Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19185E74081E11ED9603FC37C4F9AE02.roa
File: 19185E74081E11ED9603FC37C4F9AE02.roa (raw, json)
Hash identifier: bzxqcgSUuCWGintZinaYUetvyb84BrsRN32czG0ZMaU=
Subject key identifier: 1B:32:4E:63:D1:39:E8:CD:FD:BD:F5:3A:39:E7:54:BC:FE:08:51:22
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 59CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19185E74081E11ED9603FC37C4F9AE02.roa
Signing time: Wed 20 Jul 2022 11:21:28 +0000
ROA not before: Wed 20 Jul 2022 11:21:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134926
IP address blocks: 43.230.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22987 (0x59cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 20 11:21:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d7e538-710f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:4b:6c:5a:21:34:f1:b9:1f:b3:26:c0:5f:
50:97:b5:98:40:d1:9d:55:26:be:77:ce:e3:d4:64:
bb:7f:4e:75:a2:39:07:d0:7b:e7:cd:bd:a1:82:a0:
db:0b:97:84:6b:03:c7:a2:93:f6:b7:7f:fc:0b:7a:
25:56:cb:bd:cb:30:72:b3:8e:3c:28:38:6f:c7:67:
d3:32:d7:24:a3:b0:02:0e:60:b9:20:00:9f:fa:e8:
03:30:cd:90:01:af:de:fd:82:cb:21:2b:9b:65:74:
4e:18:6d:08:99:c1:c2:8d:25:62:06:3a:d5:f5:15:
ae:27:07:4b:46:d7:f9:a8:36:e8:25:70:2a:26:c0:
56:0f:2c:7b:ab:70:f6:8f:0b:25:96:69:50:b2:60:
ee:c4:5a:87:b7:5f:7e:94:b4:80:2a:16:b5:68:c0:
58:e0:86:2f:40:a2:5d:c2:91:63:1f:f8:e4:a1:1c:
33:3b:a0:97:67:72:f2:bf:95:31:43:26:16:f8:fa:
12:12:7c:56:25:05:d3:0e:de:42:83:31:ea:bb:6e:
10:01:31:3b:99:18:85:1a:ca:a3:aa:60:e6:d3:f3:
58:a4:80:32:38:47:5f:40:1d:96:96:7e:95:4c:69:
80:18:b2:3f:51:1a:6c:d0:a2:5c:ef:06:5a:9c:ae:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:4E:63:D1:39:E8:CD:FD:BD:F5:3A:39:E7:54:BC:FE:08:51:22
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19185E74081E11ED9603FC37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.203.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ba:1e:22:22:71:68:e1:62:d3:d6:3e:72:03:a9:87:fc:ef:
32:50:5d:ba:e9:c9:ac:24:13:16:bc:64:42:0a:5b:b4:14:c2:
e2:dd:58:23:ea:d9:09:0c:08:3a:be:4b:a1:9b:bb:d5:f4:3a:
1c:03:0a:cc:02:3f:f8:02:f3:21:e0:4e:15:e5:94:b8:19:6b:
34:cc:7b:73:62:23:39:c4:7e:11:82:d4:49:65:0d:01:13:f1:
b8:48:dd:59:86:4b:2e:a4:29:6a:d7:66:7c:55:ca:d6:88:c5:
d0:e0:9a:eb:a7:80:96:f9:86:fc:04:3e:ef:1c:76:1c:22:bb:
4a:ab:8b:65:85:51:0a:10:82:63:92:26:ec:c2:fa:f6:e9:45:
0d:7c:49:ef:43:9a:d8:57:2c:39:70:81:e0:3b:ef:50:54:1e:
18:70:0c:dd:32:fb:27:64:01:8b:d2:54:eb:3a:56:79:63:07:
35:91:7b:f7:3c:53:dc:f6:97:de:27:d7:ea:b0:26:0f:cc:c8:
b8:c1:9c:30:68:9d:3b:ca:d7:b2:13:ec:04:a5:71:f3:d0:8b:
fa:64:88:1e:38:ba:bd:c6:f7:92:d9:69:01:d7:a6:38:57:27:
22:55:ab:aa:ef:f8:79:90:fe:1c:36:d9:c0:2f:34:4c:fb:d1:
c1:c4:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org