Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/377277C44C4411EC827CA336C4F9AE02.roa
File: 377277C44C4411EC827CA336C4F9AE02.roa (raw, json)
Hash identifier: UBP92dUTFhrYdofEoz/g93vd4O54H8DwFfQZhHvzr/Y=
Subject key identifier: 47:F9:F5:04:FA:FD:14:9B:78:74:39:10:C8:F4:71:47:45:B9:65:FD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3760
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/377277C44C4411EC827CA336C4F9AE02.roa
Signing time: Tue 14 Jun 2022 03:50:30 +0000
ROA not before: Tue 14 Jun 2022 03:50:30 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 135918
IP address blocks: 103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 24
103.180.138.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14176 (0x3760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 14 03:50:30 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62a80586-f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:04:1a:9e:3a:7b:10:02:db:d3:9a:91:9d:
09:3c:26:b8:e6:fb:53:2b:b5:11:4b:8d:6e:e7:b1:
95:c8:0a:54:08:1a:24:43:26:c7:9c:a4:05:75:66:
a2:8d:eb:ff:98:66:78:b4:54:c8:0c:08:52:3d:1a:
8a:b0:68:8e:0f:da:ad:a8:8d:c7:56:b1:cf:ba:97:
6f:30:a9:df:1f:b7:f5:28:12:d6:b0:6c:25:d5:5a:
f1:12:f7:b0:20:ac:62:44:6c:af:8f:a0:af:8e:5c:
40:d3:2f:74:16:d2:00:9f:fb:ed:47:c6:9f:1c:b0:
e0:21:45:7c:a0:5f:d9:fb:6f:10:9c:88:50:c3:2f:
c4:97:d9:59:90:92:1d:26:51:ab:b4:3d:90:7d:67:
7f:6a:56:c4:3f:ef:c9:0a:aa:d4:98:98:5b:c0:04:
64:bf:0a:7b:d7:c8:68:9f:ce:df:ef:07:71:16:58:
3c:7a:28:f8:f5:6f:f2:7b:3e:ca:78:b6:a9:a0:32:
2b:1f:d3:e6:ac:10:f3:d7:1a:a8:75:c9:c2:48:e8:
12:28:d5:e9:e1:1d:6f:8e:ec:f9:54:8e:00:c6:af:
88:e7:5e:4e:e6:a9:3e:df:ce:14:ad:71:e3:08:03:
67:14:90:62:17:cc:7d:b1:94:82:3c:09:10:ef:53:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:F5:04:FA:FD:14:9B:78:74:39:10:C8:F4:71:47:45:B9:65:FD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/377277C44C4411EC827CA336C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.22.0-103.176.25.255
103.180.138.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e6:ea:81:06:73:5e:e8:bc:26:69:f7:67:9f:f2:83:92:fd:
ba:5e:12:0f:55:db:29:e8:f7:e8:40:1d:70:de:cc:85:b8:ed:
ba:96:1d:78:81:49:28:86:f4:00:e4:01:73:5c:cf:1a:8d:0c:
9a:4a:7a:73:6e:33:7e:1e:d6:c1:0d:1d:4e:a3:49:c6:76:98:
98:1c:d0:ea:57:d1:24:99:9f:4e:a8:27:02:2f:8c:9d:f3:82:
ee:5a:20:12:83:0a:a3:8e:25:79:25:a2:45:cb:62:74:b6:8d:
e8:4e:44:30:46:71:63:3b:59:62:f4:a1:9d:f7:c3:63:48:14:
27:5d:db:ef:df:01:a0:3a:bb:93:af:be:a8:47:85:da:54:50:
44:52:21:f5:0d:b9:45:f6:32:86:bc:1e:68:82:12:56:13:e0:
39:9b:df:c5:e5:3f:61:c7:e4:7e:9f:a2:94:d3:6b:24:6f:af:
09:37:75:54:b1:53:45:4a:31:e1:b6:a4:cc:73:63:88:a7:e0:
66:03:44:91:70:3f:17:3c:41:ad:8c:57:01:11:1f:b6:4f:c5:
0c:b4:0e:d7:16:fb:7e:29:ee:3b:6b:c9:fd:e4:73:01:a7:88:
2a:1f:9a:7d:b9:9b:48:9d:85:ec:01:0d:df:c1:1a:55:87:c5:
95:d0:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org