Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EC9EDEE23D5F11ECACCA1778C4F9AE02.roa
File: EC9EDEE23D5F11ECACCA1778C4F9AE02.roa (raw, json)
Hash identifier: eajIoIL5QWP/VZZk+qfcNSPydHn9uVcfeBvrya+nAiQ=
Subject key identifier: 6A:FA:80:10:DF:C9:A3:BB:AF:5A:51:00:42:C1:B0:45:1C:AF:BC:82
Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial: EE
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EC9EDEE23D5F11ECACCA1778C4F9AE02.roa
Signing time: Thu 04 Nov 2021 11:11:14 +0000
ROA not before: Thu 04 Nov 2021 11:11:14 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 133938
IP address blocks: 103.169.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Validity
Not Before: Nov 4 11:11:14 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6183bfd2-fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:d5:34:d1:cc:6e:de:45:96:96:92:5f:4b:
97:d2:46:7c:c4:44:fb:5d:05:7a:08:d6:9c:48:dd:
ed:1f:b5:e7:73:2f:54:4c:a6:65:fe:cd:79:51:4c:
ca:20:24:a4:96:4c:c3:82:bc:8f:5a:dc:89:f9:60:
8b:ff:5c:2f:a8:51:53:fa:e5:dd:31:a5:00:c4:62:
3c:42:4d:4c:8f:24:44:48:a1:23:a0:3d:5a:a8:b6:
57:55:fe:21:43:b5:11:9d:d0:1c:fc:40:83:c8:d9:
32:fa:8f:e9:32:7c:43:70:48:32:be:94:bb:0f:17:
fb:de:16:48:c0:be:f7:33:4c:d3:0c:3d:27:0b:12:
c7:f7:bd:c0:79:95:9a:d5:d8:81:d4:68:e9:6a:04:
b0:de:2e:86:34:ca:b0:a6:28:02:f8:51:b2:5f:23:
a8:9d:59:ab:d3:9c:c9:2a:34:d9:12:28:14:bc:4e:
4f:e4:29:ae:da:ea:7c:e7:af:b5:11:a2:a0:02:e0:
24:b3:4a:12:bf:ce:37:d7:fa:33:f7:ab:80:68:2a:
83:cb:ca:25:4d:cd:3c:9e:45:43:de:7e:d9:0a:f7:
4d:9a:cd:64:05:51:54:e6:28:92:be:af:68:8e:81:
97:7b:75:0a:c0:77:ad:ac:30:84:a5:d7:73:e7:30:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:80:10:DF:C9:A3:BB:AF:5A:51:00:42:C1:B0:45:1C:AF:BC:82
X509v3 Authority Key Identifier:
keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/EC9EDEE23D5F11ECACCA1778C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:38:00:f8:00:1c:3a:af:65:9f:57:54:39:b2:3b:00:22:43:
74:90:9c:bd:57:fa:df:3e:b7:eb:9c:fb:44:ab:37:13:d4:b6:
df:74:3a:58:8b:d4:fc:2d:d8:cd:45:85:24:5a:05:a8:94:af:
9f:e8:8b:da:fa:00:58:89:77:9d:10:f3:3e:03:57:a3:57:66:
c0:19:73:7d:f7:c6:45:58:0c:03:bc:b4:f3:ac:a2:50:66:32:
33:72:69:a1:68:29:36:24:17:33:36:0f:6c:e7:6b:b9:0a:e8:
25:74:31:a3:68:6e:52:38:f9:69:80:63:bc:26:6a:59:0e:1c:
f3:f2:69:15:b2:f4:a4:16:53:37:81:97:64:a0:1a:17:eb:e5:
02:88:f1:3d:59:a6:cf:b0:bb:af:6e:04:18:46:00:e5:fe:51:
37:d2:4f:94:1c:0c:7b:fb:43:cc:72:4e:b6:a5:10:a2:f7:b4:
a6:5c:16:ee:8c:82:55:23:3b:8e:f0:69:c7:36:c4:db:b8:18:
65:0d:c1:6c:d8:3d:5d:fa:24:8f:8e:4d:e5:cf:75:0b:9b:70:
7f:12:d7:da:f7:a6:ea:30:ae:ed:9d:a3:db:dd:81:42:5c:a9:
2f:03:d4:ad:4c:db:fb:f9:8a:76:09:6c:5e:2a:fa:b0:84:fb:
fb:c4:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-ams.rpki-client.org