09:38:44:8d:d3:70:
93:4d:55:c5:9e:f7:18:d7:a5:4d:b1:ef:c0:fe:4e:d4:fa:24:
f9:62:e7:c5:82:aa:59:f5:3d:05:c3:e5:f4:b5:e6:0f:20:65:
50:94:e2:d7:e6:93:7c:30:c0:84:e8:cc:62:ff:18:49:66:46:
20:53:d3:a9:21:16:de:ca:3a:f9:51:12:b6:14:f0:30:f0:a8:
ab:b5:29:be:2f:79:40:5a:29:12:fa:f2:10:3a:4b:80:cc:41:
c7:a0:75:bc:44:4e:0c:40:be:95:fc:ea:f5:05:ee:e0:23:bd:
26:cc:39:e5:2c:04:53:87:1e:c3:23:86:52:e2:61:53:fd:45:
9f:67:ef:0a:91:c5:8f:27:7f:cd:a5:89:4d:8b:69:a9:ce:c8:
90:33:8e:51:31:b2:be:42:db:f3:a3:5f:05:55:de:37:49:70:
2e:6e:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org