Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/595FE2B4E2EE11EB9BB67C70C4F9AE02.roa
File: 595FE2B4E2EE11EB9BB67C70C4F9AE02.roa (raw, json)
Hash identifier: /Q5ua4zzChdTW1ORmyXCpHFluALQLKezVFzrSvtPWZk=
Subject key identifier: 99:AB:27:07:09:23:7F:1B:79:56:29:03:86:23:E4:07:13:34:40:83
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 37D2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/595FE2B4E2EE11EB9BB67C70C4F9AE02.roa
Signing time: Mon 12 Jul 2021 11:51:23 +0000
ROA not before: Mon 12 Jul 2021 11:51:23 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132497
IP address blocks: 103.31.144.0/22 maxlen: 24
103.226.84.0/22 maxlen: 24
150.129.28.0/22 maxlen: 24
150.242.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14290 (0x37d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 12 11:51:23 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60ec2cbb-be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:d7:14:2c:74:9d:68:30:fd:46:d8:61:05:
cc:2d:8a:39:79:c1:b7:80:ca:d6:97:8c:6a:a5:ba:
be:4b:d2:ce:66:27:13:a4:c5:bb:ab:47:d8:37:48:
a5:2e:7b:b4:ef:6f:67:ea:03:0d:98:60:84:ff:11:
5e:27:35:b2:91:b4:26:e5:35:d0:45:70:c8:63:91:
32:af:1b:4f:98:59:3d:41:59:ec:b4:cc:d8:2c:7c:
27:7a:86:19:dd:46:b1:29:27:f5:fd:26:56:6a:09:
49:cf:b6:25:f6:8f:f2:f3:4f:a5:ea:5a:ee:65:41:
f7:0c:93:4d:79:58:ad:ab:f5:6b:e1:3c:38:03:2c:
ed:ef:c0:7c:11:45:1c:84:48:4b:17:d8:bf:b4:43:
c2:10:93:0a:b9:8e:d8:ba:d1:10:3d:8b:fb:86:1a:
ed:c8:36:64:e4:c5:1a:43:4f:a6:00:25:e9:4b:10:
f1:d1:d7:81:14:f1:09:d5:95:3c:b2:31:41:35:3b:
19:92:89:c0:6d:03:ee:90:d1:d7:da:26:11:4e:20:
64:aa:48:b3:5c:47:b2:81:98:ee:b6:ad:8e:3c:d8:
39:c5:99:ac:12:a3:bd:c9:c6:5b:85:e0:24:d3:45:
38:48:d7:f1:bf:89:59:7f:ef:5b:8b:15:e7:e0:d8:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:27:07:09:23:7F:1B:79:56:29:03:86:23:E4:07:13:34:40:83
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/595FE2B4E2EE11EB9BB67C70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.144.0/22
103.226.84.0/22
150.129.28.0/22
150.242.196.0/22
Signature Algorithm: sha256WithRSAEncryption
94:82:b7:c4:17:3f:76:f2:5b:4e:4a:3f:02:38:74:b1:62:1a:
54:25:de:c8:c0:f8:dc:5b:06:6c:05:25:eb:8d:1f:c0:61:bf:
ab:51:b4:c6:9b:9a:cc:7d:a8:89:54:99:46:a2:ed:bf:cc:22:
f8:4c:76:4c:90:03:1a:a7:67:a5:70:24:4f:d2:e2:d6:26:8c:
65:69:a4:58:fe:65:f2:be:72:bc:8f:48:3a:53:a6:a2:38:8b:
05:40:ec:65:f2:0c:a7:dc:04:3c:33:10:4e:cf:09:65:56:6c:
f4:f4:25:8d:f0:8c:ab:6b:93:7d:13:89:60:93:a4:81:79:3b:
e6:20:8d:47:65:4c:b0:31:99:5c:b0:6a:cb:49:c4:93:10:16:
20:cb:4e:b7:a2:1a:24:c9:6e:43:a3:52:b3:a4:ee:84:2e:26:
86:eb:fe:3a:5d:5c:5a:9c:9e:59:4f:b4:be:db:80:02:ba:09:
21:87:df:10:23:45:39:49:96:f8:41:0a:d3:1c:be:fc:27:ce:
58:af:3b:eb:02:3a:03:47:bb:b0:d8:2d:be:de:12:ca:4d:1d:
6b:74:b1:5a:26:12:6c:40:ba:e9:ec:74:87:15:54:23:79:b8:
56:7d:0e:5d:88:af:34:17:b6:5d:ee:80:df:d2:45:5b:bc:95:
ee:c9:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org