Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/F9528E6269B311EA9BCF184BC4F9AE02.roa
File: F9528E6269B311EA9BCF184BC4F9AE02.roa (raw, json)
Hash identifier: cbMXGcOdpiIvfQgwiEJtmKBu4BggLbZaq6hUMhwE1D4=
Subject key identifier: 68:93:E7:3B:03:A6:12:01:AF:D6:FA:4A:B4:13:AC:7F:67:A2:7A:53
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0664
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/F9528E6269B311EA9BCF184BC4F9AE02.roa
Signing time: Mon 31 Jan 2022 22:07:59 +0000
ROA not before: Mon 31 Jan 2022 22:07:59 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 58895
IP address blocks: 103.83.20.0/22 maxlen: 22
103.83.20.0/24 maxlen: 24
103.83.21.0/24 maxlen: 24
103.83.22.0/24 maxlen: 24
103.83.23.0/24 maxlen: 24
123.108.92.0/22 maxlen: 22
123.108.92.0/24 maxlen: 24
123.108.93.0/24 maxlen: 24
123.108.94.0/24 maxlen: 24
123.108.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Jan 31 22:07:59 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f85dbf-68e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:31:b0:94:11:5f:ec:9f:2a:6d:c0:c5:76:
4b:52:6f:f0:65:ec:0b:04:e3:6a:71:4b:d2:ee:dd:
dd:bf:78:11:d6:92:59:8a:2f:ed:d4:81:8f:98:be:
c1:ad:da:0a:65:1d:96:ee:9c:34:71:74:90:87:fd:
6c:19:a9:39:93:a2:03:19:e4:df:4a:43:47:ae:b5:
03:7b:5b:de:45:25:b6:2d:94:21:d6:fc:ef:2d:a5:
32:b3:4a:c5:a8:52:cf:45:75:ae:2e:88:71:bd:84:
13:93:77:16:be:33:ba:df:1e:77:f9:db:36:40:6d:
08:88:b9:ed:8c:dd:21:e6:2e:40:a4:eb:4b:70:6c:
c9:c3:bf:4a:60:c4:8a:56:15:d7:a9:db:76:95:ad:
bb:42:40:09:57:ae:b6:11:d5:44:07:a4:9b:a5:78:
98:c3:71:5b:8b:07:29:7f:eb:5b:51:86:37:17:6b:
8c:77:b9:16:6e:1c:79:ce:bb:32:6c:fd:4b:bf:38:
07:20:f3:00:96:19:9b:eb:91:37:4d:6f:62:3d:1c:
7f:0c:61:10:7e:69:cf:41:23:b0:77:13:32:a1:19:
77:4d:91:7f:6e:40:a1:6f:4f:de:3f:ba:c3:bb:03:
74:ea:09:99:21:05:fb:56:c9:16:4b:89:03:6c:b5:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:E7:3B:03:A6:12:01:AF:D6:FA:4A:B4:13:AC:7F:67:A2:7A:53
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/F9528E6269B311EA9BCF184BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.20.0/22
123.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:59:33:b4:e5:c7:1c:35:3f:1e:18:a3:0c:67:90:c7:8e:b4:
ad:37:eb:35:84:99:c5:21:d6:2c:bc:ea:b5:83:88:ce:89:de:
f7:f6:85:7d:57:ed:05:c5:b9:f6:46:51:81:68:06:67:72:65:
e2:49:a5:cf:28:61:67:b6:71:1a:3a:d2:28:9b:63:8c:a5:95:
7e:5b:61:a7:0b:b2:75:60:bc:fd:9b:d8:9b:91:82:26:06:d9:
cf:b3:44:e3:34:1e:d3:9b:37:2b:63:ff:40:2c:3e:09:de:8e:
54:36:db:fa:8c:79:c0:bf:ae:0a:42:67:39:aa:53:7e:ba:0a:
e0:ec:04:c6:e5:95:7c:37:09:64:d8:0d:e7:74:a5:0b:1a:93:
8c:91:52:32:39:81:83:47:a1:fe:5b:67:41:27:00:6f:c7:40:
02:4c:3f:6f:1a:59:53:5c:f2:07:e6:5e:42:be:09:75:9e:38:
d6:24:12:e4:2c:cf:99:27:91:d2:3b:46:8b:8f:4f:93:2c:16:
c9:34:3f:fd:ec:f2:bc:64:94:d9:1c:10:9e:fd:1f:97:58:b2:
d1:c6:0c:e9:76:b9:db:f3:9d:28:aa:bf:31:a7:72:d1:7e:f6:
83:5d:05:26:ed:73:13:8e:73:8e:6e:e5:e3:b9:d7:33:6d:1c:
eb:44:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org