Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D882118A4DFE11EDBF00BA6BC4F9AE02.roa
File: D882118A4DFE11EDBF00BA6BC4F9AE02.roa (raw, json)
Hash identifier: LoOv/OsJqsC0sPF3dzrY1r9Id1r6MiRYfF1ogO767Y4=
Subject key identifier: 14:17:61:CC:E9:13:BA:FE:87:A2:33:BD:2F:AE:8D:B7:EC:A5:07:84
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 02
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D882118A4DFE11EDBF00BA6BC4F9AE02.roa
Signing time: Mon 17 Oct 2022 09:34:07 +0000
ROA not before: Mon 17 Oct 2022 09:34:07 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138474
IP address blocks: 103.18.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Oct 17 09:34:07 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=634d218f-c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:b1:ea:7e:05:d4:78:8e:61:8d:68:e6:8c:
f6:18:f2:af:18:2f:5a:c0:8f:f1:7a:c7:05:98:b7:
c9:b4:36:e4:6a:81:4b:9b:5a:8c:c1:90:9c:e3:9b:
e1:09:3f:af:b4:27:33:ed:b6:5d:6e:8b:d5:1b:df:
0f:be:56:ed:00:b4:b2:91:c1:7f:bd:f4:f9:5e:28:
fe:d4:3a:52:51:37:3c:c5:99:61:32:72:90:db:bc:
10:ca:42:81:5c:ff:e5:10:22:76:f5:c9:68:d2:12:
65:9a:76:56:40:18:d8:c6:32:20:c8:69:cc:4a:71:
b5:e4:f0:d9:20:94:fa:a3:17:99:ff:7f:56:92:95:
10:8a:ac:28:76:3d:3a:c6:08:5f:c9:6d:3b:4e:e4:
f2:c9:ab:60:c2:85:67:6b:45:dd:68:20:b4:d0:8d:
b6:78:2e:8b:ec:fb:88:a7:cc:af:3a:36:82:23:a4:
64:89:fd:20:d4:e1:eb:03:81:fc:4f:06:65:3c:c3:
14:62:66:dd:c2:60:f2:7c:36:9f:f2:67:e5:50:e4:
f5:71:3b:15:5d:aa:14:9d:8e:b1:00:2c:02:b8:be:
45:58:95:1f:41:23:65:44:12:62:69:c2:21:60:8d:
07:5e:a7:e1:33:2a:8b:16:63:9c:c5:0e:a4:14:bb:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:17:61:CC:E9:13:BA:FE:87:A2:33:BD:2F:AE:8D:B7:EC:A5:07:84
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D882118A4DFE11EDBF00BA6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.204.0/24
Signature Algorithm: sha256WithRSAEncryption
17:95:f8:6d:82:4e:91:ff:b0:0f:3d:5b:44:5c:0d:61:d3:2d:
44:1a:24:b6:24:d9:03:1a:ab:bf:f4:99:70:db:99:d7:c0:b8:
86:72:83:2f:93:01:22:21:bc:5d:e6:f3:2b:69:80:62:db:e8:
0b:30:30:81:4c:bd:21:cf:4d:81:da:e4:e6:e7:5d:c6:8d:55:
a4:b5:9d:ed:8f:c3:e8:93:ee:df:43:96:89:88:ef:37:88:05:
f3:d8:4a:64:d5:84:4f:49:ce:2a:0b:f3:a5:c9:e2:d9:f2:8e:
16:68:8d:32:6d:b8:f0:e2:e6:87:2f:5e:47:02:93:2b:84:d2:
42:3a:5b:aa:25:22:8f:e4:0a:03:fa:b2:e9:a5:71:d6:fe:01:
19:d7:81:57:09:a5:29:e8:8e:de:74:01:11:18:63:3f:f2:2c:
d0:fe:37:c9:48:4e:a3:70:13:fa:80:33:b0:89:64:5c:9f:35:
71:b4:c1:02:bb:a6:14:2c:68:fc:97:31:6c:83:b2:99:9f:0a:
a0:b5:d9:02:79:38:fc:73:f1:33:6b:8a:0f:47:5c:12:af:b7:
0d:a5:f6:f4:b3:64:e8:94:3a:3d:45:88:b6:5f:aa:83:72:a7:
12:48:1c:55:ea:59:57:98:53:bf:80:1b:cb:eb:99:13:7a:78:
fb:3c:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org