Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/29F42CBA63CC11EC8082F91AC4F9AE02.roa
File: 29F42CBA63CC11EC8082F91AC4F9AE02.roa (raw, json)
Hash identifier: JHX9RUbd9R5dbULt2ionFE52s7M/T+v587TStDCttCQ=
Subject key identifier: B9:83:92:2C:DF:24:73:A6:45:0F:5F:62:A0:24:21:B5:74:E7:36:E0
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 06
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/29F42CBA63CC11EC8082F91AC4F9AE02.roa
Signing time: Thu 23 Dec 2021 08:41:47 +0000
ROA not before: Thu 23 Dec 2021 08:41:47 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 64037
IP address blocks: 103.177.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Dec 23 08:41:47 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61c4364b-1a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:2a:fb:94:6b:c5:12:34:1e:e3:b5:a6:55:
ec:35:b8:fc:83:2d:d4:43:92:8b:af:dd:df:72:08:
f5:01:c8:19:ed:6d:b5:47:8c:ac:9d:7d:51:21:1a:
76:59:e9:f1:a5:42:28:f8:16:4b:42:d0:01:ad:be:
b8:65:dd:2b:8a:f4:12:fd:45:ca:1c:8f:31:c4:ab:
00:6c:30:af:79:c9:95:d6:c7:01:7a:06:08:54:81:
32:64:6d:e5:21:a8:84:7c:b9:91:a2:3f:84:4c:cb:
ba:46:75:34:f8:4f:7e:0c:eb:f2:30:d2:58:27:d4:
ba:ff:8c:9d:b6:cf:ae:7f:fc:7c:81:52:a0:43:1b:
74:fc:1d:06:7c:a1:d9:22:76:3f:c4:d6:39:53:fc:
b0:15:20:90:a4:2f:6f:d9:3c:6c:75:b4:69:2e:c6:
85:13:36:af:4b:e5:60:ee:63:88:c4:7f:9e:f6:3b:
73:ac:fa:8f:e9:f1:c5:93:81:8e:9d:1a:cb:6a:33:
a6:87:92:8d:06:e8:c0:59:2a:a7:e3:f7:10:c4:87:
14:c5:92:28:a6:ba:79:bf:69:46:83:33:14:a1:0b:
d5:2c:78:2f:91:a1:89:de:cc:af:50:9b:e6:fa:8f:
26:8c:16:ad:2d:7e:c0:50:64:fb:e2:49:36:a0:34:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:92:2C:DF:24:73:A6:45:0F:5F:62:A0:24:21:B5:74:E7:36:E0
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/29F42CBA63CC11EC8082F91AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.168.0/24
Signature Algorithm: sha256WithRSAEncryption
f4:cb:92:36:3d:d2:01:90:d3:d0:06:69:ad:6c:56:b8:98:6a:
50:20:4f:25:27:c1:97:30:88:98:8d:0e:3f:73:c3:33:8a:80:
be:20:51:b2:bf:3e:12:c6:22:b0:17:59:82:15:9f:da:2b:9b:
64:65:9f:34:6f:28:10:d3:25:09:53:9b:56:de:aa:1e:7a:42:
e8:84:0b:f5:52:ba:d2:0d:ab:0c:08:c4:22:be:db:16:c0:65:
4d:a3:8b:8a:73:79:e1:39:ab:0d:7e:75:0b:9a:c0:a0:c5:7e:
61:5d:17:5c:d2:87:4c:63:c6:77:a6:a9:98:d4:c7:8e:89:e0:
1d:e7:74:6a:40:b2:a6:87:95:17:97:c1:f9:6f:4d:11:1e:52:
cb:10:01:bb:3f:7d:c6:50:d3:db:bb:29:52:f4:f4:09:6b:96:
80:0c:d1:10:b2:68:41:1e:f7:38:89:a2:ab:d6:b9:eb:7e:85:
c4:57:91:95:0b:b7:00:d9:5a:ae:97:7a:58:c6:af:94:70:ac:
82:b3:85:c5:cc:4f:1a:a7:3a:57:2b:d3:74:b4:95:30:52:72:
d0:95:eb:b7:f4:ee:9f:bc:14:ff:eb:ef:74:83:c6:9b:6a:fb:
5b:9d:d0:d7:b3:82:f1:39:7e:06:65:29:d5:18:d7:45:31:9f:
a4:8b:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org