Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5353DEAAA4F111ECAFBA8D65C4F9AE02.roa
File: 5353DEAAA4F111ECAFBA8D65C4F9AE02.roa (raw, json)
Hash identifier: lKhy5rbjme0EI4E2xqLlocbU7Ofh7qJjnm/zDUmMaPM=
Subject key identifier: 6E:2F:A3:6D:29:EF:5A:C3:F9:BE:11:FC:50:63:66:03:9B:55:B9:50
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4A4F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5353DEAAA4F111ECAFBA8D65C4F9AE02.roa
Signing time: Wed 16 Mar 2022 06:21:33 +0000
ROA not before: Wed 16 Mar 2022 06:21:33 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 146901
IP address blocks: 103.174.32.0/24 maxlen: 24
103.174.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19023 (0x4a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 16 06:21:33 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=623181ed-8def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:a8:8b:a2:55:5b:3a:39:37:a0:1a:36:b9:
ba:a0:bb:75:39:6a:6d:ee:1f:6e:c1:ac:86:7e:9c:
ae:2d:35:fc:4e:a6:44:42:71:31:de:05:dc:3b:b0:
4b:a0:f7:33:aa:42:f0:1e:a5:9a:40:27:c8:54:99:
39:d1:d2:3f:57:09:51:eb:b8:c4:0a:f2:ca:b0:17:
3f:51:01:b8:0f:fe:8e:10:be:15:67:eb:ca:78:a5:
b2:78:29:b6:bb:34:3e:9d:88:78:9a:de:9d:8a:55:
02:36:e2:6e:f3:c9:3f:a4:f7:a9:58:82:0e:37:cf:
1c:16:0e:b7:c5:9c:2e:8f:ef:2c:6e:a8:16:4e:5e:
f3:ab:e3:f5:b3:98:23:49:2b:e8:db:de:98:1d:46:
72:c4:39:0e:3c:7d:11:a7:c1:43:cb:d5:5a:f4:5a:
ca:2b:c5:88:e2:19:1a:61:9f:d0:21:77:4e:b6:6c:
16:4a:40:8a:cc:b9:19:ee:87:e1:c1:fe:56:23:62:
69:5a:da:d5:02:2b:09:f5:12:81:91:09:d7:24:26:
08:62:b7:5f:e7:70:1e:3e:ac:b7:13:8d:8a:21:6d:
ec:68:bb:fd:fd:24:e6:4a:be:b6:20:96:28:b5:8a:
37:fa:43:82:e2:bf:81:b4:e6:d1:d6:e8:74:73:5a:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:A3:6D:29:EF:5A:C3:F9:BE:11:FC:50:63:66:03:9B:55:B9:50
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5353DEAAA4F111ECAFBA8D65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.32.0/23
Signature Algorithm: sha256WithRSAEncryption
00:06:73:3e:e2:45:89:07:d8:d8:14:a9:f1:db:9d:06:94:47:
9b:36:69:2b:16:5c:30:47:0f:bb:c5:71:28:ca:ff:7d:36:fc:
f0:cf:c6:72:64:7b:c4:02:58:86:ad:32:68:f7:7b:90:79:de:
03:b4:c8:5a:7e:d0:d4:ce:bc:9f:7d:3d:72:d2:64:64:e3:62:
cc:5d:8e:32:87:c7:0d:07:55:0c:b6:3c:81:5b:23:55:ff:c5:
b5:10:00:ef:54:19:3a:61:28:e0:fe:0d:5a:04:56:72:6b:54:
2f:f4:ef:c9:c4:13:ca:54:58:e0:73:30:af:0c:f0:48:51:66:
53:15:ef:b9:f4:fa:3c:80:68:dc:b5:d9:84:e7:2d:94:9f:75:
7d:03:aa:45:47:38:f7:89:21:6d:bc:8f:35:84:9b:72:ec:1b:
ec:6b:31:e0:14:c6:d5:fc:19:42:c3:64:15:29:e3:bc:26:30:
69:e8:dc:21:ff:38:4c:66:9e:83:e8:90:ba:25:b8:36:3a:d9:
ce:6a:89:6f:e4:b7:c8:ee:aa:69:dd:8d:06:ea:8b:08:32:51:
e2:73:c8:6c:92:7b:f7:15:d5:ba:2e:e5:50:bd:af:e7:0c:7a:
37:38:8f:e1:cd:46:2a:26:58:e6:b3:ca:7e:b3:50:76:9a:c6:
4b:fb:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org