Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C471EE48B1911EC98B1252FC4F9AE02.roa
File: 3C471EE48B1911EC98B1252FC4F9AE02.roa (raw, json)
Hash identifier: ufvemF07FuRQgIxfvpfcei4cHpv4UdNxFYBV3e7tGp8=
Subject key identifier: 3A:FC:1D:50:A8:06:CD:9C:5E:C6:7D:02:6A:FF:C5:AA:84:AE:5B:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 481E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C471EE48B1911EC98B1252FC4F9AE02.roa
Signing time: Fri 11 Feb 2022 09:01:44 +0000
ROA not before: Fri 11 Feb 2022 09:01:44 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141293
IP address blocks: 103.159.182.0/24 maxlen: 24
103.159.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18462 (0x481e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 11 09:01:44 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=620625f8-5302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:f7:23:2d:b2:94:3d:6a:e0:94:e2:56:ea:
5d:58:9a:ca:93:09:4a:cf:bb:39:62:6e:13:53:84:
f5:8e:9a:38:85:cd:cf:8b:6d:4c:10:74:b6:8b:67:
d1:6d:05:a0:6f:5e:ed:ef:62:77:b9:58:cd:0f:a4:
37:70:34:83:b4:9c:94:99:aa:e4:30:df:89:5c:9a:
75:cd:d5:98:63:68:77:10:c3:88:52:5b:0a:42:f3:
56:d5:37:0f:2b:5e:49:02:60:f1:09:c3:ae:b1:30:
38:cc:55:53:66:fd:2a:8c:e3:8f:1a:00:d0:67:8e:
0d:0b:8e:65:54:fa:8a:93:43:75:c1:e3:f3:22:9d:
f9:c7:01:dc:57:a2:dd:b3:65:cc:88:bf:1a:b3:19:
6d:e3:dd:ed:3e:85:28:e5:ac:d0:13:1d:16:8d:a3:
fc:64:b9:80:37:35:2f:8c:e6:58:40:c1:e2:7b:ca:
ba:89:1b:bb:9d:32:ed:91:6e:e2:93:72:fa:22:2e:
fa:cf:6b:75:a1:8f:43:61:77:fe:a5:61:a3:e9:71:
cc:15:75:0d:5d:ae:5d:bc:19:ca:3e:9f:7e:61:2a:
ad:83:34:3b:84:8d:f4:68:c2:c2:59:6b:86:89:8a:
86:52:f2:a2:6c:c4:2e:7d:6b:5b:6b:2b:02:6e:d0:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:1D:50:A8:06:CD:9C:5E:C6:7D:02:6A:FF:C5:AA:84:AE:5B:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C471EE48B1911EC98B1252FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.182.0/23
Signature Algorithm: sha256WithRSAEncryption
20:1c:92:45:6e:94:18:d1:b0:03:95:d0:2f:4f:f9:76:8e:a4:
74:10:b5:40:89:8b:b8:4a:64:f6:7a:0f:7e:0f:d9:5c:47:16:
41:9c:37:6e:d1:14:2f:98:98:a0:0e:14:54:64:98:06:37:88:
47:cd:52:46:f0:9e:2a:55:c6:45:a4:4c:78:02:0f:fa:16:36:
19:e8:6b:47:04:05:8e:1b:29:1f:d9:f8:7e:b9:f5:94:40:80:
ec:64:76:50:fa:7d:9b:09:dd:5b:55:c2:bd:f5:8b:be:df:7a:
de:e6:0d:ba:39:c4:f7:4b:57:05:50:11:e1:ce:4f:e2:5c:4e:
7c:95:86:65:fe:63:b5:b6:d4:c2:f9:fa:8e:6f:3a:21:95:67:
4b:64:7e:6c:14:04:77:c8:b2:41:67:99:3e:da:b0:e6:04:f2:
ed:ff:14:4a:f9:71:de:11:7e:13:23:bf:ad:3c:30:a6:b1:39:
db:b2:a4:16:cd:f9:36:3f:a9:bf:73:3a:4c:10:fe:36:71:55:
05:12:db:19:3d:2b:ee:f0:71:ca:f5:99:20:12:e5:a2:42:0f:
d9:ca:30:77:3a:b2:06:cb:82:68:04:a2:0d:e0:b4:70:8f:cb:
82:1e:2c:88:eb:36:32:66:ee:a2:56:ca:30:1e:24:6f:71:31:
d1:dc:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org