Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FA4E7480C1FD11ECBDBE441FC4F9AE02.roa
File: FA4E7480C1FD11ECBDBE441FC4F9AE02.roa (raw, json)
Hash identifier: K7Q5ZjccMbT+OOBQ1sPiR67udRneq7m6MCEq9sPNt7g=
Subject key identifier: 55:43:3D:90:88:F0:8F:FE:A8:64:19:45:D3:AC:85:0F:77:25:A7:56
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 02
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FA4E7480C1FD11ECBDBE441FC4F9AE02.roa
Signing time: Fri 22 Apr 2022 05:35:12 +0000
ROA not before: Fri 22 Apr 2022 05:35:12 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 38136
IP address blocks: 103.103.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Apr 22 05:35:12 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62623e8f-63b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:69:e0:1d:59:df:25:a5:9a:c2:ec:4e:cb:
f5:2d:58:b9:c9:80:7d:f6:ce:90:61:a0:e0:7c:14:
1a:b8:97:47:d8:c9:30:eb:6f:23:eb:72:43:46:5d:
87:75:1f:01:34:93:fe:4b:3c:84:ce:e6:47:32:a6:
c4:74:38:56:05:56:c6:c0:5b:b6:44:b7:f1:41:88:
66:d3:1f:90:6d:e4:18:3d:b9:14:1c:f3:8a:7c:f3:
72:08:d0:e2:2c:b1:80:c5:86:9b:33:4f:02:40:6c:
07:d9:d3:db:3d:a7:e5:50:35:b1:cf:b8:3d:f0:7a:
c8:1a:05:79:b1:77:f8:f6:0e:73:bb:29:5c:44:58:
e8:8f:22:60:ea:04:4a:b7:65:ef:0c:a1:4a:75:0f:
54:f9:a3:0b:ef:70:14:a0:be:e7:b6:9e:40:a9:4f:
03:4c:50:d0:49:05:56:6f:9b:32:07:dd:17:63:d1:
2f:c9:fa:ff:1f:15:d3:65:ac:3a:19:0f:b2:b2:82:
c9:37:3f:76:70:7a:5f:ab:c2:7e:c6:e0:19:16:3f:
6c:83:43:a8:a4:c0:9f:87:79:62:ac:2f:d6:c4:3e:
34:4f:ca:45:f6:2c:01:6c:a5:92:e7:ef:5b:02:fd:
1b:43:82:54:f0:0b:b3:e3:d6:68:3f:8a:bd:93:dc:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:3D:90:88:F0:8F:FE:A8:64:19:45:D3:AC:85:0F:77:25:A7:56
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FA4E7480C1FD11ECBDBE441FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.244.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ad:d9:a6:d0:fb:59:0d:a2:46:de:4d:36:3a:77:91:80:2c:
6d:7d:4c:59:e6:ba:0f:17:58:a0:49:68:35:33:42:9c:95:cf:
01:41:52:48:a3:e8:ec:8c:80:bf:71:1b:5c:bc:f8:58:7b:c3:
0f:1a:9a:1a:d1:f2:a4:2b:86:5a:37:5f:a3:c5:68:e9:b5:b0:
0d:02:25:e6:42:a3:eb:9f:5f:fd:b3:b3:47:37:1b:76:1b:16:
41:b3:6b:fd:85:d3:3e:cd:2d:95:1b:bb:eb:50:7c:92:79:d1:
74:44:f4:58:5e:57:2c:c6:06:1f:1c:8d:85:07:9b:36:58:1f:
06:41:c7:38:1e:cb:54:e5:4e:ea:40:57:01:e8:d0:32:ce:52:
d1:29:75:a7:68:1e:f1:7f:36:2c:cc:8b:6c:d2:cd:e7:58:bd:
ef:88:9f:f3:e0:e3:77:86:61:2a:e1:9c:23:17:fa:ca:61:97:
04:87:38:c8:87:9e:61:37:60:1d:30:94:a0:15:0d:a5:02:d0:
b3:d5:8e:a6:84:19:36:d2:4a:9c:1c:5d:75:99:71:1d:d9:e3:
c3:7c:45:26:e0:51:30:c7:d1:a6:74:9b:83:f4:89:93:0a:82:
80:bb:b3:df:10:2c:27:8e:66:8e:60:ee:47:86:44:26:4c:61:
db:20:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org