Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06AE4D2822B011EDA3B74073C4F9AE02.roa
File: 06AE4D2822B011EDA3B74073C4F9AE02.roa (raw, json)
Hash identifier: YkXxWP8CYPAzwTbDLpp7uqGXNTvTdh2oasOI6njJroU=
Subject key identifier: 7C:88:BE:6F:91:04:51:10:0F:80:50:A1:8D:7C:0D:52:8F:16:63:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06AE4D2822B011EDA3B74073C4F9AE02.roa
Signing time: Thu 25 Aug 2022 08:31:40 +0000
ROA not before: Thu 25 Aug 2022 08:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150082
IP address blocks: 103.167.182.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23568 (0x5c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 25 08:31:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6307336c-ba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:9f:84:08:77:3e:b5:08:c8:3a:be:a1:7f:
58:ea:e1:d7:db:39:12:e4:2b:fc:d0:6c:d9:a9:05:
90:6b:37:f6:38:c8:6d:9d:bc:c4:ea:ef:1f:98:e2:
b7:5e:b8:70:57:bc:0a:01:89:68:29:de:d0:86:12:
a8:04:3f:28:2e:38:6a:30:dc:a9:c4:c3:a8:69:51:
e2:18:34:0c:55:10:6a:12:60:2d:60:ef:0c:ea:44:
92:e7:7d:83:7e:20:73:72:19:36:5f:9a:91:e3:2a:
33:4b:56:2d:0c:42:f9:f0:ee:4d:53:8f:a4:cb:0e:
4f:70:cb:fc:58:8f:55:bb:f6:7c:20:33:d6:02:c1:
ee:62:76:cb:3a:2e:46:09:8b:16:3a:86:06:03:a2:
f6:72:f8:c5:fb:6d:e7:89:4c:76:a9:9b:19:77:19:
5c:ac:fb:4a:0b:c1:85:02:5a:2c:58:3c:ba:f1:c8:
ed:80:4a:be:c5:c8:47:bc:b5:88:f4:e1:44:cd:25:
a6:5b:50:65:ad:fa:11:61:4c:eb:57:05:1c:f4:56:
d9:91:b8:27:41:14:8d:64:5d:9d:e7:47:5e:50:dc:
e1:22:e6:d2:53:e7:24:3c:ee:70:30:a6:86:d5:b0:
8e:de:52:b4:34:3b:67:5a:b1:55:c2:c3:70:77:ab:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:BE:6F:91:04:51:10:0F:80:50:A1:8D:7C:0D:52:8F:16:63:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06AE4D2822B011EDA3B74073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.182.0/23
103.168.32.0/23
Signature Algorithm: sha256WithRSAEncryption
55:d1:aa:3d:14:d9:ab:bc:38:06:58:0b:b7:12:85:9a:87:d7:
8c:b9:80:0f:e8:51:d7:b4:fb:7c:e3:92:a2:92:3d:a6:50:50:
70:1f:35:8a:1f:23:8b:21:d1:58:d0:19:3a:73:87:39:ed:8f:
dd:08:3f:cc:27:94:3c:17:10:f3:26:87:ee:95:06:96:f6:ee:
29:c0:42:89:51:a6:87:11:fa:86:61:a1:db:cc:97:9c:5f:db:
c7:3b:ec:7b:9a:d6:93:57:e0:38:a2:fa:7e:5e:5c:0b:8e:98:
1b:03:b1:2d:d7:2e:3d:d4:b4:d0:02:69:55:5b:7a:3e:03:e2:
9f:e2:7b:2f:c4:97:47:12:e1:d3:25:8d:fd:5f:b0:64:a9:8c:
bb:c7:7a:d8:6f:20:06:93:9c:f1:35:dd:f6:e5:ba:3f:52:49:
97:fd:c4:27:74:8f:6a:c6:11:29:fe:d9:69:47:44:8d:7c:e7:
fc:b6:23:d7:d6:c4:7d:2f:d2:7b:c2:f6:ae:59:5c:a2:a8:fd:
b7:82:0b:47:a9:dc:bf:8a:87:3a:f8:a2:71:19:f6:c3:10:a5:
8d:ba:6b:bd:21:50:9e:cd:2e:bb:2b:1b:19:6d:62:c7:36:af:
3a:4a:a9:2a:f6:13:5d:f5:1c:6c:3e:1a:0d:eb:c2:d6:f3:44:
42:cb:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:50 2023 by rpki-client on console-fra.rpki-client.org