Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/660BFB84437811ECA9E5F371C4F9AE02.roa
File: 660BFB84437811ECA9E5F371C4F9AE02.roa (raw, json)
Hash identifier: H+gWgiRsR4Vvw+TKkKl51eIvI96QyNPUhWjs6s387sg=
Subject key identifier: DA:52:EF:05:66:54:52:42:F2:8C:F6:54:57:0D:72:A0:18:BA:EF:2C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 40F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/660BFB84437811ECA9E5F371C4F9AE02.roa
Signing time: Fri 12 Nov 2021 05:21:33 +0000
ROA not before: Fri 12 Nov 2021 05:21:33 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137595
IP address blocks: 103.119.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16631 (0x40f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 12 05:21:33 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=618df9dd-78da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:6d:79:c2:a9:ce:5a:a3:22:ec:71:6a:19:
ec:01:12:df:a9:55:cf:da:82:a8:28:d1:d0:23:ec:
cd:df:cf:70:7b:61:ff:44:90:1a:f8:17:1f:7e:4b:
60:53:25:76:e2:2a:aa:61:d3:1b:29:06:22:8b:87:
32:98:2d:c1:83:e8:de:6a:6b:6b:c3:94:a5:28:94:
7f:9f:14:c0:ae:71:12:8d:f2:ab:aa:0b:94:e3:9d:
b8:2f:61:52:a4:8b:31:7c:9c:7c:43:0d:97:06:79:
e6:e0:2a:47:19:e7:53:f2:71:34:70:60:ba:52:95:
b6:e6:67:07:af:da:09:60:6b:8b:d2:2c:8c:b4:97:
12:af:97:53:18:16:1a:f1:ac:b4:f0:a6:66:b6:ff:
80:e7:95:64:89:a3:79:42:55:73:01:3c:82:b3:f3:
4c:ae:e7:2d:60:79:14:b8:87:7c:ad:27:74:bf:71:
30:af:e3:ba:6a:0e:0b:dc:ba:ff:c9:5f:25:66:06:
a5:60:9d:6d:a2:7e:9a:61:72:cc:fd:24:50:99:c9:
b2:d8:ad:9a:90:d9:d5:63:15:3d:e7:99:fb:c6:77:
e2:d1:db:93:a2:bd:64:59:ad:9f:8d:67:1d:62:3b:
4f:f4:0a:2f:4a:ac:ba:01:04:6f:c0:1a:5c:1f:df:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:EF:05:66:54:52:42:F2:8C:F6:54:57:0D:72:A0:18:BA:EF:2C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/660BFB84437811ECA9E5F371C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:3e:fe:e2:96:fb:35:71:ce:90:fb:f6:f2:6a:02:d0:66:f7:
29:04:44:94:e3:b6:9c:10:1b:e7:e5:1a:4a:ca:0b:34:ac:d2:
9f:31:f0:62:92:8b:1e:a0:63:08:9c:9f:23:f4:8f:d2:5f:39:
e9:0d:16:4a:6c:f5:e6:a8:69:25:bf:ef:1e:e5:46:d3:db:ca:
91:74:75:ef:cd:57:1e:03:6f:cf:eb:bd:cc:b4:55:01:9e:fa:
6f:49:4e:73:dd:24:d2:5c:e6:29:1b:88:e8:d1:44:45:08:df:
46:f4:3a:11:31:7c:c2:e7:eb:e6:1f:f7:96:68:8a:15:6f:f7:
4d:b5:a2:17:87:10:02:ba:ca:0f:ef:f9:e0:78:34:cd:03:25:
12:94:99:ac:da:d1:13:57:3c:07:57:9b:4d:19:7a:b6:80:74:
23:7f:16:2b:55:dd:63:4e:da:ac:aa:68:1a:97:7c:6c:33:94:
d5:bb:76:24:7f:30:03:a3:3b:da:ae:10:21:94:02:31:23:48:
81:70:f2:e4:71:5b:4a:ef:51:ac:26:16:82:c7:cc:d8:4a:f7:
4d:f8:44:e0:c6:ec:1d:86:55:38:ff:a2:0e:de:bc:38:7c:67:
0a:d7:5f:67:1a:0a:ea:a0:cd:7f:25:6e:ee:32:2a:d2:bd:01:
aa:6b:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org