Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/674DE0DE1EBF11ED967E9A0EC4F9AE02.roa
File: 674DE0DE1EBF11ED967E9A0EC4F9AE02.roa (raw, json)
Hash identifier: 7P17KZC07P4aZsV0oA3hUeETLwHkvi9ms3CgCDbz+nA=
Subject key identifier: DE:4A:DD:23:65:94:60:AA:CE:48:A0:9C:58:2C:5A:77:FA:ED:8B:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5B93
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/674DE0DE1EBF11ED967E9A0EC4F9AE02.roa
Signing time: Thu 18 Aug 2022 06:31:34 +0000
ROA not before: Thu 18 Aug 2022 06:31:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141536
IP address blocks: 103.103.134.0/24 maxlen: 24
103.103.135.0/24 maxlen: 24
103.130.66.0/24 maxlen: 24
103.162.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23443 (0x5b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 18 06:31:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fddcc6-3ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:10:da:dd:7f:9b:d8:15:cf:db:16:ad:2e:
bf:a9:d1:c1:82:ba:af:63:b9:6f:c6:d2:70:a1:b4:
78:5e:38:6e:15:5c:a6:fa:70:97:c2:a4:bb:a8:39:
0e:c6:4b:23:c5:f9:a2:34:b1:26:28:56:46:87:a1:
eb:87:29:60:9a:7c:8d:54:8c:8b:1a:78:ae:f3:c1:
51:2a:be:7c:42:be:2b:2b:6f:f7:2c:15:19:01:9f:
f9:0f:6b:cc:da:3c:f3:5d:68:22:07:37:87:c0:f4:
6c:34:c2:66:37:3c:8a:7c:dc:c0:c6:3b:ff:2d:4b:
86:e0:e4:86:e7:ae:16:6b:b9:cc:74:9d:27:1c:33:
96:ca:67:0f:e0:db:6b:3b:66:11:19:9f:f2:f1:95:
15:02:83:fc:a9:23:24:bb:1b:4b:eb:98:e4:5a:b9:
3b:fb:a5:d2:ae:fd:35:22:e8:15:b1:f2:d7:21:ce:
17:1d:06:0d:c5:1d:c4:a0:07:ae:90:df:3a:68:22:
ca:34:56:75:72:6b:3c:a1:25:6a:c9:32:68:fb:b9:
76:65:d5:f3:c4:89:15:c2:c8:a8:99:21:79:6b:de:
9a:dc:d3:78:f4:8a:57:db:a6:a6:73:e9:df:b0:41:
7a:13:ee:e8:17:08:02:41:7f:6d:e2:0b:97:f5:5c:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4A:DD:23:65:94:60:AA:CE:48:A0:9C:58:2C:5A:77:FA:ED:8B:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/674DE0DE1EBF11ED967E9A0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.134.0/23
103.130.66.0/24
103.162.78.0/23
Signature Algorithm: sha256WithRSAEncryption
54:38:56:8d:f2:5d:7f:4f:c7:59:ff:bf:4d:85:88:c6:00:53:
42:46:c1:a9:f3:b7:0a:5b:80:93:c3:aa:cb:8c:2d:ed:bb:71:
a5:10:bf:da:ab:83:60:92:60:be:d0:33:1f:12:22:58:ea:c5:
98:5e:48:88:fa:53:9e:d7:16:67:58:4a:7f:4e:7d:74:96:0d:
9d:7a:43:af:d4:e2:b4:d0:7c:14:f2:76:20:78:89:c4:e1:4e:
87:18:df:d4:38:85:ae:9e:f8:e3:bc:bd:fa:86:fe:2d:2d:64:
f9:1d:3d:d5:a6:fd:cd:fb:3f:04:9e:6c:bb:e9:1e:34:4b:c2:
54:ea:23:dc:00:72:5b:fd:e9:5e:57:13:7c:e8:71:a2:f1:c1:
de:93:f3:ab:e3:da:e1:58:af:ef:f8:3c:04:08:60:9e:f6:2d:
b5:82:38:be:90:0e:08:fa:01:34:48:8c:dd:8a:f6:ad:1b:ae:
46:49:c0:35:e2:09:f2:d8:09:57:8e:5a:4f:c1:9d:d0:66:26:
dd:66:85:23:7b:8b:17:e1:e5:d7:40:28:04:96:fe:6e:5e:9a:
cc:82:45:1f:29:9a:5b:53:62:b3:23:2b:9a:24:18:49:0c:91:
e7:a4:8e:6c:ea:11:68:21:d7:fa:03:16:5f:65:35:58:5a:2b:
8f:72:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org