Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7144C50C410411EB82068326C4F9AE02.roa
File: 7144C50C410411EB82068326C4F9AE02.roa (raw, json)
Hash identifier: HTKZIW3aQij8q64endqvIyotaRg+b4ugXlQVeiBY0Bg=
Subject key identifier: B6:C4:3A:C0:8D:76:B2:B2:0C:01:07:54:F4:3E:D9:4A:22:6D:DC:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 52B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7144C50C410411EB82068326C4F9AE02.roa
Signing time: Mon 16 May 2022 04:21:52 +0000
ROA not before: Mon 16 May 2022 04:21:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141263
IP address blocks: 103.159.240.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21177 (0x52b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:21:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d160-5d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:0b:a6:a0:85:0a:ee:82:25:d3:53:27:75:
20:f9:99:70:24:b3:d6:b8:4b:ed:2f:70:2c:8f:4e:
e8:4f:b8:e3:7a:ff:bc:5f:ce:69:5c:d2:a0:0c:c5:
ea:2f:aa:04:c7:c9:47:2d:d1:eb:e9:03:b3:f9:db:
bc:78:ec:2f:45:db:a1:ec:d7:25:3d:7f:41:96:5a:
ea:e9:07:6d:28:6d:09:40:3f:e0:f5:0b:ec:74:cf:
7f:e5:9b:95:be:aa:e7:38:b3:9a:df:09:58:8b:b8:
66:55:7c:33:8a:33:5b:cb:5d:10:9b:37:e4:c1:a8:
b4:8c:26:90:fa:fc:94:b2:84:b2:34:0e:95:cb:47:
67:ab:f7:5c:ec:34:ad:37:79:e8:c3:7b:62:3e:3d:
e9:d8:7e:8e:21:62:05:d7:78:1c:60:3b:35:40:08:
50:5a:bb:ad:18:34:a0:96:9e:f7:22:cd:a6:7c:32:
aa:23:0f:85:40:b0:fa:fc:c4:72:ba:37:17:78:7d:
80:a3:dd:7b:4a:db:6f:fc:80:63:87:d0:2f:c3:0e:
54:f8:d8:95:1b:a5:63:04:53:a4:76:d7:91:a1:9c:
63:e6:b3:4b:61:49:7d:68:ba:70:08:76:e1:08:d9:
43:8c:79:ab:a4:56:ba:6c:f7:80:37:97:27:a2:45:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:3A:C0:8D:76:B2:B2:0C:01:07:54:F4:3E:D9:4A:22:6D:DC:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7144C50C410411EB82068326C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.240.0/23
Signature Algorithm: sha256WithRSAEncryption
22:54:df:54:e8:8b:6b:69:88:03:85:44:e9:da:c8:b4:7a:b2:
56:f4:0e:df:6b:ac:0c:b3:00:4c:01:5c:2b:5e:ac:a6:89:d5:
35:1c:9c:55:51:70:d9:59:d7:b2:41:2f:94:e9:dc:57:66:37:
c4:b2:41:92:73:e8:e3:e1:a8:91:b3:5f:03:6f:88:db:d7:e3:
aa:2a:de:4e:cf:17:0d:29:03:a6:51:8a:4e:87:e2:3f:f7:63:
40:d6:c2:e6:7a:27:64:e5:fc:9c:de:0b:11:b1:61:d4:fd:9c:
68:f5:72:ae:02:9b:ee:be:a7:32:e8:8b:4c:9f:43:55:6c:b6:
a0:a9:63:8f:30:bd:18:da:c1:8c:53:47:8b:35:f2:04:c6:47:
56:1f:8c:a6:eb:06:a2:c7:1e:35:dd:66:87:d4:86:e1:3e:dc:
2f:fc:3c:28:79:3b:0c:09:5c:73:b9:28:89:82:48:ab:ed:a2:
12:7d:a3:bc:9e:59:15:f4:60:bb:2a:cd:15:5d:f9:97:74:2f:
26:d9:5f:5b:9e:0f:cd:49:89:7b:53:b1:12:29:0b:a6:1b:ff:
73:13:e9:bb:62:00:4e:14:bc:07:8e:0e:0c:b0:09:ef:ed:be:
9b:3b:52:8b:ce:77:49:9d:f5:4a:cc:c4:c9:3a:47:57:f2:35:
c3:e4:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org