Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08CA6AA0152411ECAD055780C4F9AE02.roa
File: 08CA6AA0152411ECAD055780C4F9AE02.roa (raw, json)
Hash identifier: rHqsBB8qTaPEw0kXf+3ZBt0MPzjgZtPrAyDePUN3cvY=
Subject key identifier: 91:4F:43:1A:0B:F5:D7:15:3E:F9:49:33:32:FD:A4:B2:63:55:05:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 53DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08CA6AA0152411ECAD055780C4F9AE02.roa
Signing time: Mon 16 May 2022 04:27:13 +0000
ROA not before: Mon 16 May 2022 04:27:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 146847
IP address blocks: 103.171.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21466 (0x53da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:27:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d2a0-6b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:fb:95:c4:02:3b:95:de:f5:88:f2:44:3b:
21:1a:20:34:50:da:57:71:5c:bd:2a:9d:92:93:12:
e9:5f:0c:e1:f7:0e:4f:d6:d1:4a:af:8d:2d:60:be:
fd:5d:41:53:07:48:8b:ce:9e:49:e0:dd:e7:c3:1e:
c4:4a:40:d5:7f:70:98:9c:1f:49:44:b0:3a:05:e6:
c5:82:2c:86:3b:db:87:56:44:e2:4c:cf:ea:03:01:
1d:40:1e:eb:43:a5:f4:52:a5:c1:d1:ab:ab:65:ef:
1a:da:3f:86:7b:87:da:54:eb:9f:28:2c:0d:b0:6d:
95:c2:c6:79:ea:e6:93:3f:bd:10:0c:7a:ea:30:1e:
7b:02:2a:89:f4:78:13:b6:d3:0d:ed:e6:52:74:96:
23:f8:07:ab:dc:19:63:f8:f7:f5:1b:02:87:55:b5:
1f:51:a2:c1:09:5c:56:ca:e3:e7:7d:ce:e9:c5:11:
4e:eb:76:41:20:24:bf:2b:ff:06:7e:f3:e5:66:5a:
fc:9e:69:b7:43:e1:44:cd:da:a8:57:6f:aa:34:ee:
2d:3e:23:31:56:de:79:57:37:ae:93:6e:1c:6e:e0:
e8:9a:ee:0e:63:35:df:c9:f5:da:87:4c:97:4b:0f:
ec:98:fa:c5:d5:84:fc:5a:e2:d2:f6:4e:d7:00:0f:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:43:1A:0B:F5:D7:15:3E:F9:49:33:32:FD:A4:B2:63:55:05:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08CA6AA0152411ECAD055780C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:28:0d:99:ca:1a:aa:2d:9f:c3:72:ff:73:d2:38:5d:86:91:
c0:ec:5d:8f:04:55:67:2a:cf:59:87:6c:59:41:80:7f:ae:e7:
19:75:ff:49:b0:dd:d5:5a:b7:fe:ad:67:62:ba:be:43:c6:cd:
52:11:81:ff:86:af:d8:7f:8a:01:30:c2:29:b9:ec:e7:fb:94:
66:4d:7f:4e:a0:d2:a9:a6:d3:72:af:18:a5:3a:16:23:37:04:
0f:65:19:72:ae:cf:e4:db:06:fb:f5:62:1d:ee:de:ce:c0:5d:
9c:e4:24:b7:9a:d1:99:1d:f4:a1:84:7c:1b:6d:c7:7e:ff:87:
66:b5:d7:5b:df:10:bc:5a:d0:36:89:9a:4b:bf:23:73:55:21:
75:55:72:52:f1:3d:45:a9:25:e8:5c:0e:ef:f3:3b:f1:30:e0:
9e:02:a5:b3:6a:f8:1a:4e:f8:96:04:9a:7c:37:0c:71:5e:f9:
b7:ed:04:35:5b:60:8a:cf:ef:c7:18:f8:67:8a:55:6b:bf:75:
d7:b4:ad:82:6c:a8:84:d1:31:84:04:e6:28:9a:0b:a3:7a:80:
c1:21:98:96:e1:7e:66:49:c5:37:03:0d:64:32:b8:64:48:67:
f5:d5:fa:a2:34:c1:95:32:57:e1:1a:ea:79:e1:aa:9a:8c:dc:
f2:85:5f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org