Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86F12026E59911ED960FB828C4F9AE02.roa
File: 86F12026E59911ED960FB828C4F9AE02.roa (raw, json)
Hash identifier: fznjDcBypUynr57xIWl4hbBrooS4NZmMUPsL6TZkcSk=
Subject key identifier: 5A:29:98:51:84:93:73:A0:A9:22:6B:A0:BB:0A:86:6F:E4:07:12:1D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 693E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86F12026E59911ED960FB828C4F9AE02.roa
Signing time: Fri 28 Apr 2023 07:51:48 +0000
ROA not before: Fri 28 Apr 2023 07:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134942
IP address blocks: 103.88.132.0/23 maxlen: 24
103.88.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26942 (0x693e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 28 07:51:48 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644b7b13-baac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:27:d3:4a:0a:91:ac:c6:e9:9f:16:12:dc:
8f:f7:81:a4:65:5b:2e:3c:ba:9b:c9:90:6a:3a:57:
06:0f:91:2f:5f:f2:43:29:c8:13:a8:1c:d9:e6:87:
6a:8b:98:73:0a:9d:96:a5:8e:e9:cc:c5:c9:30:0a:
f4:72:ec:57:60:ca:11:5a:8f:c3:58:24:15:33:c2:
32:8c:6f:78:75:54:b5:30:5f:63:fc:b9:a2:f7:c0:
ac:ae:c9:17:13:a6:a9:37:32:b6:75:f5:ab:5d:1f:
15:a4:20:05:cb:bc:f6:ca:b9:7e:83:45:75:82:22:
b0:71:4f:ac:b5:83:4b:82:58:4d:8b:98:fb:bd:da:
2a:b0:22:9a:9d:67:06:79:5b:a9:0b:f4:46:ff:91:
0b:2c:63:55:e9:e5:1c:19:c3:31:d2:36:3c:94:f9:
e2:10:2c:e7:4f:c3:2e:c9:03:e1:3a:31:16:cb:0a:
27:96:4c:8b:b5:17:82:10:f9:d3:18:e4:de:8f:35:
0c:46:1d:3e:bf:33:0f:ce:14:ff:15:b1:18:7d:c4:
9c:7b:4a:bd:4e:2a:18:0c:7b:a1:96:6f:5f:3a:0f:
09:62:c8:2a:18:93:dd:e8:d2:70:13:94:35:54:6e:
48:7b:57:b2:5e:0d:29:bb:b0:a3:c6:0a:d5:b4:ce:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:98:51:84:93:73:A0:A9:22:6B:A0:BB:0A:86:6F:E4:07:12:1D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86F12026E59911ED960FB828C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e4:ef:72:d3:7b:9c:5f:68:ff:74:da:d8:4a:2e:9a:89:d4:
05:02:58:fc:d3:d3:8b:59:45:68:cc:48:92:e7:27:2c:56:5d:
1c:5c:2b:56:f6:c5:67:e3:d4:7b:8c:7a:b7:5f:24:92:bf:57:
11:c6:2a:62:46:af:52:04:3d:c1:13:09:6d:b2:07:2c:b5:a1:
f0:23:d0:01:ba:8d:6e:7b:49:7c:ca:fb:42:2a:9a:b0:97:63:
3f:07:6b:2b:44:99:16:00:35:5b:9a:de:ef:f4:c8:bc:5d:2b:
82:a1:e9:4a:58:53:a4:ea:e0:3e:08:60:6e:a7:91:ea:38:63:
13:a9:da:69:01:3e:5a:7a:de:9f:48:9b:08:d9:c8:a0:d3:cc:
0b:2b:12:fa:58:f1:31:2e:50:bf:cb:0b:63:b1:a9:b3:0c:e0:
cd:fc:d3:5a:54:5d:2c:de:4f:05:4b:2b:1a:fb:aa:40:81:fc:
eb:8b:52:44:c7:9f:71:fa:ed:3c:1f:c2:7f:3e:17:67:26:5d:
38:6a:2d:2a:fe:b9:59:33:20:65:d6:e9:b9:b0:d2:7e:79:16:
15:a1:66:e7:85:65:02:f5:78:57:2b:5f:4c:f6:20:52:91:3c:
f2:87:91:d5:6d:d9:a9:93:82:68:03:21:24:a2:07:7f:c8:5f:
d7:b2:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org