Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/64654738B5E411EDA143B259C4F9AE02.roa
File: 64654738B5E411EDA143B259C4F9AE02.roa (raw, json)
Hash identifier: 7KZhNdWjMUiRj1ArOwwmAqgK3lYbOUfiARSyAmVt54s=
Subject key identifier: A4:F8:65:9E:6F:31:6A:4F:46:06:EF:85:7C:8B:F6:C1:33:E8:34:4A
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 0AD3
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/64654738B5E411EDA143B259C4F9AE02.roa
Signing time: Sun 26 Feb 2023 14:46:47 +0000
ROA not before: Sun 26 Feb 2023 14:46:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139600
IP address blocks: 103.137.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Feb 26 14:46:47 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fb70d6-9110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:12:52:62:ac:db:2f:0c:74:8c:75:44:79:
51:79:38:79:61:00:7d:e6:8d:09:ca:28:5d:18:f0:
94:0d:80:e9:4c:9b:d9:62:34:ee:1d:d4:32:ba:0f:
45:34:75:cd:a5:95:34:99:f5:11:e1:26:2a:d3:7a:
ae:3c:c9:38:25:a3:47:03:18:8b:5c:0a:fa:5b:ee:
76:48:e6:80:3f:51:a1:ba:c4:48:75:27:c8:9c:7a:
fb:cf:1c:0a:35:4f:9f:46:71:be:35:c6:ee:80:48:
33:be:16:5b:f0:8e:15:66:ea:98:c5:a0:77:40:41:
b7:bc:1b:ba:d1:32:55:f4:31:9d:57:20:0e:50:42:
af:9d:0f:de:b3:b8:25:e0:4c:a2:a4:77:37:a5:c8:
3c:bc:c2:79:c2:06:9f:e5:41:39:9b:90:36:89:ce:
d7:19:2b:ed:a5:a8:04:2e:0a:ac:f5:55:f0:04:33:
ef:de:4b:b8:40:82:37:69:f6:42:c8:3b:8f:cf:9c:
c3:09:70:cc:b9:25:a4:f2:56:09:7c:74:08:59:53:
a9:fd:d6:3f:e1:be:88:5c:f7:f5:50:1d:5c:03:b9:
9b:f7:66:87:ef:3e:6e:42:bd:27:ed:09:ce:9e:06:
c3:84:36:11:39:c2:0b:2b:56:65:66:89:1d:da:17:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:65:9E:6F:31:6A:4F:46:06:EF:85:7C:8B:F6:C1:33:E8:34:4A
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/64654738B5E411EDA143B259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.163.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:9f:36:a8:0f:cd:2d:bd:c1:e3:31:8f:8d:82:83:8a:c8:5e:
b2:fe:ee:c1:b7:40:0d:b4:e0:ba:2b:d9:17:06:cd:1f:e7:d7:
f4:df:42:73:12:8f:b4:e0:d1:41:dd:86:42:62:ca:24:5e:e9:
83:38:99:37:be:e9:31:fc:ed:7a:96:e9:3e:88:3c:86:9d:63:
34:5e:e5:bc:81:f1:c7:0c:81:cc:55:e6:19:9d:62:73:3e:1e:
c8:03:4a:69:ea:5d:96:05:df:7d:91:2a:ac:af:b8:96:0c:13:
d5:5a:77:59:39:48:3f:49:1f:d6:db:df:e2:6d:32:ea:5c:d7:
12:58:90:d9:44:39:ab:15:dc:20:eb:b7:3b:dc:f5:05:5c:3e:
1e:dd:3a:f5:5b:65:fd:b2:59:c4:4b:36:d2:58:38:fa:ca:50:
d2:16:d5:9c:c7:c9:89:69:8d:f8:b4:6d:1d:cf:24:92:c1:d5:
a1:d6:99:f7:33:a4:05:34:87:ae:59:9c:e5:cc:65:ca:cb:dc:
81:13:22:5c:b5:4d:1e:0d:cf:7c:21:20:0e:d2:05:7b:30:a3:
1f:53:e3:a9:69:9a:38:e9:29:f7:ac:a4:36:1b:35:b4:83:f3:
b2:d9:67:4d:dc:21:18:4c:bb:05:e7:66:37:15:8a:34:23:cd:
d1:2f:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org