Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4979658E966411ED9ED6DC45C4F9AE02.roa
File: 4979658E966411ED9ED6DC45C4F9AE02.roa (raw, json)
Hash identifier: W4MY/P+0V1UWZEkbys5jXSPgkFiyEK1ma1PB40SCImw=
Subject key identifier: A7:8E:C5:CA:EF:8C:EF:D2:1E:AE:2F:05:23:FD:F7:CA:B5:31:16:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 634D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4979658E966411ED9ED6DC45C4F9AE02.roa
Signing time: Tue 17 Jan 2023 12:41:39 +0000
ROA not before: Tue 17 Jan 2023 12:41:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149181
IP address blocks: 103.177.250.0/23 maxlen: 23
103.177.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25421 (0x634d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 17 12:41:39 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c69783-219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:8f:1f:a1:8a:32:76:70:70:ab:8c:a3:82:
25:ca:ff:ab:f6:23:1c:43:4a:5c:80:79:8f:9e:4e:
ac:a2:08:72:c4:29:59:15:f4:c5:a0:8a:95:46:35:
50:98:16:88:03:92:b8:59:42:97:01:60:e9:94:5e:
a0:e6:7c:9d:24:76:9f:67:76:d6:8f:fe:0e:28:f7:
b9:bb:02:8a:e8:2b:78:f6:70:86:b9:b4:8e:d9:85:
f5:44:a2:10:49:36:66:19:63:19:7d:7f:61:4f:d1:
70:2d:b2:c9:6e:55:a3:95:79:11:ae:cc:37:ba:4c:
a6:76:3d:41:8e:87:89:ad:dd:2d:30:bd:17:13:99:
84:6b:b5:46:98:e0:a2:1c:0e:56:be:d4:de:d6:c2:
ba:99:92:f2:56:b8:17:7e:b4:95:97:8f:56:01:e3:
06:a5:85:f8:f6:8d:00:7a:30:21:6f:03:3a:97:c8:
94:75:ce:1e:91:34:86:0f:ea:53:a5:2d:12:96:dc:
e8:cd:37:8c:f3:75:71:82:c0:1e:15:51:e5:fc:9f:
19:24:64:ac:4e:f3:ae:46:0b:cb:45:6c:bb:64:77:
51:88:69:7d:e4:af:bf:e1:59:78:49:4c:a0:d6:2a:
9e:29:2d:3b:4a:4a:71:f9:4b:4e:9a:59:2c:b1:87:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:C5:CA:EF:8C:EF:D2:1E:AE:2F:05:23:FD:F7:CA:B5:31:16:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4979658E966411ED9ED6DC45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:4b:fd:b7:70:48:db:c7:fd:0b:99:ae:74:b8:9a:25:7e:8c:
6c:63:a2:7d:bd:e2:e4:31:76:92:84:55:0b:f8:ce:ad:0c:f0:
8d:19:b4:9f:ff:db:1a:70:dc:94:3d:c9:68:a2:e8:d9:95:1e:
7c:53:f9:f8:93:a5:23:d6:37:57:50:e2:02:8d:37:85:48:9b:
ba:b9:42:14:71:30:e3:42:af:bb:0f:58:d7:7b:59:c0:59:00:
43:90:83:49:82:fc:77:fa:fb:4a:e9:fb:62:d6:50:b2:1d:5a:
b8:83:25:35:f7:f0:5b:ce:64:a2:09:bf:10:ad:c3:26:39:d5:
b7:6d:5a:a4:1a:65:65:16:78:2c:75:8b:c7:2a:da:cc:ab:4d:
31:c6:c7:d2:d1:2b:9f:0e:00:f4:76:3b:8a:1c:29:d5:7f:13:
1f:3d:46:3d:cf:27:72:eb:a8:e9:49:81:51:56:e3:5b:b3:74:
ff:6d:ea:27:65:63:07:f7:5e:ba:f5:3c:d1:87:26:62:da:c3:
5d:5c:f5:fc:03:00:14:a5:ec:63:7f:13:7f:08:ef:c6:9e:20:
84:3d:06:75:01:3b:44:b3:ce:b6:cf:98:40:15:4f:51:4c:09:
50:8b:34:c6:17:f5:66:46:7e:5c:56:c4:18:ef:18:02:9f:8c:
6c:76:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org