Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/827B3A9A60D311EDA6465F0CC4F9AE02.roa
File: 827B3A9A60D311EDA6465F0CC4F9AE02.roa (raw, json)
Hash identifier: /eBPercmlAYWpfP9MrjtcMHLxjXN3CeSfhEKWx2or74=
Subject key identifier: 1E:DE:79:52:B3:74:95:E2:F9:5B:8D:26:22:3E:0D:E9:58:88:7F:93
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 63A3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/827B3A9A60D311EDA6465F0CC4F9AE02.roa
Signing time: Fri 20 Jan 2023 12:21:36 +0000
ROA not before: Fri 20 Jan 2023 12:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149621
IP address blocks: 103.37.96.0/23 maxlen: 24
103.145.36.0/23 maxlen: 24
103.195.244.0/22 maxlen: 24
2001:df7:c80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25507 (0x63a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 20 12:21:36 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ca8750-9b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:d0:b3:af:fa:92:8a:00:b1:65:17:aa:c9:
e5:40:f4:3a:d8:ff:9d:d4:eb:18:8e:ae:3f:22:c1:
5b:28:85:f0:b9:de:06:b9:af:0f:33:fe:47:63:ca:
9e:38:b5:09:95:c4:6c:8e:5a:8e:3d:a5:39:d3:41:
6d:76:fb:8e:d4:94:2b:26:fa:a0:4c:6a:0c:bc:63:
4a:c5:00:a4:b5:94:2c:07:7a:4e:77:f7:29:b4:d6:
e2:ff:14:e1:e6:c5:19:c5:4b:bc:39:77:3b:f4:da:
e8:c7:d7:7b:65:fe:93:72:84:57:42:b5:c4:13:fc:
5f:ff:48:37:fc:7a:e8:03:9f:5e:2a:b6:72:5f:36:
9e:51:e7:ac:86:26:ee:df:ab:fb:d1:79:4e:1f:60:
82:36:e8:14:15:10:de:d3:76:97:ba:53:92:d7:82:
9a:0c:81:84:5c:62:7b:73:6c:3d:ce:e0:59:81:a1:
f9:b7:10:25:9b:81:87:4e:49:7d:77:7a:ea:1a:06:
18:2d:a2:68:cc:50:3f:51:15:d4:18:38:9e:fe:ad:
d0:65:6b:6e:06:4e:e7:4b:4f:bf:cc:e9:6a:a6:90:
1b:12:bc:37:83:3f:cb:71:2f:c5:86:7b:9d:8b:99:
d7:9c:3a:50:27:7f:9d:ea:06:6b:e5:f2:0f:88:2c:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:79:52:B3:74:95:E2:F9:5B:8D:26:22:3E:0D:E9:58:88:7F:93
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/827B3A9A60D311EDA6465F0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.96.0/23
103.145.36.0/23
103.195.244.0/22
IPv6:
2001:df7:c80::/48
Signature Algorithm: sha256WithRSAEncryption
82:cd:9e:0c:4d:e5:3a:79:ed:88:70:6c:45:6f:75:6b:59:71:
39:4b:18:0d:d1:ed:45:b3:5a:77:ce:84:46:5e:52:24:dd:8d:
d9:ee:d6:e8:b0:fe:8c:7b:85:ad:18:23:8a:d7:f5:be:b7:6c:
41:47:60:66:c6:6d:c8:2e:9c:16:c5:96:cc:b7:5d:64:d7:3c:
55:78:c1:c4:65:bd:71:56:40:15:55:5c:57:04:a0:f7:b1:2b:
4e:0e:5c:52:3f:8f:8e:96:12:49:c0:38:c4:b1:0f:43:05:ba:
02:1f:41:69:35:4b:ea:91:65:c0:29:a4:3f:78:70:fc:89:b3:
24:e5:60:e8:e8:40:eb:b8:04:fd:8c:c0:f6:5c:84:a2:6b:3f:
70:6d:10:3d:1d:72:a1:21:8a:d7:40:28:34:16:33:50:d9:55:
62:f0:74:22:78:63:e5:a5:3f:6e:d4:f6:ea:82:a8:a0:18:4e:
9f:e6:a9:4e:50:d1:aa:f5:2c:7a:0d:3d:75:65:ad:06:9a:d6:
16:a3:7e:86:b1:dd:92:87:e5:bf:4d:60:62:b6:fc:bd:cb:9f:
51:61:14:a4:cf:5d:9b:2c:c3:53:7a:05:9f:ec:7b:d8:ff:38:
34:f1:81:10:0d:46:98:6d:57:b4:bd:9c:01:e6:a0:27:e7:33:
ab:54:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org