Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/430CAA66227C11EB8F65163EC4F9AE02.roa
File: 430CAA66227C11EB8F65163EC4F9AE02.roa (raw, json)
Hash identifier: FW1S1vvSAhg7A7omkXYypCuHZVovIv/176k7ilZSETo=
Subject key identifier: 81:85:26:42:BC:04:52:84:C3:CA:53:D2:CF:F4:59:93:4B:93:4B:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 52EC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/430CAA66227C11EB8F65163EC4F9AE02.roa
Signing time: Mon 16 May 2022 04:22:50 +0000
ROA not before: Mon 16 May 2022 04:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141326
IP address blocks: 103.82.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21228 (0x52ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d19a-277f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:03:7e:a2:06:bf:62:7a:9b:72:d2:de:e4:
0e:2d:fe:aa:e5:74:86:37:b7:1d:29:b1:40:28:e4:
35:8a:25:17:8f:da:8a:b0:65:eb:ab:fa:3a:98:c6:
1f:32:c7:ac:7c:c0:d7:7d:eb:8b:24:9f:f3:38:e2:
28:0a:58:c5:ca:2a:89:eb:e3:a0:fe:ef:ed:9f:d6:
de:f9:19:40:a2:9f:ee:94:59:97:01:d1:d9:ca:13:
ca:9e:44:ef:e9:a8:3d:97:dc:7a:59:cb:ba:f6:cf:
6c:f0:91:75:af:22:a2:4e:2c:1d:bd:20:7a:58:14:
90:69:e6:b5:db:fe:2e:15:b1:2a:d4:2b:1e:c3:4b:
f7:80:0d:7a:40:47:ff:28:24:7c:a9:ac:33:52:93:
0f:9a:9e:44:9d:d7:63:b9:0c:8e:55:6d:ba:b6:87:
c6:f8:97:1d:14:e4:42:0c:03:18:68:e9:7b:84:6e:
7b:f6:c3:92:28:10:b4:87:96:c7:b7:f1:1f:33:00:
7b:eb:89:49:43:1c:58:d4:8a:b7:8b:56:15:e6:a0:
0a:59:a5:36:4d:66:19:f8:f1:ee:a4:58:cb:9a:bc:
56:6d:f9:e6:4f:81:9f:02:26:af:27:61:ca:5c:15:
20:08:0b:00:b3:fe:9e:b0:6e:5c:5c:bc:ce:ee:86:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:26:42:BC:04:52:84:C3:CA:53:D2:CF:F4:59:93:4B:93:4B:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/430CAA66227C11EB8F65163EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.72.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ea:22:2d:7b:38:83:a7:46:e0:75:1c:0d:d2:e5:4a:86:96:
7a:01:05:76:f8:c7:6c:c7:2d:fe:67:4a:c4:25:42:de:ac:0b:
f5:be:ce:ca:40:21:bb:a3:c9:e2:06:c6:9e:09:6a:cd:69:df:
fd:30:e7:39:1e:fb:c4:dd:45:f6:7b:e8:2e:ce:13:de:8a:58:
86:58:22:12:90:48:38:6e:0f:51:d9:dc:e6:45:47:73:8b:e2:
66:cf:99:50:bf:16:76:5e:58:43:07:c0:fb:97:71:00:ca:38:
5c:88:32:f8:5a:83:c6:b4:d0:e6:b5:d4:62:90:7d:35:d8:08:
5b:83:61:d8:7c:89:f3:83:fd:bd:28:77:c3:7b:22:bf:8e:aa:
25:ae:f2:c9:08:d2:95:55:da:f8:12:4f:cd:dc:d7:08:4e:c4:
70:c5:13:d3:3c:a4:82:ed:f2:be:c9:93:df:e4:ee:70:5f:89:
71:29:42:4d:15:05:c8:5e:13:42:ce:45:52:e2:02:5b:1b:86:
b8:50:31:89:f9:6e:2c:73:97:f3:21:29:f7:eb:78:fc:6f:e0:
02:d1:1f:6f:82:80:ce:21:00:3e:0e:12:e0:62:35:e3:60:dc:
0f:45:a0:da:56:2b:2d:f6:4c:28:6d:ef:2a:7f:36:3d:be:d6:
b1:27:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org