Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/C0BB93D694DC11EC8E57E966C4F9AE02.roa
File: C0BB93D694DC11EC8E57E966C4F9AE02.roa (raw, json)
Hash identifier: pHiIh3NSS881UMWrsUmXaKvwwHziWXCIYOU0SzGHpEc=
Subject key identifier: 6C:10:EE:AF:8D:E4:4B:F1:AE:2B:62:77:B0:CD:65:C6:32:57:DE:8E
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: DF
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/C0BB93D694DC11EC8E57E966C4F9AE02.roa
Signing time: Wed 23 Feb 2022 19:32:23 +0000
ROA not before: Wed 23 Feb 2022 19:32:23 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 38264
IP address blocks: 103.174.194.0/24 maxlen: 24
103.174.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Feb 23 19:32:23 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62168bc7-6cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:b8:86:49:6d:d5:e4:75:05:97:87:a1:01:
52:d4:b3:fd:8c:90:fc:c3:1d:a7:92:ce:b6:65:93:
81:46:a8:a0:06:0b:40:86:3b:50:a4:ce:d2:07:d2:
b1:c1:6a:6b:ee:6d:b2:9f:64:46:aa:da:49:c8:28:
c3:63:50:31:f7:64:7d:79:8e:cb:eb:90:4d:ae:b2:
7b:c7:c3:bb:be:3c:8e:50:75:64:a1:79:71:54:4d:
cb:8d:fa:39:f2:bc:cd:f2:e5:2c:7e:05:2b:3f:e5:
4d:45:b3:65:1b:97:04:2d:d0:a8:aa:e8:ab:b0:d4:
84:7d:53:c5:c9:a3:91:5c:31:8b:d9:48:7c:d6:40:
85:8d:a1:73:99:52:8d:26:83:fa:d9:c8:d8:93:0f:
b2:b8:58:40:e3:e0:bf:85:a7:bd:f2:36:d0:3c:78:
ef:2c:96:76:4b:d3:db:e7:7e:c9:8a:31:1b:7a:28:
e1:a8:b9:71:ca:c6:54:05:12:f6:81:11:d8:70:f8:
c5:c5:c0:e5:2c:bb:aa:a8:bc:13:08:ac:03:a2:c9:
11:7b:4a:9d:a4:55:51:e4:05:bf:65:43:4a:c3:5a:
9b:92:85:e0:39:7e:17:b7:12:29:09:f4:07:60:4f:
9d:55:f0:59:b6:ba:23:f4:58:b4:cb:29:42:65:40:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:10:EE:AF:8D:E4:4B:F1:AE:2B:62:77:B0:CD:65:C6:32:57:DE:8E
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/C0BB93D694DC11EC8E57E966C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/23
Signature Algorithm: sha256WithRSAEncryption
85:69:53:55:07:51:ce:cc:29:9b:a8:01:ab:78:10:4f:c1:6f:
51:1b:50:07:7f:e3:18:68:1a:01:fd:f9:7d:8d:88:f2:20:59:
94:08:c8:d0:72:79:63:30:8a:42:2d:d2:9c:e0:90:4f:82:e7:
0c:e8:71:1a:33:65:c3:c7:13:1e:4e:18:5f:b6:56:9e:ab:d3:
da:4d:5c:04:94:95:b1:6d:c7:4d:3d:1e:20:17:d5:62:bf:07:
ac:82:23:5c:d9:66:f7:12:8d:0d:94:ba:44:b7:c5:37:41:5b:
14:34:a5:f3:c8:67:c8:14:dd:60:a9:3b:aa:16:72:0e:5d:a0:
3d:bf:0d:f2:49:9f:5d:de:a1:8d:00:43:01:86:31:0c:60:79:
e8:a3:bd:ba:4a:56:89:49:66:05:81:4c:3e:00:cb:3c:24:36:
00:b3:0c:88:47:a3:df:ed:7c:6c:f7:73:0c:01:f9:91:4c:1a:
bf:93:7f:dc:75:c9:02:85:75:f9:58:9b:d4:2c:7f:ed:9d:fc:
32:96:f4:40:cf:8d:59:6e:bc:5e:fc:a0:d0:5a:6a:fc:0d:b1:
52:82:f0:9b:7f:94:06:68:e1:c4:5c:e8:c8:bb:71:2c:69:94:
61:35:d5:9d:62:33:5a:15:2c:42:23:0a:8d:b9:5d:32:f1:db:
ff:4d:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org