Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/E49A4420AE5211EC8E0FCE7AC4F9AE02.roa
File: E49A4420AE5211EC8E0FCE7AC4F9AE02.roa (raw, json)
Hash identifier: jY7TdrRI5PjwaLBbkSojyFb5qY5kcCKcIDFyBn6cmuo=
Subject key identifier: 34:00:7E:7C:CD:06:5E:1A:37:2E:13:18:A8:16:22:8C:81:E3:22:CB
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 02F3
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/E49A4420AE5211EC8E0FCE7AC4F9AE02.roa
Signing time: Wed 17 Aug 2022 11:41:53 +0000
ROA not before: Wed 17 Aug 2022 11:41:53 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 35913
IP address blocks: 103.31.210.0/24 maxlen: 24
103.31.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Aug 17 11:41:53 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62fcd400-9cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:4c:2c:9d:75:f2:14:b7:aa:5d:43:c3:d5:
54:a2:9b:b1:70:a5:57:f8:70:81:2b:6b:55:26:71:
77:51:f7:70:0d:60:d3:3a:9f:b2:5d:b5:f9:0d:78:
53:ca:09:a1:35:4e:3a:d2:18:aa:21:ec:02:e5:b1:
87:3c:63:8d:75:07:b0:c4:91:65:27:34:31:ca:6b:
23:cc:f3:4f:94:96:4f:6b:26:47:55:06:b9:82:de:
b4:b9:fe:8b:5c:56:8a:b1:24:c6:79:29:74:b0:76:
55:26:63:67:5d:08:1e:97:7d:80:40:2b:e1:d8:be:
77:c8:a3:53:5c:16:04:d4:55:9b:e8:52:a8:1f:a9:
c6:c8:39:48:70:57:4a:52:18:90:2e:2e:c7:be:e2:
39:7e:1f:1b:6b:79:ee:7a:78:74:b3:4e:00:d2:4a:
99:ef:8c:27:14:fe:ab:41:02:95:09:3e:95:49:f2:
07:20:90:b5:46:f8:2b:39:68:74:2b:b6:1c:74:a7:
ec:cc:e1:eb:97:77:04:3d:7c:91:17:9c:1c:7a:e9:
26:f0:a8:4b:de:28:59:f0:81:40:fa:75:21:b0:3b:
06:56:14:25:2d:4a:27:50:49:46:14:1d:38:5f:64:
a6:2f:32:7c:b4:20:83:5a:a4:25:d8:26:05:46:c3:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:7E:7C:CD:06:5E:1A:37:2E:13:18:A8:16:22:8C:81:E3:22:CB
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/E49A4420AE5211EC8E0FCE7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.210.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7c:74:18:f4:98:5f:1c:30:d2:07:71:48:85:ef:8b:9e:8d:
9c:11:6d:8d:f6:67:51:64:ad:e0:85:fd:69:b6:01:20:b6:c5:
f5:b6:1b:11:4c:ad:d8:fc:3b:8d:a4:a9:ee:b6:8c:9c:ff:c6:
9f:91:5d:c8:c5:76:15:63:18:b3:ac:f4:80:d9:72:50:bb:d7:
7f:31:46:bd:18:96:23:22:d4:22:28:fb:42:a8:87:46:c1:2c:
fc:26:fa:5e:f1:8c:5d:c6:ba:3d:4b:13:6a:8d:e8:6d:d0:3e:
e8:3d:19:7d:aa:82:9c:c1:85:40:88:df:f2:67:ca:af:d5:88:
a2:66:5b:7f:3c:5a:de:85:db:d0:62:f7:62:ac:96:af:48:01:
0c:58:e4:a6:ae:a7:f2:29:88:14:63:a2:8e:29:31:d5:b5:61:
64:38:a0:09:5e:26:55:24:f2:f8:89:f7:43:02:6d:26:af:cc:
92:7b:dd:ba:0d:55:9d:94:9d:92:fd:91:85:f3:1a:96:36:a7:
03:5e:70:e7:27:2f:cd:fd:23:f2:6f:d3:13:5d:89:67:0c:4e:
69:46:45:07:bb:87:10:68:4d:be:6b:ce:3a:5f:7b:ee:d9:7a:
55:dd:c9:b0:c6:65:1e:73:16:70:51:63:84:88:42:6c:2a:27:
8a:2a:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org