Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/202772126D5611ECB19A4F1DC4F9AE02.roa
File: 202772126D5611ECB19A4F1DC4F9AE02.roa (raw, json)
Hash identifier: Cdxhcr5G8MgZN33iZXlHamLjcBlI1vP7LxbCtgvRiDo=
Subject key identifier: ED:F3:8D:F9:05:8F:F8:44:24:5D:B7:94:2D:C3:D0:5F:91:5D:BB:F1
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 02
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/202772126D5611ECB19A4F1DC4F9AE02.roa
Signing time: Tue 04 Jan 2022 12:02:02 +0000
ROA not before: Tue 04 Jan 2022 12:02:01 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 140607
IP address blocks: 103.177.240.0/24 maxlen: 24
103.177.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jan 4 12:02:01 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61d43739-4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:83:cb:fc:44:1a:82:80:dc:d7:fb:b8:b6:
7b:86:15:26:80:ed:35:59:95:eb:28:1d:28:9f:ae:
34:c8:f2:f1:c8:49:31:0f:f3:1a:4c:08:40:5f:3c:
41:92:65:a2:34:ca:91:d0:79:51:cd:ac:a2:59:3f:
3e:2e:79:50:fc:59:1f:7e:e4:be:cd:f8:0c:16:83:
99:7e:cb:7c:31:60:c3:f7:22:85:e5:1b:44:09:86:
3f:95:20:b7:9d:03:36:4b:d6:11:fa:d4:dd:7a:d5:
d8:94:c7:76:ad:7e:fa:92:a5:7f:86:32:b0:cc:f3:
6d:f8:e2:e4:ab:f9:b0:68:ef:ea:79:b7:87:c1:ff:
d9:fa:4d:89:55:ed:7f:5f:0e:08:88:d7:2c:28:e6:
69:04:aa:ba:c5:d8:ac:cb:56:a8:66:c8:3f:9d:20:
17:7f:98:8b:40:41:19:e2:66:a1:40:2b:30:22:c0:
74:3d:df:08:39:9c:ca:cc:69:7b:a3:86:d8:d1:25:
2b:c9:c9:53:9e:f6:a1:6f:de:67:51:08:d6:71:34:
14:95:31:74:e1:58:e9:c2:b7:ba:c5:08:d9:ae:16:
2c:81:31:ac:a6:75:40:e8:f7:9e:1d:48:6c:8f:39:
c3:a5:0d:fd:1f:2c:84:ec:60:8e:90:7d:bc:c7:68:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:8D:F9:05:8F:F8:44:24:5D:B7:94:2D:C3:D0:5F:91:5D:BB:F1
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/202772126D5611ECB19A4F1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.240.0/23
Signature Algorithm: sha256WithRSAEncryption
59:5a:0a:0d:b5:81:bd:51:76:b6:1c:26:8e:6b:f9:f4:ef:a6:
3c:77:a6:61:8a:57:5e:13:7e:57:6e:58:15:16:91:f6:b3:22:
ba:90:6c:26:b6:75:01:90:9c:f3:ff:ba:01:e8:8e:cb:8d:81:
60:17:f4:bb:8a:bf:e0:c6:25:74:cb:7b:11:4e:72:31:31:c8:
5c:19:1a:60:6c:13:80:c7:a7:66:61:ce:03:fa:2b:61:84:19:
4c:6e:5f:a9:4b:9e:fd:12:69:ea:b7:5e:ef:7d:0b:34:08:51:
7c:0f:2e:33:7b:0b:1b:51:39:5e:57:fc:6c:e7:18:1a:17:31:
b2:90:29:a6:63:ee:11:d5:6b:ed:05:ee:ae:79:5a:ce:e4:4e:
6d:08:da:d7:08:f8:51:f1:28:66:1f:6e:c7:40:19:79:c4:bd:
b0:a8:95:37:4f:60:a4:c3:ed:ab:39:7f:3a:ad:23:2f:34:60:
00:2b:a0:a5:3d:c1:22:5f:bd:66:35:ce:9f:6f:f8:04:41:31:
5d:c8:55:fd:6e:cf:b7:2b:67:86:51:1c:f9:db:d5:7a:0a:c6:
0b:39:ea:08:b0:38:37:b9:2b:03:bb:6c:c0:0e:aa:b5:a9:00:
6d:55:d0:b3:1b:35:73:3b:10:14:ac:38:06:0e:62:cb:48:74:
8b:3d:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org