Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A7496FE6A0311ECB6A4F128C4F9AE02.roa
File: 4A7496FE6A0311ECB6A4F128C4F9AE02.roa (raw, json)
Hash identifier: LBddhWtTucbgAWMT/RItZybPsMWZZ2tPXEvFGzdpjwE=
Subject key identifier: F2:2B:F0:86:7B:74:31:18:84:90:30:5A:B5:A2:F0:C3:89:EE:78:B9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5464
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A7496FE6A0311ECB6A4F128C4F9AE02.roa
Signing time: Mon 16 May 2022 04:29:45 +0000
ROA not before: Mon 16 May 2022 04:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149211
IP address blocks: 103.169.79.0/24 maxlen: 24
103.178.128.0/24 maxlen: 24
103.178.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21604 (0x5464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d339-d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:26:e0:bf:8c:d8:fd:f5:eb:c4:84:57:c5:
99:b7:eb:86:47:c7:65:17:e8:83:a9:57:a6:b6:60:
94:d9:c1:8c:84:8d:b9:69:c6:72:5a:d7:f2:c3:2a:
87:ff:57:35:58:16:8e:35:1d:14:6f:2d:ba:2b:d6:
7c:3b:c0:5f:a7:8e:8f:15:47:bd:e2:d7:1e:ed:53:
bd:98:5f:36:0f:1e:7d:9b:b5:9e:ed:af:85:4b:b1:
1c:84:38:8f:23:17:49:8b:d7:b5:a4:d9:88:35:47:
48:34:71:7d:26:ff:8d:65:bb:30:77:79:34:83:bd:
cd:b4:fa:82:49:4a:cc:9e:29:56:07:d9:8e:7e:b7:
1d:f6:01:58:aa:e5:a0:2e:a5:bf:c6:f7:01:01:92:
23:d8:1a:84:8d:c9:e9:bb:8f:56:28:51:ec:60:03:
58:ae:cf:08:60:e7:7e:f4:17:cf:61:7b:b5:d9:92:
3e:52:77:4d:25:5f:db:f7:3e:94:bf:9b:8f:24:3e:
00:99:47:5c:b5:c2:d2:ab:aa:70:25:ea:ab:ae:6d:
ee:80:8d:89:b7:14:c7:af:42:45:25:bb:bb:6e:21:
00:55:a5:f0:22:01:fa:91:27:ae:ac:5b:d9:44:37:
98:62:e2:2d:5b:e3:78:c9:3c:b7:fe:10:06:bd:0f:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:F0:86:7B:74:31:18:84:90:30:5A:B5:A2:F0:C3:89:EE:78:B9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A7496FE6A0311ECB6A4F128C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.79.0/24
103.178.128.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:68:bf:46:1b:c2:1e:b1:f0:38:72:5f:a7:cb:9b:55:84:5e:
e5:4e:15:b2:da:e5:3d:10:3b:73:e8:fa:4e:10:10:1c:a9:f2:
26:91:d9:af:a8:3e:5f:79:71:7b:99:5f:a4:88:0b:9b:4a:e3:
7d:4e:31:74:cb:d8:ce:35:b2:3b:7d:ea:a2:16:33:e9:19:1d:
b5:ab:3c:54:86:d7:fc:e7:74:f8:db:83:1c:54:df:14:51:60:
db:61:60:57:33:66:d8:63:2b:be:7f:1e:38:e2:54:76:2b:6f:
b0:ea:4d:be:31:6b:9b:21:54:d9:bb:b8:fe:f5:21:40:4a:60:
53:b5:c2:9f:b3:10:28:77:a5:51:3c:0f:e3:9f:75:14:27:7f:
fe:ec:79:1f:ba:67:82:1b:41:24:43:5b:1b:25:ae:8c:b2:bd:
07:ba:b4:42:b5:85:bf:39:60:6d:b7:74:bb:98:21:83:d8:38:
31:0a:dd:7a:a7:87:c5:ad:46:6f:1e:45:ef:08:e9:9f:3d:81:
f0:32:fc:5c:0f:0b:aa:40:d7:ee:49:97:a9:53:5a:86:2e:ed:
ae:1d:e7:1a:ec:b0:42:4c:c2:dd:13:45:5e:ae:42:4e:35:d6:
18:c6:9c:ae:83:1a:2a:99:8f:dc:88:49:57:88:35:55:b1:e8:
d4:83:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org