Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9726A4E096F511ED89DB9539C4F9AE02.roa
File: 9726A4E096F511ED89DB9539C4F9AE02.roa (raw, json)
Hash identifier: G/+7x1voWhI/W/Q2NFalEwPX0FV5vJaz5K0IIr6M3L4=
Subject key identifier: 99:70:C1:67:3E:0D:D5:C3:0C:26:69:F3:5F:47:4D:80:AB:42:F4:93
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6357
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9726A4E096F511ED89DB9539C4F9AE02.roa
Signing time: Wed 18 Jan 2023 06:01:47 +0000
ROA not before: Wed 18 Jan 2023 06:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134323
IP address blocks: 103.177.0.0/24 maxlen: 24
103.177.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25431 (0x6357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 18 06:01:47 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c78b4a-a790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:1d:3d:fc:14:06:fe:0a:85:b1:82:38:aa:
7c:4e:87:8b:f3:33:3c:74:60:e1:60:ec:d2:a3:39:
7f:a0:ea:7e:06:4e:96:4b:cc:e7:ea:fe:05:91:ea:
83:45:82:ed:c5:a1:c0:e5:dc:65:77:9a:4b:f3:14:
52:ee:f5:f6:bd:13:85:50:03:d6:6e:45:ff:c7:63:
b7:c4:72:d1:d1:d1:ae:66:63:b3:c2:fe:9d:77:ad:
19:de:13:f2:d1:ba:ef:8a:d6:ed:21:ac:51:a4:3e:
ef:ea:47:35:3e:e9:fd:f5:3b:ba:59:72:29:12:00:
6f:f1:04:47:e1:70:10:6f:18:0f:b9:4b:ae:25:1a:
c5:73:13:e8:e6:11:8a:b5:84:26:ef:ca:92:86:24:
77:bd:b5:aa:10:1c:27:6c:4b:6c:2d:71:f8:67:c2:
81:bd:59:05:1b:dc:e5:23:6a:e4:54:b4:c3:f7:60:
ce:41:67:ce:97:a3:ae:6f:41:1a:7b:43:b4:dd:51:
7a:07:2c:6f:a0:29:ea:9c:f8:6b:67:e9:ae:6e:5c:
28:0f:bb:11:89:b2:d2:db:a5:33:a3:7e:2b:9d:50:
e9:f1:8c:8f:41:fd:2d:f6:bf:ae:28:48:42:87:77:
d4:7c:de:b1:52:1c:58:30:7b:87:54:cf:38:2b:54:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:C1:67:3E:0D:D5:C3:0C:26:69:F3:5F:47:4D:80:AB:42:F4:93
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9726A4E096F511ED89DB9539C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:64:ab:96:03:11:a8:21:80:3a:ee:3d:a6:a4:16:d7:6f:21:
9c:9a:b1:dc:42:8d:e7:c9:41:c5:97:b1:3b:66:a7:c3:0a:94:
a2:4d:79:34:44:59:a0:b9:f8:4e:7f:e8:a6:7f:74:8d:e6:25:
8e:38:d6:21:f3:88:58:84:46:26:aa:16:54:ed:46:f4:3e:e0:
30:15:91:4d:ca:54:81:a7:a5:e2:44:d5:1b:77:81:45:ba:47:
00:39:31:90:f9:91:93:b8:08:af:d0:5c:36:77:8d:fb:a3:6a:
d3:8d:9c:57:1c:10:ef:ba:99:f2:42:b2:f7:a9:bf:a6:05:86:
02:88:17:d4:da:3c:38:c9:5f:26:48:50:24:3a:e7:30:99:8b:
c9:3d:82:9b:b8:de:c6:5c:72:fc:eb:a2:bc:91:5b:ee:fa:4c:
9e:36:e0:29:7e:d6:e2:65:3e:82:c0:bc:d3:52:51:a5:39:51:
6e:18:20:6d:9c:ae:c1:7f:a4:f9:40:0e:61:d7:2d:7f:df:64:
19:97:29:f5:97:e2:48:74:24:3a:2e:24:03:75:af:ee:cc:6e:
fb:3e:f6:f0:78:b2:85:f9:d0:e6:a6:93:a3:3e:80:86:ec:c7:
50:af:04:f1:5f:12:dc:65:c0:3c:36:7c:68:2d:2f:9c:2e:75:
be:b9:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org