Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/0BEDA07CD32311EC85B03557C4F9AE02.roa
File: 0BEDA07CD32311EC85B03557C4F9AE02.roa (raw, json)
Hash identifier: L2ar7VDAsGzzt56R6c0tTpgZf/RrtzE5VO0Kt7/YJMI=
Subject key identifier: 42:65:02:56:7B:24:C0:18:CC:62:04:52:45:18:3C:48:C1:B5:BD:51
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 021C
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/0BEDA07CD32311EC85B03557C4F9AE02.roa
Signing time: Sat 14 May 2022 01:13:22 +0000
ROA not before: Sat 14 May 2022 01:13:22 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24499
IP address blocks: 103.123.112.0/24 maxlen: 24
103.123.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: May 14 01:13:22 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=627f0232-b646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:47:62:c5:aa:af:42:c9:28:3e:e3:fb:f7:
4a:01:ab:51:cb:15:49:bd:ba:4c:03:12:ed:bd:fd:
14:2e:8e:88:4c:05:eb:c6:96:0d:d5:d2:3c:a5:f5:
e2:de:60:7d:4d:48:75:1b:44:21:0d:10:12:5d:d4:
ea:be:24:f5:73:71:8b:d0:4e:98:d1:bb:bb:d6:21:
35:af:a9:db:8e:6a:d9:d7:3d:ff:db:d4:b7:64:2a:
d6:9a:b0:35:a5:39:6b:46:a2:f9:f8:e4:90:77:f5:
4a:82:35:8e:63:7c:2c:21:a2:f4:8b:53:90:3a:84:
68:98:8f:37:8f:42:9c:73:8e:38:0c:36:ba:35:d7:
09:f4:9e:29:47:ec:c1:f1:6f:33:0d:38:6e:64:fb:
4b:18:ed:b1:90:6f:49:08:6c:58:48:ed:22:69:5e:
9b:6c:cf:7a:ec:bc:0a:4a:6d:ec:58:ad:72:b6:56:
81:87:53:3c:36:08:41:1e:a1:69:ef:ee:e8:fa:bb:
a7:7b:d5:a9:06:cd:c9:c4:e2:7b:47:e3:63:76:02:
65:a5:66:8d:fb:a7:28:bc:e1:69:79:78:bd:9b:b3:
77:6a:a9:f3:6b:41:40:d2:06:cc:6f:9f:92:c9:db:
34:e3:6c:5c:55:03:9c:e8:26:56:7c:0f:87:47:8a:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:02:56:7B:24:C0:18:CC:62:04:52:45:18:3C:48:C1:B5:BD:51
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/0BEDA07CD32311EC85B03557C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.112.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:ed:cc:1f:cd:db:2e:4a:d4:14:1a:4a:9e:9d:3a:26:d0:de:
7a:83:de:a6:3f:98:2c:f6:b5:9d:44:22:9c:20:d5:58:c9:f0:
cd:cc:a3:92:9b:68:7f:f4:17:02:88:91:2a:7d:b1:ce:c4:74:
12:f8:f1:f1:25:55:0e:37:a5:c6:02:3d:5d:72:7a:a7:7b:89:
5d:a2:56:16:47:7e:bf:2b:da:f6:b3:b3:94:b3:97:6a:dc:2b:
e1:22:cc:af:e7:a2:bd:05:cb:99:ec:77:9f:88:c3:ee:9d:0f:
53:89:36:b1:71:e3:58:fe:a3:db:dc:44:3d:db:c1:53:28:04:
25:c2:5f:26:5f:5a:0d:5b:c1:da:08:5b:b1:d3:a2:de:04:28:
f0:27:10:3a:cb:04:4b:81:bc:a1:67:9b:53:b2:d6:62:1d:78:
d4:47:61:a5:54:85:ac:0e:bd:44:dc:6e:bd:af:88:3c:6d:23:
de:95:25:43:b8:75:83:db:5c:16:9a:14:db:98:df:57:d7:4a:
d2:c0:87:1b:9c:57:10:3d:23:50:7f:cb:8d:18:c4:d1:95:41:
34:3b:59:8b:1b:09:54:4b:3f:2f:82:60:76:45:69:bb:86:1e:
4b:b4:69:ff:47:53:a0:bb:13:67:89:0e:fa:54:f1:0b:7b:d3:
76:50:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org