Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/333938BC8F1211EC8F3D0286C4F9AE02.roa
File: 333938BC8F1211EC8F3D0286C4F9AE02.roa (raw, json)
Hash identifier: aTUerjKnlZFo9F/8Bod8CA1oeRauExLK61aiaTINVJ8=
Subject key identifier: 46:9A:9B:9C:FB:00:16:B2:A7:CA:51:9A:B1:60:82:A1:A2:87:B9:8E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 487E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/333938BC8F1211EC8F3D0286C4F9AE02.roa
Signing time: Wed 16 Feb 2022 10:21:28 +0000
ROA not before: Wed 16 Feb 2022 10:21:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132759
IP address blocks: 103.249.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18558 (0x487e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 16 10:21:28 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=620cd027-5a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:de:42:09:00:b9:82:8c:64:95:d2:64:11:
e6:43:dc:78:09:21:9c:4f:eb:00:9f:e8:ed:95:aa:
7a:ec:bc:4f:6c:d9:bf:b5:7f:af:71:e2:a5:ec:b4:
29:a3:d3:6e:25:4a:1c:89:74:1b:c5:08:5a:4d:9f:
a8:a9:e2:4b:24:d5:90:13:76:32:75:fc:86:16:e3:
70:0b:58:88:1c:e4:a5:a4:d7:4b:e8:9d:86:c4:c9:
c7:10:c0:c1:a6:8f:34:c2:a6:cf:d3:6b:84:e6:fb:
5c:87:d4:4c:65:53:5c:a5:1b:ec:67:db:f6:81:55:
0e:97:4d:0b:43:9b:e8:05:d9:bd:11:e7:fa:39:22:
e4:35:22:cb:4c:d8:03:33:8d:a0:35:f7:a5:31:f7:
bd:a4:61:45:c9:7e:6a:42:6a:d5:a6:3d:d6:7f:02:
6d:7f:a2:5d:e8:21:19:98:6d:51:51:1c:78:ed:fa:
15:5a:cd:91:12:e8:f7:3a:f0:58:74:17:60:57:15:
a7:ab:82:47:b9:84:96:03:13:50:e1:db:c2:92:7f:
35:04:6f:2c:b3:e8:ae:ae:d5:41:42:7f:02:ef:6c:
c3:20:10:71:a8:71:b4:54:5a:21:fe:0b:d4:0f:ac:
a7:ca:bb:a3:43:0f:bc:9e:5f:1b:15:4e:38:02:d0:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:9B:9C:FB:00:16:B2:A7:CA:51:9A:B1:60:82:A1:A2:87:B9:8E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/333938BC8F1211EC8F3D0286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:82:10:37:3b:00:e9:be:c4:01:53:88:e2:ae:da:43:f3:a5:
68:9a:60:3e:36:4b:7a:ba:c8:ae:0d:fe:c0:05:41:6d:c2:9b:
d7:01:7c:c7:f6:be:51:37:25:db:9d:b1:d8:ab:d7:c1:26:a4:
14:9b:57:ed:fe:b8:b5:28:b8:9f:36:6b:06:e1:ce:c9:c2:13:
1b:97:de:5a:99:9e:ed:4c:90:a8:dd:ef:88:32:9e:52:5a:fa:
63:d6:b9:85:ab:0d:a1:ac:55:99:3f:9f:41:13:7c:f6:fb:8e:
97:8a:6e:05:83:98:96:97:0c:d5:0e:47:e9:31:e7:a6:dc:91:
28:34:29:9d:1a:9b:f4:b7:25:9d:74:4c:40:15:5f:58:80:3b:
4b:e2:30:94:71:b9:88:cf:bc:ec:e1:d9:c1:ea:2a:37:b7:cb:
87:06:9c:99:2d:94:2f:e2:f4:52:1c:f8:2b:c3:75:62:5d:06:
b4:ba:d9:25:d3:a2:48:15:69:ac:0a:a1:60:4c:10:a0:3f:87:
8a:d6:5d:de:f6:03:5e:e9:6a:60:41:30:76:f6:9b:14:e5:c3:
88:b4:82:ba:03:80:e7:4c:1f:6e:0b:c9:f2:6e:f3:99:81:e4:
ed:66:04:98:2d:68:fe:df:60:23:c1:b4:a9:ad:be:08:fc:7c:
19:bd:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org