Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/0A217DACC22211ECB9FFB964C4F9AE02.roa
File: 0A217DACC22211ECB9FFB964C4F9AE02.roa (raw, json)
Hash identifier: 1YBRtfCEVEkVuj2buEKKnJHUMy/1JUTSuDba7y6Q4oE=
Subject key identifier: AA:A9:84:4A:35:17:2F:21:95:70:68:20:4A:D7:C1:3D:6E:EF:8E:0B
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 0126
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/0A217DACC22211ECB9FFB964C4F9AE02.roa
Signing time: Fri 22 Apr 2022 09:53:20 +0000
ROA not before: Fri 22 Apr 2022 09:53:20 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 210777
IP address blocks: 103.176.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Apr 22 09:53:20 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62627b0f-b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:e7:95:bf:31:46:b0:f6:29:4c:c4:42:4a:
52:b0:64:37:85:1a:95:5d:20:57:d4:da:6c:7f:ad:
3a:41:6e:33:8d:b1:00:52:ac:a4:87:01:51:4d:2d:
45:22:cb:e8:af:43:19:c7:e6:12:23:48:06:f0:16:
82:87:d0:76:dd:da:b3:c5:3c:17:d9:97:44:56:51:
f6:2e:0f:a4:a3:cf:72:d4:6f:df:11:31:91:c6:be:
fb:82:ad:0c:8c:05:25:ee:00:6d:23:16:a5:c4:25:
00:13:00:00:07:3b:d4:67:8f:6e:5d:8c:42:0c:4f:
79:68:93:31:6f:94:0a:6f:ec:74:0e:02:83:15:17:
42:84:9f:18:d9:f3:11:6b:69:68:44:83:b3:3d:ca:
c0:21:f9:94:32:25:9f:e2:b6:8f:0e:e5:e0:64:a2:
40:6c:0f:2c:1d:7f:40:c7:2d:84:1c:db:fe:62:81:
82:38:51:37:69:10:4b:cd:c3:dc:df:bb:93:6c:d9:
0e:25:89:52:1f:a9:de:9f:08:79:97:08:d9:19:d1:
52:91:7f:7f:10:cd:c1:8c:44:3d:c1:ad:be:85:26:
4b:e5:1a:f4:f2:aa:3f:84:fc:ad:83:e4:60:c6:a0:
aa:55:ff:c9:90:ef:dc:61:07:96:30:30:27:89:2b:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:84:4A:35:17:2F:21:95:70:68:20:4A:D7:C1:3D:6E:EF:8E:0B
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/0A217DACC22211ECB9FFB964C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:92:cb:24:7e:c6:13:a6:30:0c:f3:8e:39:d4:99:4a:95:d1:
9f:f3:52:42:95:fa:4d:85:17:5c:ee:b8:d4:87:da:44:ba:55:
16:c3:9a:e1:04:49:85:bc:54:e9:2d:80:0b:6c:e2:c4:d9:31:
49:88:5b:ee:24:1a:87:33:62:1b:08:c6:07:07:4c:f7:ae:aa:
8f:75:04:24:16:75:a9:a6:bb:a5:34:d6:b4:fe:40:a2:24:97:
da:53:17:6d:94:90:e3:0c:15:87:55:a3:b9:c3:f8:be:a3:3a:
42:f7:83:93:e2:48:c2:70:c4:45:60:ac:e9:c8:29:e2:9a:7a:
38:93:d0:c2:d3:59:c1:83:e0:8e:0e:e9:7b:f1:91:fe:97:bf:
d3:eb:24:68:5e:e6:99:39:57:a3:66:55:56:84:f1:2e:ba:a9:
c6:e7:44:f2:64:20:80:7b:cf:6d:97:b1:ec:96:79:cf:3d:0d:
4e:8d:95:0a:d7:1b:70:c6:be:a5:03:2f:91:9f:ae:2d:82:da:
d7:a9:72:53:bc:38:60:c5:7b:cf:7c:2c:0f:68:a3:69:b8:61:
f6:b0:b2:6c:80:77:23:5b:26:14:42:f7:85:f5:e3:5b:c8:1c:
de:76:bb:31:9e:d7:e6:e1:35:55:32:c7:30:86:be:24:57:b7:
6a:77:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org