Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DD7DF7CAF9DB11ECB70D8E76C4F9AE02.roa
File: DD7DF7CAF9DB11ECB70D8E76C4F9AE02.roa (raw, json)
Hash identifier: iRXingPdTW5+mjMqpz/I/XhmF1L1PkK7R6X0NoZ37KI=
Subject key identifier: AB:AB:F3:C6:EA:DE:14:02:75:BC:2E:E3:9B:05:9D:E4:51:4C:B5:2C
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 0159
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DD7DF7CAF9DB11ECB70D8E76C4F9AE02.roa
Signing time: Sat 02 Jul 2022 07:52:05 +0000
ROA not before: Sat 02 Jul 2022 07:52:05 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139009
IP address blocks: 103.179.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Jul 2 07:52:05 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=62bff925-de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:ad:1f:ab:b4:f5:3a:31:97:42:47:fd:ce:
5c:52:c8:83:0d:23:92:f3:e4:9b:fd:70:cf:96:66:
22:0b:f4:7a:cf:92:49:f7:f0:1b:9f:f8:ce:c2:f9:
00:ae:23:e0:4a:66:7f:a7:4c:ab:29:fb:bb:01:7a:
51:4e:15:7e:58:f4:fa:b4:31:a3:8d:58:70:06:5e:
ee:30:b3:da:f1:d7:d6:d1:4e:ff:b5:d1:c5:94:76:
94:40:fd:29:d4:9e:72:16:68:13:23:94:4d:d4:69:
ed:97:ec:40:ba:89:14:58:d7:6d:46:06:be:84:a4:
16:4a:40:42:eb:22:3f:78:da:60:77:93:88:4d:9d:
84:7d:e8:c9:ce:eb:05:82:a0:a5:a1:c7:cc:af:d8:
73:d0:bc:05:1e:a7:b7:e3:63:5b:6b:9e:ce:f8:c8:
ab:01:0b:d7:05:52:95:25:23:ad:4a:3b:b8:fd:c1:
9e:36:d7:19:b1:fd:be:17:0a:1b:91:da:a5:4a:d6:
bd:80:c9:f8:2a:74:b0:ac:ea:4d:2a:76:7b:c9:a9:
28:27:60:ff:4b:25:c3:50:85:fc:07:41:d4:6e:dd:
a5:5a:47:b1:19:a6:58:11:8e:4f:1d:2e:fa:2a:0a:
2b:be:31:28:69:dd:ba:45:e2:43:4e:85:05:bf:02:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:F3:C6:EA:DE:14:02:75:BC:2E:E3:9B:05:9D:E4:51:4C:B5:2C
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/DD7DF7CAF9DB11ECB70D8E76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.125.0/24
Signature Algorithm: sha256WithRSAEncryption
78:25:69:06:6c:5c:93:13:16:0e:fd:22:03:e1:9e:0c:86:38:
9f:cd:3c:e7:5f:be:31:b6:78:ba:4d:50:93:c0:aa:cf:58:c7:
db:45:b1:99:e2:74:4f:4e:ca:50:68:c6:a0:91:f4:ad:83:f3:
2d:4c:ad:a2:1f:e7:e7:b4:0c:48:9c:cf:73:18:06:1c:4e:4c:
82:2d:42:ff:f4:87:77:18:b0:45:8c:63:ab:02:22:5b:3e:38:
31:47:23:63:21:6b:29:90:1a:26:cc:7d:63:58:47:9d:7c:c1:
50:94:ff:a4:d5:12:b6:2f:a2:c3:0d:cd:3c:f3:a7:f0:62:78:
92:9a:d5:01:60:33:2d:82:4e:58:7a:31:69:1b:25:b9:cf:8a:
ca:9f:ab:59:49:a5:70:f6:78:91:1a:89:1b:36:d1:eb:3f:3d:
54:31:db:89:ae:d2:d9:87:8f:6a:e9:d6:1b:3d:5e:1a:2e:93:
67:61:c6:01:b9:68:5c:cb:64:ee:1b:18:0b:3a:2e:80:55:d0:
e4:4c:51:82:a6:d6:34:d8:76:52:9e:c2:c6:fa:07:00:15:d0:
43:33:bf:48:33:ee:3a:c7:17:47:5f:ea:bf:1b:a8:2e:9c:f9:
5f:77:39:2e:b5:05:ca:89:f0:c3:d6:ee:6e:a2:c0:74:26:dc:
57:d4:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org