Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7635469AC20411EC977C275BC4F9AE02.roa
File: 7635469AC20411EC977C275BC4F9AE02.roa (raw, json)
Hash identifier: f9/1gSTir2JRZiEXKgjV7QM944ElxPcdY1dvz2TmhRE=
Subject key identifier: 70:81:D5:DB:8C:79:C7:A3:91:C4:08:F2:C0:8E:39:28:CC:1D:AE:9D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4FB7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7635469AC20411EC977C275BC4F9AE02.roa
Signing time: Mon 16 May 2022 04:07:26 +0000
ROA not before: Mon 16 May 2022 04:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134297
IP address blocks: 103.177.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20407 (0x4fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cdfd-6b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:1a:c1:79:50:eb:ab:ea:c2:50:2a:d8:48:
ad:23:35:a6:e7:9e:67:bc:7d:6f:11:67:91:97:10:
98:43:88:a1:e6:b8:07:22:60:36:7b:dd:6d:6a:31:
1a:53:a8:4c:bf:c6:8e:79:82:8b:5a:b0:2f:c3:39:
10:6f:27:65:e7:cb:79:a0:12:cf:81:bd:e9:a2:35:
0b:9e:ba:e4:e2:19:e4:8a:ad:73:25:db:8b:4f:9d:
11:df:f1:f1:c3:24:1f:91:bb:ed:89:e1:aa:b3:d3:
93:28:d3:e9:9b:9a:14:6a:c7:dc:05:07:5b:19:4f:
da:2b:5d:35:ff:6c:5b:25:2a:61:d1:30:4f:69:3b:
11:66:4c:cb:8f:bb:ac:f1:80:a8:b5:b6:1e:ff:0d:
28:8e:6a:8f:d5:df:6b:aa:09:f1:09:bc:d3:d0:92:
ca:77:03:53:20:99:75:3a:9e:7e:15:0a:55:3a:9e:
0e:ef:c0:9b:69:ee:63:bf:88:82:35:1c:94:1b:d2:
57:3b:95:40:a9:91:88:4b:9c:07:42:3f:c3:7e:e5:
36:0d:78:98:85:8b:45:cc:6b:39:f7:1c:45:fb:6c:
a2:08:81:c9:3d:cb:f4:2f:e8:78:eb:21:db:7b:de:
ef:cf:b0:15:05:81:d7:0d:a5:63:44:40:a9:8c:0f:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:D5:DB:8C:79:C7:A3:91:C4:08:F2:C0:8E:39:28:CC:1D:AE:9D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7635469AC20411EC977C275BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.130.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d2:5c:1e:48:ed:e9:ea:d1:5e:e3:48:69:30:0f:ec:1e:ac:
8c:d8:da:4a:5f:70:11:2a:d0:32:25:be:0f:2c:f9:78:59:5f:
35:e9:86:36:95:f0:21:6c:f5:95:23:b7:9d:de:75:bf:76:21:
af:23:3a:28:8e:ae:75:f2:64:ff:86:2f:e1:81:af:c5:3c:9b:
1e:5a:b3:09:93:51:92:00:59:71:62:bf:e2:d8:e8:43:46:71:
1c:ff:81:80:67:88:9e:e9:c5:c8:f6:5c:49:8d:c4:7c:dc:ce:
73:c3:5e:f3:42:fb:d3:74:f6:9c:ae:45:c7:ce:32:50:18:98:
42:32:b2:ef:12:97:73:bb:62:ad:fb:36:d8:06:05:96:95:12:
1e:91:83:70:3d:fc:7f:ed:e2:5c:50:ee:37:f6:a2:af:17:70:
f3:13:7a:c7:6a:44:04:5c:ad:97:4d:75:a4:62:69:ee:bf:92:
41:13:84:b2:e4:16:3a:bb:28:7e:32:4b:59:07:42:73:6f:60:
aa:33:d8:6a:84:26:b4:29:22:04:92:2f:e8:d5:27:ef:4d:56:
9f:1b:53:7d:db:8b:3f:81:90:b2:c2:a8:38:7d:fa:87:16:01:
b1:61:28:0c:3e:16:39:69:04:25:b4:29:c1:2b:6f:ac:27:a3:
1c:26:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org