Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A351C341E8A11EBA07BB432C4F9AE02.roa
File: 3A351C341E8A11EBA07BB432C4F9AE02.roa (raw, json)
Hash identifier: unwWjxW8Tfe4opA7LbUrg1O5vXCnNfohQgDMZmQe1SM=
Subject key identifier: 17:64:27:82:DA:0D:FF:D8:39:01:96:74:33:12:4B:2B:2C:8F:A0:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3276
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A351C341E8A11EBA07BB432C4F9AE02.roa
Signing time: Tue 25 May 2021 16:16:42 +0000
ROA not before: Tue 25 May 2021 16:16:42 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141249
IP address blocks: 103.157.226.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12918 (0x3276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 25 16:16:42 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60ad22e9-50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:16:5c:2a:95:1c:3e:f9:7e:99:38:44:b3:
80:63:3a:55:fb:cf:9f:b8:4f:2d:44:c5:e2:28:f7:
06:22:0c:80:f4:34:8d:f3:0d:93:ec:03:5a:19:dc:
64:59:1b:5e:81:6c:c0:45:42:a5:82:e1:29:03:08:
22:96:c7:b2:de:cd:78:8b:10:1d:72:f9:9d:cb:d2:
75:e0:6e:e6:2a:35:f1:ff:35:61:c6:0a:ac:54:4d:
0d:e8:1c:7a:cc:da:44:a7:77:4e:a7:bc:7b:30:3a:
c7:a1:62:0b:8f:ab:99:b3:1a:03:30:f4:a9:8b:04:
d9:60:9a:0c:16:28:b6:06:3c:25:3f:ab:2a:67:46:
01:49:ea:38:97:a0:82:73:2f:e9:63:25:12:c4:b5:
4f:38:42:79:98:eb:4e:63:92:ed:c1:bf:bb:62:db:
0d:cb:07:53:b9:80:4e:aa:60:e1:57:f0:84:db:58:
82:ce:82:76:58:1c:8b:ef:fd:87:0c:9c:ec:df:e4:
fb:f6:7f:04:0f:86:95:2c:7c:19:ac:fa:2f:fd:cc:
59:52:2e:73:89:a6:f2:f0:ad:db:76:a3:45:56:34:
7e:2e:93:8f:9b:d1:1b:23:c1:8c:77:8c:98:61:26:
16:ec:29:ca:0c:0d:14:44:a3:d5:63:99:b2:ba:5d:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:27:82:DA:0D:FF:D8:39:01:96:74:33:12:4B:2B:2C:8F:A0:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A351C341E8A11EBA07BB432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:d6:6b:07:41:3c:f9:96:72:79:a5:c4:f3:64:35:9b:6f:84:
3d:56:e4:bd:b7:3b:bf:9a:e1:b2:24:a0:4b:ae:2c:0b:96:f2:
f4:46:f4:87:af:bf:32:5d:cd:a2:0e:d6:a4:f8:1d:bc:bd:ef:
3c:d7:92:0a:5f:d6:da:ca:ec:07:60:7b:7e:36:d1:73:b6:81:
52:ea:2b:b9:fe:ee:c6:69:6c:18:41:fb:34:ea:9e:bb:54:7b:
8d:67:1d:a2:ac:ed:a7:96:5c:58:f6:a2:33:f1:fc:78:3b:76:
95:11:4d:d2:c7:73:b0:eb:4f:29:6c:67:39:48:76:ca:7b:e9:
ea:41:14:3d:a7:c2:f9:34:86:8e:33:c6:e2:03:ff:cd:95:1f:
d4:5f:73:64:35:e1:85:db:2d:65:08:6b:d0:fa:5f:50:fb:92:
ed:03:e2:0a:e3:65:a0:2f:4e:a4:2a:40:1b:14:5b:3e:ab:6f:
06:3d:03:04:e7:62:e9:ce:e0:d2:ac:d4:2e:80:72:63:42:71:
e9:3a:b1:24:08:a7:aa:08:ca:3a:38:ab:33:58:6a:17:8d:a2:
20:3c:54:e9:4b:23:34:07:08:36:80:9b:32:ac:e8:02:a6:18:
37:3b:e9:b6:24:e4:e8:fd:67:a8:78:77:34:ef:b3:c9:b5:1e:
af:01:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org