Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4188FDE4E48611EB9FE3280BC4F9AE02.roa
File: 4188FDE4E48611EB9FE3280BC4F9AE02.roa (raw, json)
Hash identifier: ysVSnqUdrokeYzahw6OeRQHMaxGAeNPByzE42N6OWzI=
Subject key identifier: 47:FC:1A:B0:F2:F5:D7:05:FC:9B:17:BC:3D:53:B7:F9:69:C7:7F:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 37F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4188FDE4E48611EB9FE3280BC4F9AE02.roa
Signing time: Wed 14 Jul 2021 09:31:25 +0000
ROA not before: Wed 14 Jul 2021 09:31:25 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137609
IP address blocks: 103.117.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14327 (0x37f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 14 09:31:25 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60eeaeec-6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:1f:18:e7:d9:a5:a9:23:4d:6d:c0:84:24:
38:0f:2c:a5:67:5b:0c:ca:56:87:b3:81:c4:a5:b3:
b9:0e:5d:49:9a:5f:4c:16:4d:a7:ac:e3:46:28:8e:
be:e6:9a:1e:95:c1:69:b6:15:b5:3e:93:38:c2:d8:
ec:8f:c7:ea:af:29:ff:40:a1:f8:ec:05:85:12:75:
70:f1:a9:23:82:c4:3e:5a:67:4a:fa:77:55:1e:cd:
ef:99:e8:94:8d:34:c9:10:9c:40:09:ae:38:82:57:
03:74:87:85:a2:6f:cb:f7:14:58:29:59:7b:8a:63:
d1:1b:c1:4f:fe:af:ef:3d:91:ce:e8:af:7d:40:08:
93:7b:58:36:a5:e4:8d:dd:54:54:b6:31:9b:0f:c0:
fe:08:1a:8f:79:68:c6:7f:6a:af:17:a6:88:4a:68:
50:9f:57:27:3b:3b:db:52:0f:1a:f1:f3:85:27:b6:
73:e9:bd:6b:c6:9b:52:eb:5e:7a:34:b7:af:75:73:
1f:75:64:59:a3:4f:32:90:ad:c8:25:e3:67:f5:9d:
e9:33:1f:e0:16:df:de:d7:0e:ca:bd:97:7c:2c:f4:
b1:64:7b:15:99:80:9e:ae:c5:37:b1:d7:01:47:9e:
70:7c:3b:aa:29:45:06:17:13:e6:6b:75:64:ce:04:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:1A:B0:F2:F5:D7:05:FC:9B:17:BC:3D:53:B7:F9:69:C7:7F:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4188FDE4E48611EB9FE3280BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.32.0/22
Signature Algorithm: sha256WithRSAEncryption
28:dd:58:82:00:ee:d4:4a:8e:5c:50:be:21:d3:05:bc:5c:a7:
2d:73:70:3a:dc:dd:38:11:04:9f:d1:39:fa:84:8a:72:eb:3a:
59:1b:f6:ef:6a:bc:e6:2b:54:60:e8:6e:2b:5c:d6:13:02:19:
53:e3:f7:22:e3:fd:00:cd:ba:8c:1c:90:9c:9e:61:a6:63:95:
32:fa:05:03:40:9a:77:40:0b:4d:87:56:65:90:fc:e8:65:91:
ce:8f:ff:d8:5b:1c:67:77:17:fe:df:30:4f:a5:e3:c2:0f:f3:
0e:27:69:ce:26:fe:e9:50:2b:70:59:d7:e7:cc:47:53:7f:6f:
59:89:29:eb:f5:4a:02:09:5c:4a:18:14:fa:5c:68:1d:fc:10:
4b:18:c6:b5:bf:9d:86:2a:c1:5c:a4:0b:77:27:ad:27:91:32:
fa:4f:a5:a2:f2:6b:41:14:c9:34:0e:4e:e1:e2:71:fe:22:ae:
61:c3:27:d2:5d:db:92:a3:a8:4d:2f:58:ad:e3:db:22:5a:df:
9c:be:1d:e9:45:be:30:c0:70:6f:87:fb:b9:ef:6b:9c:ca:4b:
ea:c1:21:df:c7:9a:5b:ff:2a:1c:43:cb:39:2d:07:74:6d:39:
9c:a6:85:0b:9a:36:88:94:75:5d:19:c9:ef:58:d5:d0:03:f0:
a1:5c:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org