Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CD09C80753011ECB80A405BC4F9AE02.roa
File: 4CD09C80753011ECB80A405BC4F9AE02.roa (raw, json)
Hash identifier: /WQdD26vVi0GvEKZTRjFeQupEgGhUTAuFuAjjtRD37E=
Subject key identifier: 79:9D:F8:82:45:28:5A:3A:A4:5C:EE:36:75:25:99:97:39:6A:A2:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4FEE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CD09C80753011ECB80A405BC4F9AE02.roa
Signing time: Mon 16 May 2022 04:08:34 +0000
ROA not before: Mon 16 May 2022 04:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134882
IP address blocks: 103.179.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20462 (0x4fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ce41-ce50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:28:6f:c2:b2:83:c6:3e:ee:15:ec:1e:c1:
5f:c0:db:01:7f:30:13:db:27:3d:83:5b:6d:08:77:
01:92:c5:64:8a:b9:ed:a8:ee:ad:46:82:d2:07:4f:
50:8d:c0:15:c1:5e:fa:fd:cf:2f:5b:32:4c:57:ff:
e9:77:b2:06:34:11:b0:77:b2:a0:c3:37:dd:41:84:
08:f8:93:85:9a:62:46:d2:b5:69:be:e0:1a:50:e1:
cd:70:67:b6:c0:e1:74:aa:3c:6a:94:d4:fd:e2:30:
b5:f0:d7:bd:07:bf:d9:30:2c:47:3c:3e:82:8d:19:
c8:6d:47:19:60:09:4f:8f:5b:07:6d:d3:6a:13:91:
69:9b:ad:f4:6c:1d:9c:33:22:70:ac:b1:a0:23:5a:
52:14:8c:64:47:8d:00:5e:d2:59:90:58:2a:9c:68:
ec:1c:97:7e:e9:83:47:e1:e2:28:f7:7f:ac:32:83:
54:fe:2f:75:61:52:54:35:66:f4:87:22:3f:94:40:
21:37:76:5c:e6:1c:47:ca:2a:68:5c:39:82:61:b5:
d2:fb:4d:ab:0d:ae:90:a2:5a:59:6c:c7:ce:3c:63:
61:94:47:27:34:cf:55:f0:77:ce:b1:71:2f:33:d9:
f1:72:5e:b1:ef:b0:16:cb:9a:8d:9d:ab:fb:d5:8b:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:F8:82:45:28:5A:3A:A4:5C:EE:36:75:25:99:97:39:6A:A2:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CD09C80753011ECB80A405BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.122.0/23
Signature Algorithm: sha256WithRSAEncryption
65:0d:3a:29:e2:ab:1a:60:cb:13:ad:d5:c2:37:34:95:e8:79:
73:15:ff:e6:e2:36:0c:90:11:af:a2:a0:0e:65:49:8b:e7:d4:
30:47:86:38:de:a2:c3:06:ce:bc:88:e5:b8:18:ae:35:27:d8:
be:e5:b4:e2:61:dc:10:e1:11:8a:79:ad:e6:aa:61:db:62:47:
0c:36:fb:92:f2:cb:4f:b2:b0:3d:69:23:0b:30:5e:da:c1:6c:
6d:b0:7d:17:f2:df:4b:e1:71:c9:e4:1e:09:a6:95:75:fd:dd:
e5:cf:78:c3:c5:1c:53:b0:84:65:18:69:55:6c:3a:92:77:f0:
7d:26:30:1f:6b:a9:14:49:46:ce:a3:7b:ad:3d:bd:b7:32:17:
5c:a8:a7:ce:c5:31:d3:d5:10:a3:bf:78:16:57:7f:a1:84:38:
a7:83:2c:22:4c:67:a0:8b:c7:c6:e6:d9:c9:b1:ac:a4:3b:7d:
7f:ab:48:b2:51:3d:3a:a7:4c:fc:d6:d9:b6:c1:f5:e8:ec:e7:
72:95:aa:ff:ef:0e:6b:9f:75:6c:10:c6:82:de:72:48:b6:a5:
3c:41:f8:fc:c8:78:cf:d0:f6:e3:17:8f:f8:39:b3:f7:a4:3e:
3a:ae:e4:ff:ff:b4:e8:a4:5e:93:e4:ae:13:0c:f0:76:dc:8a:
17:e7:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org