Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BD95A6BA2E11ECA03E1D0DC4F9AE02.roa
File: 66BD95A6BA2E11ECA03E1D0DC4F9AE02.roa (raw, json)
Hash identifier: YqsVgtbrfOKNhlrb6JcJSuAuLdVzEX4w8qXQ/tBS/aI=
Subject key identifier: 88:A0:CC:4E:C1:17:68:ED:0C:15:62:74:B7:50:96:2E:13:0E:67:1E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5462
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BD95A6BA2E11ECA03E1D0DC4F9AE02.roa
Signing time: Mon 16 May 2022 04:29:43 +0000
ROA not before: Mon 16 May 2022 04:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149206
IP address blocks: 103.178.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21602 (0x5462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d337-7f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:f5:02:64:06:fe:57:d1:55:2c:d5:2b:1c:
0c:b1:b1:c1:b4:6b:7d:bd:3e:c1:fe:f5:69:bb:02:
81:12:8e:00:65:ec:9f:60:78:15:f1:46:02:07:d4:
c0:b8:28:d0:c4:ff:71:13:2b:65:28:b5:8c:19:9f:
9b:59:b1:40:c0:40:df:1c:8d:47:6a:51:98:ab:1b:
bc:c0:76:9f:25:ed:ab:90:cb:4a:99:76:f6:8b:26:
c2:f4:66:ae:9b:6b:3c:fa:c3:cc:1c:60:fc:89:f3:
1a:e6:6a:ba:41:0f:0a:22:2f:60:92:8f:cb:98:e8:
28:ac:5e:d4:00:6e:87:64:52:2c:c1:28:4a:4f:31:
ef:50:9f:37:a2:3f:5b:e6:0c:71:a6:2b:fd:18:58:
e6:c6:d4:11:e1:03:1d:dd:6f:0a:79:c2:4c:f1:5c:
e3:f0:38:cd:69:42:88:77:63:68:5e:5e:f9:20:06:
29:60:90:fc:2c:02:a7:9b:7d:83:30:6f:3d:0e:ac:
39:fe:8d:b7:12:01:c1:a6:d9:9c:cd:0d:2a:06:d4:
dc:98:11:90:ac:fc:81:aa:d3:96:4b:72:bc:46:57:
fe:b6:3a:51:89:ec:a2:6f:04:0e:a4:9f:5e:06:67:
00:08:5b:aa:c6:a5:56:56:20:dc:51:35:31:3f:07:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:CC:4E:C1:17:68:ED:0C:15:62:74:B7:50:96:2E:13:0E:67:1E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BD95A6BA2E11ECA03E1D0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.192.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:9a:ea:73:b3:e0:7d:01:f7:e6:fb:70:dd:c1:74:8a:48:ed:
e2:79:63:6d:42:8b:fe:9f:c0:8a:53:e3:e7:a9:31:21:be:40:
1a:e0:17:2c:ee:03:83:f5:86:5e:9b:2d:48:5a:f2:3b:98:42:
9d:c0:09:a9:2c:df:6d:ea:de:4d:32:a8:d7:a7:4f:b9:fc:a5:
fb:db:f0:f6:b0:5b:f2:2e:c0:02:fc:78:0a:4d:a4:74:ec:22:
eb:c3:16:d1:ba:30:63:e8:01:f7:16:d8:dc:d0:67:b4:f7:74:
1a:9c:ed:b4:12:d1:3f:67:51:6b:79:f4:b8:31:8a:b0:a0:f1:
53:35:46:71:60:e9:40:84:5f:64:81:61:5e:12:4b:b9:1e:d8:
04:80:ac:38:29:d8:c6:b4:08:2e:67:89:14:08:b4:5c:bd:2a:
d2:46:69:12:aa:3e:23:af:87:96:2a:de:4f:a4:93:93:cf:4b:
ce:6f:0d:41:a3:b5:6d:7c:9e:69:ab:87:ad:f2:fb:5e:5f:bc:
fc:14:1f:4d:82:5c:48:ff:e9:35:b3:46:23:02:f3:4b:2d:5c:
dd:e5:90:20:f7:78:11:ae:09:cf:1e:2a:8e:9d:b3:72:cd:5f:
23:61:a7:b9:28:6a:bb:cb:b4:8f:51:7c:7c:d9:fa:5f:ab:59:
11:e4:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org