Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66CD284EE25C11EC93F9D853C4F9AE02.roa
File: 66CD284EE25C11EC93F9D853C4F9AE02.roa (raw, json)
Hash identifier: xePKQ+yDiG5o5QYFt5b1snK+74v4GqKID0XuZ7RSqSA=
Subject key identifier: E8:0F:F6:69:E7:D6:15:26:02:76:BB:86:D9:29:0E:B2:89:66:44:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5686
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66CD284EE25C11EC93F9D853C4F9AE02.roa
Signing time: Thu 02 Jun 2022 10:11:43 +0000
ROA not before: Thu 02 Jun 2022 10:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134925
IP address blocks: 203.191.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22150 (0x5686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 10:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62988cdf-8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:29:86:72:05:d3:e5:61:34:ad:56:be:8c:
dc:42:5a:f2:1a:6a:fa:2e:40:63:16:aa:4a:9b:f5:
73:bb:8e:55:88:5d:86:ad:89:c7:13:d0:ea:fe:c2:
bd:1a:10:a6:6e:cc:cf:3c:f5:83:45:d2:62:ee:ca:
39:6e:ac:46:8e:e5:0b:cd:15:60:20:43:70:e3:27:
40:f8:50:dd:c2:a6:58:e4:d8:dc:31:36:e5:c3:b3:
80:5d:88:06:05:49:4f:c3:1c:f1:5d:ec:54:98:82:
00:32:3b:a2:e1:cd:d2:1e:61:19:39:d9:88:cd:81:
c6:6f:05:b2:7b:d2:f6:6a:d4:59:cf:16:4e:70:95:
89:b5:e4:e1:bf:86:61:38:73:2b:db:bc:c4:18:a4:
06:c6:1e:f1:a6:22:c5:cb:0f:4d:c3:4f:bc:5c:e2:
eb:ac:20:68:6f:64:42:f3:ca:db:b1:75:1f:a5:9f:
d5:5d:34:55:0f:af:4f:cd:8b:87:98:27:73:53:d4:
a7:39:f4:4b:18:24:38:fb:b0:ae:d9:06:a2:09:7c:
5f:ca:09:e2:25:ea:a8:67:0f:ca:7f:8a:3a:ec:d7:
96:97:4f:00:cc:f0:17:15:20:e7:48:3c:5e:64:74:
cc:59:bb:08:24:56:11:30:53:67:76:cc:77:7b:6b:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:F6:69:E7:D6:15:26:02:76:BB:86:D9:29:0E:B2:89:66:44:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66CD284EE25C11EC93F9D853C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
81:fe:1b:4e:2e:4a:7c:d8:c7:97:84:84:41:c8:c1:26:e9:b8:
86:5c:0c:c9:eb:6c:f8:a7:6c:58:85:ba:96:84:1c:a8:d9:f7:
2e:4c:00:91:d6:97:ec:36:42:3e:d5:fe:9d:0b:c7:c3:74:ae:
11:14:4e:16:06:99:81:75:41:b7:3a:94:db:d4:74:f7:3a:95:
eb:87:c4:9e:26:9a:74:20:27:fd:22:71:73:98:14:e6:6e:a1:
e9:a5:59:b0:05:24:8a:03:56:1a:58:3d:d6:54:ff:ef:64:92:
b1:0b:b4:02:a7:5e:ad:bd:65:c7:99:e8:b1:09:a6:bf:06:27:
03:2c:df:13:6f:03:2a:b0:85:d2:4f:45:54:ef:b7:df:55:e2:
d5:ec:15:f2:a2:de:60:e0:e3:74:20:8b:6d:be:63:1d:f4:e1:
96:76:b9:66:ef:42:6b:eb:3a:26:67:00:ca:1c:4f:f3:d1:de:
3d:45:4d:87:e9:d4:4b:70:3b:77:bd:ca:c5:00:0d:13:d7:90:
f7:80:57:cf:89:61:5b:8c:43:3d:0e:79:61:57:14:6a:20:3d:
16:fd:fe:25:54:0d:cd:23:d6:d6:e9:f1:16:4f:62:b2:3e:64:
4d:be:77:5f:2d:3f:d5:74:1e:94:c1:35:05:f3:77:f9:b4:6d:
1d:64:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org