Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/6A29EB20277C11EDB4147A26C4F9AE02.roa
File: 6A29EB20277C11EDB4147A26C4F9AE02.roa (raw, json)
Hash identifier: MQvdKdYZzcA+V3Xrd8aF8CwfmfWn4cVr+qYxCv+dLYE=
Subject key identifier: 53:8F:68:64:BE:16:9E:1F:C9:4C:BA:47:D5:B2:F5:75:7A:FE:52:67
Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial: 02
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/6A29EB20277C11EDB4147A26C4F9AE02.roa
Signing time: Mon 29 Aug 2022 09:24:43 +0000
ROA not before: Mon 29 Aug 2022 09:24:43 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 58931
IP address blocks: 103.14.100.0/22 maxlen: 22
116.193.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Validity
Not Before: Aug 29 09:24:43 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=630c85db-1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:76:98:7d:e0:43:06:fc:eb:64:fb:cb:53:01:
59:e5:90:8f:38:59:9e:b2:9c:e1:89:d3:3b:fe:38:
a4:8e:11:27:31:76:a6:37:56:17:6e:6e:61:c1:16:
d4:1f:db:5a:41:26:ab:27:63:95:b1:58:cf:8e:30:
01:43:2b:ba:a8:99:cb:44:9d:d8:37:b8:fc:69:22:
65:16:47:24:ae:ef:63:5e:53:a7:d6:a6:df:4c:36:
e6:90:cd:6f:e2:35:16:f2:3f:4b:73:66:57:5b:26:
89:6b:a7:18:f4:70:c9:63:e7:5a:23:93:b3:29:d6:
72:c7:e4:a3:6f:08:e0:0c:24:25:6b:f9:37:1a:43:
55:2f:b7:7b:b4:ad:b5:d7:6b:90:a2:c9:c1:e3:f3:
6b:fb:0c:64:15:9c:ef:d1:68:22:24:92:99:18:6d:
1b:ff:fa:ac:51:ec:33:19:41:47:76:43:68:09:d2:
2d:2c:e5:2d:6e:ba:73:2f:f4:48:b7:02:f1:af:bf:
e1:e1:4d:0b:0a:43:fc:cd:d9:78:86:19:fb:10:c6:
25:6f:c0:a5:d4:56:ef:5b:88:f1:97:8e:f8:19:bf:
22:7d:45:3f:7f:6e:6f:21:10:23:47:11:e4:04:df:
27:d2:aa:9e:fc:06:d4:3d:28:06:ed:20:56:bc:db:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:68:64:BE:16:9E:1F:C9:4C:BA:47:D5:B2:F5:75:7A:FE:52:67
X509v3 Authority Key Identifier:
keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/6A29EB20277C11EDB4147A26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.100.0/22
116.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:53:16:b1:3d:54:2e:f6:d7:84:fb:60:13:0d:b4:40:1a:93:
db:c4:62:ad:de:37:57:8e:e2:ef:f7:58:4b:25:fd:31:c0:d0:
a2:e1:a7:09:aa:2e:84:97:d1:a3:6d:15:71:38:bb:6e:90:80:
4a:34:10:54:07:7b:2c:ff:32:1c:29:f9:4e:e5:d9:4f:fa:6f:
f1:75:d2:08:cc:ba:f3:18:3e:46:3a:b5:c4:a7:ce:fd:49:bf:
c9:e1:a7:2e:3e:80:9b:ed:fa:63:1b:95:86:34:ab:0e:a0:c7:
64:b9:ac:8d:dc:23:04:0a:54:fa:2a:59:44:3d:17:c6:fe:14:
71:65:0a:d0:d4:20:d6:5d:c6:f3:c4:48:7b:3a:b8:7d:f5:bd:
1d:81:7e:a2:de:ce:92:e0:e9:9e:9d:4b:35:b8:fc:35:e4:93:
3e:33:67:a3:85:f9:f5:46:ee:3b:e5:fa:be:e5:8c:67:e4:9a:
60:0c:d7:3d:f5:19:e0:4e:fd:fa:0f:1c:d8:2e:78:93:4b:b5:
31:88:37:67:f8:68:10:9f:fa:25:93:6f:49:24:67:fe:44:ba:
68:20:84:64:5a:0e:38:12:02:f3:b6:b1:bc:d2:61:9a:f9:69:
71:33:a2:ff:de:4a:65:8d:ac:19:3d:b5:78:db:ae:93:6a:30:
6b:c5:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org