Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53378CBA036411ED8C788C4BC4F9AE02.roa
File: 53378CBA036411ED8C788C4BC4F9AE02.roa (raw, json)
Hash identifier: n/hKY7kqcJ5ymnBuHNpFn7e8uQGR4LYR217DYANlsj0=
Subject key identifier: 11:9F:0F:4E:B2:00:E8:1E:6A:8E:3C:38:6D:FC:DA:AB:4E:A8:F0:88
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5D92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53378CBA036411ED8C788C4BC4F9AE02.roa
Signing time: Thu 22 Sep 2022 13:11:49 +0000
ROA not before: Thu 22 Sep 2022 13:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150040
IP address blocks: 103.163.60.0/24 maxlen: 24
103.176.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23954 (0x5d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 22 13:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=632c5f14-d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:fc:a2:76:14:49:42:9e:9b:3b:66:6a:0b:
44:ef:99:09:d8:47:87:12:ca:a6:3d:5e:d2:42:ee:
cb:84:25:62:dc:8b:73:53:ef:2c:34:0f:9d:36:0c:
03:61:bd:e1:d6:1b:33:8c:18:51:e4:ab:9e:21:81:
f2:fb:1b:6e:5f:a8:3d:ab:66:f1:47:57:8c:39:82:
1c:99:2f:47:6d:fb:85:61:f3:dc:5c:37:95:38:df:
63:0e:aa:92:b4:95:94:89:62:ae:7e:3e:67:58:a9:
e9:48:bf:dc:d5:98:47:2c:9e:26:0c:46:13:21:6b:
c9:8e:36:b9:3d:99:ee:11:58:48:45:e7:cb:5d:fb:
9e:96:bf:56:64:ca:23:05:54:91:31:5b:f7:0e:53:
0f:93:28:2c:73:97:c6:21:f6:1e:4f:f0:21:53:c6:
62:7b:61:32:cd:30:9d:9c:f8:70:e4:3e:4c:fa:c5:
c8:89:1d:8c:34:16:92:ca:eb:2f:a4:d1:32:9b:27:
7d:ab:a6:95:45:3e:62:b3:d6:91:fb:a7:ee:87:36:
2c:99:cd:21:04:7b:6f:31:d0:23:4c:85:4f:d4:0d:
94:b5:8a:ae:9a:e6:11:86:9c:b1:2e:c2:04:85:2f:
ed:2a:ad:83:7b:10:74:76:96:58:d7:a4:e5:20:d4:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:0F:4E:B2:00:E8:1E:6A:8E:3C:38:6D:FC:DA:AB:4E:A8:F0:88
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53378CBA036411ED8C788C4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.60.0/24
103.176.116.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ed:ec:a0:ed:60:00:2e:96:6f:39:72:9c:5e:1f:e9:06:06:
53:55:fd:c8:aa:2b:5d:c7:6d:28:e8:80:eb:70:48:46:b6:a8:
1d:96:d6:c2:e0:30:33:23:97:2c:66:49:bc:98:f3:4b:f8:6f:
d0:d8:ad:27:b7:3a:05:26:ba:28:fa:f5:a6:5d:58:15:df:08:
6a:d7:fa:4d:ab:42:38:ec:7d:05:c4:4e:a9:11:aa:f9:8b:69:
0c:0e:c0:4a:a7:39:e2:2f:3a:ca:a2:d0:8c:f1:82:ca:28:10:
ea:93:ed:e7:c8:e4:ab:2f:8c:e3:1d:d0:13:50:52:49:95:65:
05:f6:47:21:9b:b2:ee:39:1f:38:65:76:7d:10:27:55:e7:4d:
8b:6c:0f:9d:74:e9:ee:06:7d:53:9e:c7:bb:c3:45:b2:6c:2b:
bc:69:65:d9:22:57:3f:53:87:56:08:f4:23:39:64:6f:0c:a7:
99:12:ad:01:5f:fc:ba:e4:99:20:9b:69:3d:96:e3:b5:96:eb:
a5:b4:49:e6:35:02:58:6f:26:03:35:ea:54:36:af:cb:e8:46:
0f:08:96:73:1a:24:1b:94:ff:5a:56:f7:86:18:8f:87:52:d3:
78:bb:03:09:b2:99:a8:3e:a2:a6:43:b4:c4:d7:4b:41:74:a2:
7c:c3:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org