Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BE952247F3D11ECBB0EA972C4F9AE02.roa
File: 8BE952247F3D11ECBB0EA972C4F9AE02.roa (raw, json)
Hash identifier: A26EvRFFLQdiD90ybz9PxW6QogB1LltFtqo0CkUnOiA=
Subject key identifier: B3:B4:54:ED:C8:36:13:3F:98:CA:CB:B4:DA:56:17:96:29:C8:83:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 53F2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BE952247F3D11ECBB0EA972C4F9AE02.roa
Signing time: Mon 16 May 2022 04:27:40 +0000
ROA not before: Mon 16 May 2022 04:27:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 146891
IP address blocks: 103.172.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21490 (0x53f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:27:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d2bb-3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:34:f3:92:fb:ce:2c:ce:7e:88:78:a3:67:
60:48:11:6d:08:d5:50:22:40:53:bc:ac:91:ca:b2:
6b:0e:aa:cf:8c:20:fa:2d:86:e0:06:80:36:a1:26:
fb:3a:84:18:2b:bd:e6:f0:83:56:93:40:1c:9d:d4:
78:86:06:8f:df:5b:23:35:6a:61:52:16:38:3e:d5:
0c:44:38:8d:f3:bc:eb:88:a5:4a:a7:0f:7b:e9:33:
92:2d:3c:f2:fd:49:34:e4:d5:f3:2b:ab:a9:1b:f6:
05:a7:30:11:21:fc:e5:cf:fb:d4:c0:ae:72:de:c7:
c6:a6:54:c0:1d:60:ba:6a:6e:27:9e:aa:d1:45:dd:
36:8a:54:be:46:0e:53:93:56:43:14:01:c0:f9:7c:
ef:27:11:ba:e3:54:0e:20:dd:7d:cd:4f:d1:68:4b:
fe:78:63:f4:b9:f2:d6:9b:79:04:e8:21:4f:81:02:
c4:a2:08:aa:48:98:a4:b7:6b:6f:f7:a0:b5:35:bf:
7f:c2:8d:f2:72:65:2c:1d:de:87:17:09:0f:0d:4b:
c8:0d:25:22:d8:ca:a4:f3:cd:b5:97:c5:8c:ec:e2:
5d:3e:b8:09:9b:2c:05:93:be:08:1d:d4:78:86:12:
7e:aa:75:93:42:a1:b7:03:e0:a1:b3:d4:0e:46:c3:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:54:ED:C8:36:13:3F:98:CA:CB:B4:DA:56:17:96:29:C8:83:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BE952247F3D11ECBB0EA972C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.254.0/23
Signature Algorithm: sha256WithRSAEncryption
20:b1:d7:e2:8a:93:ad:76:4f:a9:2a:50:f0:76:d9:95:79:93:
d5:8b:f1:08:c3:1f:7d:e8:3b:ba:2b:ce:e6:f2:19:e2:59:c2:
4a:88:b3:b4:da:8d:2b:f7:24:9d:dd:c5:73:fa:5a:0a:c5:24:
e8:0a:b9:e7:5b:98:07:f8:3a:90:c4:06:1a:29:d8:a1:36:e1:
d8:05:07:06:20:0f:48:16:ec:bf:43:9b:35:60:ae:54:eb:97:
c1:46:c8:3a:11:b6:0c:2e:f8:a6:c3:a7:d4:38:41:8e:01:76:
f5:e2:88:b2:91:35:35:ac:9b:af:e6:4c:de:11:90:7a:b4:f8:
1d:5e:b1:61:d8:45:26:64:45:08:51:ba:39:d6:f6:4b:89:c1:
4f:56:a7:80:dc:92:a8:0e:18:74:35:48:c4:80:bb:18:06:d6:
c4:ca:9b:ea:8d:a0:d2:cc:13:33:20:42:da:31:1d:8a:54:fa:
93:4f:f3:62:d9:a8:20:e9:6b:e8:6d:3a:b3:c7:42:ca:e0:dd:
84:a8:11:d7:38:ea:48:4d:0d:bb:e9:e9:bb:73:93:ba:c3:b4:
41:76:9f:4c:5d:13:2c:47:dd:e5:a2:d0:65:9c:43:26:57:ca:
dc:30:08:a2:2f:6f:ad:b6:73:2f:61:e0:59:a4:cf:2a:be:f7:
6f:c4:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org