Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/63D9FFE427EC11EB8D229147C4F9AE02.roa
File: 63D9FFE427EC11EB8D229147C4F9AE02.roa (raw, json)
Hash identifier: 646n3/3Wsbu33RVp00Nd8pntZXMJIGC7a7uWNrFCM7U=
Subject key identifier: 89:5F:0E:04:90:9F:E0:DE:BE:48:A6:4A:B3:F3:E5:16:3E:3A:2E:E2
Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial: 0213
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/63D9FFE427EC11EB8D229147C4F9AE02.roa
Signing time: Sat 07 Aug 2021 00:19:46 +0000
ROA not before: Sat 07 Aug 2021 00:19:46 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 22769
IP address blocks: 103.153.128.0/23 maxlen: 23
103.153.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Validity
Not Before: Aug 7 00:19:46 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=610dd1a2-18ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:7c:30:d9:0e:a2:a4:72:b2:91:8b:81:5e:
09:f9:b8:c1:2f:50:82:51:e1:50:21:3d:49:b7:f3:
73:ea:23:6e:30:68:9e:20:c1:51:a0:a6:39:50:95:
a7:13:27:30:22:79:a4:54:a0:77:1f:3f:44:de:b2:
54:8a:d7:26:69:a7:a5:b2:fd:5c:f7:b3:a5:ef:41:
66:36:36:34:ee:6d:47:68:c2:0b:2b:57:5f:65:47:
98:4f:0f:6f:7b:48:e6:45:55:48:c0:ea:65:9d:e3:
bc:27:35:85:7f:9b:ff:6e:70:d7:ae:aa:d8:50:68:
db:65:f0:3d:8b:57:b3:dd:fa:7d:44:86:a8:35:9f:
11:a9:e5:f5:8e:bc:bc:79:c8:54:b2:ad:59:84:ef:
ae:9d:7c:ab:13:03:d0:43:25:84:78:51:7d:a8:2e:
aa:15:7b:5d:12:a4:d1:c3:f6:8c:58:ff:ca:e1:c8:
43:e4:28:c0:ec:49:03:87:da:6e:e2:91:b5:e1:00:
85:c3:e0:5b:5e:4b:ed:e8:a6:0f:9d:c8:d7:d9:81:
c9:53:10:69:4e:2a:3d:4c:63:f7:b9:05:67:bb:d8:
4a:3f:e2:f7:38:af:37:68:2e:b2:20:91:77:df:6d:
3d:38:23:c4:07:83:56:e0:c5:d2:31:ce:bc:c9:73:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:0E:04:90:9F:E0:DE:BE:48:A6:4A:B3:F3:E5:16:3E:3A:2E:E2
X509v3 Authority Key Identifier:
keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/63D9FFE427EC11EB8D229147C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.128.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:23:24:fc:55:33:4c:1d:c0:1c:23:e3:59:ac:dd:b7:9b:11:
31:e2:fb:a1:c7:b2:2d:75:e6:6d:ce:55:4b:7b:32:8b:5d:63:
12:49:96:f6:29:95:66:ae:c5:85:9f:2d:f4:c4:ef:49:f5:10:
5d:8f:00:69:72:f2:bd:3f:70:bc:f7:1a:83:e3:48:a2:01:d9:
74:ed:62:ef:5f:4e:f3:c2:9d:57:78:53:06:74:29:72:5b:7e:
72:fa:16:bd:03:2e:9b:70:f3:b0:27:3c:12:c2:f4:27:ff:9b:
ee:c7:15:6a:e7:a8:c7:82:f4:d6:09:c7:e5:e4:76:d3:23:d7:
fc:60:8a:13:ff:f7:47:49:aa:48:09:8d:50:a7:26:5e:42:92:
21:24:a3:9f:c1:b8:1b:72:65:2b:ef:f2:da:b1:34:60:dd:72:
84:e7:63:71:92:7b:f8:a4:d9:90:69:7a:42:b4:b4:1f:6f:fe:
78:5f:a6:96:2f:db:e7:3d:ae:01:b9:cf:cf:af:13:2f:5e:8b:
4e:fa:6a:2a:91:cd:09:a2:67:02:d6:79:6a:84:d3:3d:cb:da:
78:01:61:65:d6:9e:a3:c7:a6:31:c3:1d:8f:cb:10:68:76:dc:
9a:93:7a:0b:31:ef:24:b3:fe:fa:ca:a4:16:5d:e0:72:61:58:
ad:6c:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org