Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EC95A6A3EAE11EBB04AFA85C4F9AE02.roa
File: 7EC95A6A3EAE11EBB04AFA85C4F9AE02.roa (raw, json)
Hash identifier: iu/u/WLTz4h8OzMwHltxW+I7JJN7y09eYDKRMo1b7/w=
Subject key identifier: 85:D5:FF:CC:2F:69:F5:83:B9:5F:59:AA:ED:D2:66:7F:1B:70:D6:85
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3264
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EC95A6A3EAE11EBB04AFA85C4F9AE02.roa
Signing time: Tue 25 May 2021 16:16:29 +0000
ROA not before: Tue 25 May 2021 16:16:29 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 140204
IP address blocks: 103.155.226.0/24 maxlen: 24
103.155.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12900 (0x3264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 25 16:16:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60ad22dd-0e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:0c:f1:40:91:0f:7d:27:35:a7:7f:ad:98:
32:c4:01:08:09:55:74:ac:7d:37:e5:a7:75:8f:a0:
3e:73:27:28:73:e1:fe:3b:7a:b2:4c:7b:17:fc:43:
10:09:06:33:5b:3b:f3:86:fe:79:22:db:4c:2d:fb:
af:b0:3c:90:18:4e:38:3e:3d:a8:69:e3:4c:c5:60:
f4:90:f6:17:ab:75:5d:a8:62:9e:0a:d4:4c:d4:63:
c4:30:16:37:6c:ab:e6:cc:ba:f7:ce:ae:81:97:19:
2e:7f:be:6c:35:1f:1b:c5:96:11:2a:37:ca:e0:64:
7d:27:d7:d1:f9:99:1d:f4:f2:4e:19:74:d0:bb:2a:
38:31:19:2e:cc:45:34:ee:e1:d2:af:05:9d:63:3b:
7b:52:83:ee:81:0c:cd:c6:5d:47:c1:52:ce:c0:c3:
9e:39:5f:74:78:0a:65:a1:9c:25:a5:31:65:34:3f:
ab:fd:dc:b2:74:78:12:eb:fe:68:75:2e:6b:d9:71:
8a:4e:5f:f2:31:92:2d:3f:3d:36:b6:2a:69:bb:34:
3a:a4:01:05:a1:31:99:f0:da:7e:89:64:c4:91:05:
61:13:d3:b4:86:a1:7b:37:13:c8:6b:96:38:67:3b:
1d:fd:30:70:cd:80:0b:8d:0a:6e:85:67:20:87:e5:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D5:FF:CC:2F:69:F5:83:B9:5F:59:AA:ED:D2:66:7F:1B:70:D6:85
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7EC95A6A3EAE11EBB04AFA85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.226.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:39:4b:25:93:50:ed:05:bb:56:b7:15:f6:73:4e:61:32:69:
9b:e6:19:40:95:59:60:d5:02:ea:84:52:8f:3a:3f:f7:ce:3c:
13:8a:4e:a9:e1:b1:81:55:aa:30:bb:b7:c9:7b:d8:16:35:5f:
be:9c:3b:16:2b:f9:cb:d4:29:68:01:18:83:2b:bc:b1:87:40:
5c:11:53:3e:80:19:dd:b4:0f:e2:68:f8:5d:fb:34:3e:d4:0f:
65:17:ee:48:1b:3d:f7:c9:d9:63:28:98:9c:13:7a:3c:45:c3:
09:76:4e:aa:0a:48:29:a6:a9:a7:ef:48:44:dd:13:6a:f4:41:
5d:1a:ff:99:14:5e:0a:2c:47:a8:42:a7:72:0a:0f:99:dd:b0:
cd:bd:0b:d9:96:e3:d8:5f:8e:26:1d:a7:9c:9a:a3:56:34:d8:
61:44:cd:5c:a8:ad:aa:f4:b0:30:43:5f:f7:d1:82:35:39:23:
3c:50:43:5f:51:e7:96:7e:1e:ab:57:ce:96:a3:01:d5:9f:16:
07:a5:d1:d8:c4:46:1a:a1:00:04:3a:32:09:de:72:93:e1:4f:
6f:2a:32:81:05:66:1f:6b:16:87:68:2c:5c:2e:f0:5b:21:8f:
3b:7f:7d:a4:0d:55:fc:35:74:55:ef:1e:04:e5:1f:7d:36:72:
a5:fc:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org