Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/759846F8946711ECAD0F6764C4F9AE02.roa
File: 759846F8946711ECAD0F6764C4F9AE02.roa (raw, json)
Hash identifier: hJePU2HAd7MI6oZdmo7vGwZeVK4K/Jx+0R2OA57H7Gg=
Subject key identifier: C7:B1:E4:40:90:44:37:42:0C:EF:67:E9:70:65:F5:0C:4D:2D:D3:F0
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: D9
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/759846F8946711ECAD0F6764C4F9AE02.roa
Signing time: Wed 23 Feb 2022 05:33:09 +0000
ROA not before: Wed 23 Feb 2022 05:33:09 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 149280
IP address blocks: 103.174.194.0/24 maxlen: 24
103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Feb 23 05:33:09 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=6215c715-b93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:6c:27:86:11:3a:6d:8f:fb:a2:e9:bd:2c:
78:62:02:be:35:db:ed:e2:45:69:07:70:26:1d:83:
f1:b6:04:71:ee:c1:b4:c8:0d:6a:89:08:97:36:5f:
e6:aa:56:44:0e:41:6a:e3:c5:3c:9f:b9:78:ec:c8:
33:8e:62:ff:77:75:5f:8e:25:c8:05:e1:ce:87:ec:
93:25:1c:90:f6:20:84:88:d5:2d:f5:8f:36:33:24:
3b:49:2a:94:d9:4d:2e:20:d3:62:b3:4e:cb:60:e8:
73:ee:f9:13:8c:0a:61:11:1e:39:af:90:e6:32:74:
d2:81:a7:d2:e2:51:75:19:3a:0d:2a:16:18:98:3b:
cc:23:f9:7d:5a:69:ca:ad:e4:1c:14:e8:32:28:23:
8b:4a:2c:f4:28:25:e2:eb:99:76:ba:9c:3b:e6:ff:
c0:25:f7:65:df:0f:3a:3e:a5:2d:1c:6a:6a:dc:5d:
78:13:d9:09:25:f7:4d:a1:cb:db:c7:3b:e4:80:66:
f7:f9:f3:d2:ed:e7:93:12:35:30:ba:bc:a2:5d:c1:
d2:bf:eb:06:15:b8:48:9d:a1:60:33:06:5e:0c:35:
12:23:05:29:1b:51:d6:ca:90:ac:c6:78:dc:68:04:
0a:7e:1b:d4:32:43:94:c8:b3:aa:8e:9b:28:43:6f:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B1:E4:40:90:44:37:42:0C:EF:67:E9:70:65:F5:0C:4D:2D:D3:F0
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/759846F8946711ECAD0F6764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ca:0a:9c:71:c9:d1:ad:1c:02:bf:c7:31:a7:ee:e5:0e:8b:
39:81:f6:63:02:bc:8f:c1:6f:ce:5d:85:c9:d6:5f:d9:63:bc:
9a:bc:9c:a9:8f:dd:be:22:62:67:8a:11:15:53:b3:33:47:7d:
88:26:19:45:23:4b:3f:5e:ab:8f:96:43:53:8c:56:f7:bf:23:
54:d3:5c:6a:15:46:3a:44:8c:e9:6f:39:d4:e6:a1:0b:fc:8e:
b4:63:c5:9a:13:e2:9b:aa:02:52:b3:40:5f:39:2b:83:fd:74:
e1:bb:ca:87:5b:79:a4:a3:8f:9a:b8:d9:a2:48:d2:5d:07:84:
ac:11:a7:86:0a:00:ce:50:3f:07:d0:b5:2b:0f:6d:d6:b2:8c:
d5:f3:89:6b:5e:62:78:e1:98:a4:d7:12:40:eb:9a:b9:9d:f0:
55:fe:a2:db:b8:36:9f:e3:65:45:25:77:4e:ca:59:91:bc:18:
20:14:fd:0c:08:4f:c4:a8:3b:dd:dc:96:ab:42:ef:92:46:11:
2c:40:cd:fe:13:c6:fd:24:f6:c1:3f:af:4e:2c:55:04:bc:e0:
75:cf:b7:1b:da:7d:03:ef:c2:e4:f6:eb:fc:4d:15:62:e5:24:
29:5d:fa:4f:e5:d4:be:47:8f:95:0c:92:76:1e:83:13:5e:cd:
5d:9c:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org