Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DE7FFC616011EBB7F37D14C4F9AE02.roa
File: 82DE7FFC616011EBB7F37D14C4F9AE02.roa (raw, json)
Hash identifier: p4ITZMgZMdeWwGrgynz1uN2V6AjK7vNKU7gCvS/4Ssk=
Subject key identifier: 1C:AD:5C:8C:62:A3:D6:BF:B5:72:BA:0A:73:96:F8:7D:FD:F0:2D:FC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5306
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DE7FFC616011EBB7F37D14C4F9AE02.roa
Signing time: Mon 16 May 2022 04:23:19 +0000
ROA not before: Mon 16 May 2022 04:23:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141493
IP address blocks: 103.161.198.0/24 maxlen: 24
103.161.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21254 (0x5306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:23:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d1b7-13e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:48:17:92:21:26:72:6b:92:c5:94:31:07:
32:bd:8c:39:bd:e6:ca:fd:b2:0a:cd:97:b8:d6:8d:
09:8c:4a:51:52:33:50:76:58:53:6b:7b:b1:59:9e:
a6:0e:b6:f0:af:16:10:82:21:e1:40:c5:86:14:0e:
bb:dd:08:a4:0f:ac:39:bb:46:7a:34:ee:56:ad:e2:
5e:0f:5b:ef:d3:90:ac:ef:80:6c:2c:75:4b:70:21:
6e:ae:4c:8f:f6:5b:0f:ae:78:31:e5:e2:6c:27:8c:
98:3d:e3:ee:3e:94:ba:5c:e1:3f:9d:0b:7b:48:29:
c6:b9:1b:44:be:f5:bf:a3:16:bc:49:09:31:db:1c:
a6:98:f1:74:0b:bf:70:cf:ad:d1:c2:4b:5a:5b:9c:
6d:e4:1c:3d:f4:e3:d4:fc:ab:47:d2:f1:fe:ff:9f:
2c:72:5c:f5:e6:0a:23:2a:10:a2:eb:c6:9a:99:9a:
e3:6d:1f:74:7b:71:8f:82:94:4b:0c:56:e5:9d:a5:
73:11:87:19:3e:45:9e:55:b9:43:7a:77:df:30:6e:
24:5b:10:b3:33:59:03:37:a2:69:9c:83:dc:00:96:
e8:a4:1c:1b:e2:a8:0b:f7:7e:4a:2e:88:07:38:59:
44:d3:f1:63:87:16:cb:f7:29:f8:f2:56:05:38:38:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:5C:8C:62:A3:D6:BF:B5:72:BA:0A:73:96:F8:7D:FD:F0:2D:FC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DE7FFC616011EBB7F37D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.198.0/23
Signature Algorithm: sha256WithRSAEncryption
62:15:95:1f:7f:4c:2e:df:11:48:0e:50:8c:15:07:47:19:a4:
59:64:02:fb:51:70:e3:c2:32:af:65:72:8f:d2:0d:d9:64:bc:
4e:f9:4b:18:01:f6:e3:f6:b4:06:5b:14:55:9f:de:27:64:39:
e3:ff:31:d4:37:70:d8:cd:2b:c7:16:03:cd:3b:b1:cb:2d:ab:
ec:10:66:d8:1f:4a:07:aa:6a:ed:0f:39:b5:b3:78:19:64:6f:
ff:33:89:a2:7d:58:39:14:f3:13:19:8d:1f:d7:b5:70:e7:67:
2b:7d:74:9a:ff:8d:56:4c:4d:ad:de:f1:bf:7e:c0:5e:3d:04:
a3:0d:e2:da:82:f8:21:70:1f:99:a7:83:43:62:e3:ac:f7:95:
42:79:26:b5:95:7a:75:a8:e8:4f:84:c4:fc:e7:60:da:a0:04:
fc:07:a4:ab:d0:8b:88:86:10:e5:18:03:e9:31:03:38:58:66:
60:ba:d8:60:56:8d:ec:1c:5b:00:12:02:9c:91:ef:c4:48:6e:
6a:ac:2c:47:d6:27:d7:b0:b4:39:57:cf:64:bc:e7:e9:ee:d1:
a9:f5:38:fb:27:cd:4d:44:35:f3:0a:62:73:46:00:86:70:86:
a5:96:36:f7:e5:c4:a5:cc:3e:0d:84:3e:97:ff:8a:73:4d:de:
aa:aa:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org