Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15CD5E76A46011ECA6D7AC4AC4F9AE02.roa
File: 15CD5E76A46011ECA6D7AC4AC4F9AE02.roa (raw, json)
Hash identifier: BwSraHkPHMmB0AwkZD0ieiG0LYD4dkviKGO3KEIcG7k=
Subject key identifier: 75:63:1A:CC:56:A6:C4:B4:17:EA:BE:54:04:CB:39:52:66:AE:1D:0E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5496
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15CD5E76A46011ECA6D7AC4AC4F9AE02.roa
Signing time: Mon 16 May 2022 04:30:38 +0000
ROA not before: Mon 16 May 2022 04:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149533
IP address blocks: 103.181.168.0/24 maxlen: 24
103.181.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21654 (0x5496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d36e-8737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:95:8b:2f:e7:33:6b:8f:a7:bc:f9:9f:2b:
50:4f:ab:12:92:35:a6:23:9f:c9:95:6d:21:55:33:
8b:9e:b9:49:42:75:76:8e:6e:66:02:d7:60:4f:05:
b7:d3:9d:ad:79:53:13:0c:53:b8:cb:1f:0d:bd:cc:
a5:d0:90:8f:05:71:79:47:92:62:a9:f2:49:6c:16:
ed:d8:4f:00:52:77:fc:7a:e4:8d:9a:3e:65:0e:22:
74:a4:c0:ae:f9:31:99:67:7f:1c:4c:b5:bf:54:01:
90:fe:0d:2c:88:3c:16:49:1a:d8:72:2a:dd:fd:f4:
07:ff:21:2b:d4:dc:44:ab:0f:c8:f7:84:5c:e9:1e:
38:37:60:4f:36:e8:2c:40:29:ce:fe:cc:8e:92:73:
22:34:51:ed:c0:09:b2:de:f6:fb:ea:ea:a1:8d:2b:
53:55:70:3f:d1:af:cc:e2:98:f1:5f:ba:97:ce:f7:
1f:3e:f0:6b:8c:ab:1d:22:ad:8c:79:1b:3e:c5:67:
0d:6d:3b:70:64:42:00:8c:68:81:ad:50:46:ab:38:
62:c2:75:52:93:99:da:b2:c2:89:b8:ea:55:44:af:
43:5d:98:30:e9:31:f4:30:80:93:2d:1f:eb:86:36:
01:a4:e0:2c:9e:fb:ff:f0:6d:86:40:2f:19:69:25:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:63:1A:CC:56:A6:C4:B4:17:EA:BE:54:04:CB:39:52:66:AE:1D:0E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15CD5E76A46011ECA6D7AC4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.168.0/23
Signature Algorithm: sha256WithRSAEncryption
54:39:b5:c1:fe:a2:93:e2:8c:8e:e3:05:7b:d0:6a:ae:4c:75:
6d:ac:fc:bd:b9:6b:b4:0a:e0:b1:68:f1:60:f3:8d:96:67:d0:
60:95:9b:c9:be:48:02:66:e4:ef:b4:20:79:fb:c8:ea:32:5e:
9d:a3:b9:9b:fe:57:93:43:27:d8:04:a6:a5:df:eb:e1:c4:81:
f3:1c:c5:9a:a0:da:24:97:3f:42:37:c6:c2:8e:73:7c:f5:4c:
9a:7a:a9:fa:2c:7e:a9:65:0c:db:56:33:3a:cd:0f:54:93:96:
e4:73:75:93:ce:9d:ae:26:c8:9a:cd:32:dd:12:85:3d:16:2f:
8b:d0:19:89:91:f0:44:54:c6:08:33:ac:c3:89:f5:9a:fa:a2:
bf:f9:76:1c:3c:1b:8d:d5:50:2e:55:8e:d1:f4:da:fe:23:f0:
d8:4a:5f:40:7c:b3:e9:ec:0c:eb:08:d9:46:93:cc:ea:6f:b1:
93:b9:82:f4:50:9f:95:be:cc:68:dc:60:db:5f:cf:2b:a7:38:
b4:ad:88:2b:23:6c:fd:4c:99:c4:86:23:f4:98:1f:8b:d1:d6:
34:d5:2c:11:f5:31:0b:f5:4b:32:b3:49:99:24:c6:39:85:4d:
f6:0f:ed:f4:cc:52:c6:00:1c:9f:c4:eb:72:3b:2c:1f:d5:3d:
c3:3a:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org