Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5711BC2EF83E11EC926CBF53C4F9AE02.roa
File: 5711BC2EF83E11EC926CBF53C4F9AE02.roa (raw, json)
Hash identifier: klYae8v9z5KCitkvdIR0fROqv2PUVY6gLkfvqob1QmI=
Subject key identifier: E1:D5:31:84:9C:18:E6:C4:79:F5:E7:0E:4A:55:1B:5D:07:77:97:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5AF3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5711BC2EF83E11EC926CBF53C4F9AE02.roa
Signing time: Mon 08 Aug 2022 05:21:33 +0000
ROA not before: Mon 08 Aug 2022 05:21:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149601
IP address blocks: 103.83.86.0/23 maxlen: 24
103.189.86.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23283 (0x5af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 8 05:21:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f09d5d-044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:5f:25:2e:2b:7b:4e:56:c3:b0:6f:97:a6:
69:46:32:30:cc:62:19:df:1a:11:cc:72:c5:e4:3b:
99:8b:36:b5:f4:4f:e6:1e:f4:02:4f:01:6e:11:76:
74:ae:5d:7f:70:84:d3:d9:6a:7f:9d:c2:68:b0:19:
91:25:a8:a1:47:7d:55:b7:9a:67:d3:95:5b:96:18:
1c:8b:ef:71:40:fb:6a:4a:84:d1:cd:11:eb:d8:43:
d7:96:43:cd:8c:50:49:05:57:8a:8d:41:c9:8f:3d:
11:7d:47:7b:59:0f:c7:d0:1a:79:12:a6:1a:2c:e0:
7d:3f:07:26:f4:a6:e3:ec:60:d0:27:14:98:7c:12:
33:07:1f:8c:47:a7:32:d8:2d:8e:e4:fa:5d:01:ae:
f7:59:17:b0:50:6e:24:ef:4b:23:c7:c1:ab:17:de:
60:4f:46:be:5c:7b:8c:e7:e9:40:26:31:33:a7:00:
96:29:a1:f9:e0:7c:4c:ae:82:30:5b:e5:39:dd:12:
82:b0:89:86:2c:a9:55:49:35:3d:84:09:74:2c:6b:
1e:4b:ef:cd:04:46:d7:73:69:b3:70:c0:da:17:0b:
7c:2e:9a:3d:39:06:4b:15:8b:cf:e5:b2:4b:72:6b:
81:f3:09:05:2d:b4:be:c0:db:ee:ff:f9:d4:61:2b:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:31:84:9C:18:E6:C4:79:F5:E7:0E:4A:55:1B:5D:07:77:97:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5711BC2EF83E11EC926CBF53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
103.189.86.0/23
Signature Algorithm: sha256WithRSAEncryption
59:96:73:61:d0:e8:84:b3:67:b6:0b:b1:c9:7b:03:d1:7f:a3:
f4:55:0c:32:90:50:ef:60:82:42:69:c8:bb:cd:85:59:6b:f4:
61:20:97:18:49:2d:84:d4:3e:b7:da:81:56:5a:81:28:33:51:
b4:b4:1c:96:bf:3c:5e:80:a7:2a:4b:ce:5f:f8:71:bd:88:5f:
cd:ef:1a:d3:5d:36:97:5d:b4:8c:f1:87:29:32:6e:3a:50:44:
55:18:c9:5a:4d:47:20:e9:17:ca:8e:71:46:e2:3a:79:06:16:
2a:c1:11:b2:89:10:01:48:37:bb:db:dd:96:8b:13:b7:94:68:
bf:d1:a9:91:ea:fa:97:46:a7:30:94:56:0b:a9:8e:25:4f:46:
78:7d:74:48:0e:ad:e5:8e:ae:63:fe:65:24:aa:fb:71:44:05:
c2:9a:c8:4a:6b:9e:77:a7:a4:2c:1b:b2:ab:95:b1:d3:0b:72:
d0:1f:fd:10:fb:51:ee:d2:9a:e7:3d:6f:dc:bf:c6:64:38:03:
ff:ac:c8:5a:d2:e5:5c:c8:19:18:34:84:43:0a:0c:1b:a5:7d:
1c:0c:af:2f:34:84:16:d0:02:37:18:1f:98:0c:9f:d4:eb:dd:
c1:74:39:85:9f:c6:e6:6b:85:03:aa:02:fd:24:cf:bd:e2:14:
b2:e9:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org