Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/959426F8F69511EC90A47215C4F9AE02.roa
File: 959426F8F69511EC90A47215C4F9AE02.roa (raw, json)
Hash identifier: Hn2qr8pxWJvE7VOzBRiY5nKtUfe3zpsut1AViIeU3R0=
Subject key identifier: 0F:5A:21:45:07:CB:B7:91:1B:4F:03:FB:A3:7C:C4:77:51:77:67:22
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 010F
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/959426F8F69511EC90A47215C4F9AE02.roa
Signing time: Tue 28 Jun 2022 03:51:26 +0000
ROA not before: Tue 28 Jun 2022 03:51:26 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 134428
IP address blocks: 103.176.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Jun 28 03:51:26 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62ba7abe-7a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:91:34:42:2a:97:23:27:c8:bb:47:c2:e9:
ba:72:b9:65:a2:55:43:d4:a3:a3:b8:43:bb:0d:69:
6a:04:1b:c3:29:04:9e:12:d6:ef:af:62:b9:d1:6b:
c1:25:45:25:44:70:0e:ac:44:72:e3:76:aa:aa:ef:
9e:7a:db:02:8b:b9:b0:f5:70:15:23:98:6f:4e:16:
ab:9e:ec:96:bb:88:88:92:3f:9b:57:c0:a1:f1:cc:
1b:76:26:b2:a6:d0:6c:d1:60:8d:44:ea:b2:be:81:
61:a5:3a:77:88:47:b2:24:59:c3:c9:d3:d0:76:7a:
cc:0a:da:61:bf:46:b6:55:86:46:4d:4b:2f:3a:31:
a6:fe:4b:e5:21:7e:2a:0a:62:0f:6a:32:ce:aa:ef:
d3:34:dd:a5:d7:f0:af:e7:5a:33:8f:9b:ba:f2:4e:
e5:d6:6d:9e:59:02:c5:7a:f7:bc:c2:c5:ef:ee:28:
9d:c8:f3:9c:19:a8:44:96:90:28:02:b2:c5:b6:2d:
4d:47:b0:b0:06:ee:bd:65:c8:bc:3a:1b:17:ac:cc:
0e:39:3c:56:ed:92:d3:44:d6:50:d7:20:25:4c:16:
29:76:c9:9b:af:1c:f7:72:32:b8:88:9d:59:b5:92:
b0:7e:b8:ff:0b:ac:bc:99:64:77:83:6b:e3:6b:fb:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:21:45:07:CB:B7:91:1B:4F:03:FB:A3:7C:C4:77:51:77:67:22
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/959426F8F69511EC90A47215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.206.0/24
Signature Algorithm: sha256WithRSAEncryption
af:eb:6c:47:9b:e6:60:92:22:36:50:9d:7b:27:1e:61:ac:7d:
c6:60:37:5a:1f:a6:5f:b4:37:dd:65:fd:73:05:ef:de:f7:44:
cd:74:53:d7:cd:9a:f0:48:c0:89:b5:90:90:8a:62:e0:2f:5b:
e6:cf:bd:32:9c:a3:d4:87:7b:10:ac:3e:32:95:2e:8c:34:46:
54:ed:8d:34:c8:ae:d0:a3:65:3c:eb:9d:ff:11:f0:9b:c0:88:
08:92:e4:b9:3e:a0:e1:89:c5:64:86:78:42:2a:6a:50:57:65:
69:27:67:5a:18:30:f3:8e:0a:5f:e4:9b:72:0e:f5:01:61:9a:
01:9a:03:4b:16:c5:d5:a8:a2:53:c6:0e:fc:52:4b:e7:24:10:
07:e4:da:12:0b:00:aa:c9:7a:9d:f7:73:25:e8:37:8b:35:b9:
6d:df:f9:79:54:26:88:83:3e:e1:8e:6f:c3:04:45:28:09:f9:
3f:86:fe:a3:a3:84:cb:8c:c6:d1:07:ff:0a:b3:ac:5e:82:a5:
36:a6:07:47:bd:f4:5e:a3:57:7f:b5:bc:ea:26:b0:ca:1d:75:
4e:1f:79:84:3c:c8:5a:aa:2d:84:a0:ae:d2:3f:db:f7:da:7d:
6b:d4:c5:92:42:7c:51:00:2d:ef:dd:d2:0b:38:81:09:55:41:
1a:84:c3:8c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw
M0Q1NTA3MzcwHhcNMjIwNjI4MDM1MTI2WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJhN2FiZS03YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqqRNEIqlyMnyLtHwum6crllolVD1KOjuEO7DWlqBBvDKQSeEtbvr2K50WvB
JUUlRHAOrERy43aqqu+eetsCi7mw9XAVI5hvTharnuyWu4iIkj+bV8Ch8cwbdiay
ptBs0WCNROqyvoFhpTp3iEeyJFnDydPQdnrMCtphv0a2VYZGTUsvOjGm/kvlIX4q
CmIPajLOqu/TNN2l1/Cv51ozj5u68k7l1m2eWQLFeve8wsXv7iidyPOcGahElpAo
ArLFti1NR7CwBu69Zci8OhsXrMwOOTxW7ZLTRNZQ1yAlTBYpdsmbrxz3cjK4iJ1Z
tZKwfrj/C6y8mWR3g2vja/uWQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA9aIUUH
y7eRG08D+6N8xHdRd2ciMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG
QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M2MDYvN0M4QjEzN0E4RkM5MTFFQzgxNTVEQjYxQzRGOUFFMDIvOTU5NDI2RjhG
Njk1MTFFQzkwQTQ3MjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsM4wDQYJKoZIhvcNAQELBQADggEBAK/rbEeb5mCSIjZQ
nXsnHmGsfcZgN1ofpl+0N91l/XMF7973RM10U9fNmvBIwIm1kJCKYuAvW+bPvTKc
o9SHexCsPjKVLow0RlTtjTTIrtCjZTzrnf8R8JvAiAiS5Lk+oOGJxWSGeEIqalBX
ZWknZ1oYMPOOCl/km3IO9QFhmgGaA0sWxdWoolPGDvxSS+ckEAfk2hILAKrJep33
cyXoN4s1uW3f+XlUJoiDPuGOb8MERSgJ+T+G/qOjhMuMxtEH/wqzrF6CpTamB0e9
9F6jV3+1vOomsModdU4feYQ8yFqqLYSgrtI/2/fafWvUxZJCfFEALe/d0gs4gQlV
QRqEw4w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org