Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92F65FC886AB11EDBF00E67AC4F9AE02.roa
File: 92F65FC886AB11EDBF00E67AC4F9AE02.roa (raw, json)
Hash identifier: viAyyaEGulnDCk/2dIoZ2caGOHnKtJH5PoSPR1pMv1k=
Subject key identifier: A2:41:4A:B6:14:0F:BC:33:AA:A1:A4:E4:D7:4B:FD:F3:DE:60:40:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6208
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92F65FC886AB11EDBF00E67AC4F9AE02.roa
Signing time: Wed 28 Dec 2022 12:31:39 +0000
ROA not before: Wed 28 Dec 2022 12:31:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 146903
IP address blocks: 103.173.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25096 (0x6208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 28 12:31:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ac372a-4467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:8f:b9:be:8d:82:25:07:3b:81:aa:7a:02:
1f:00:4f:4c:05:b2:03:2e:e7:6e:07:1e:81:d9:c9:
4e:36:50:e2:4e:c5:a3:e0:41:f4:48:73:14:23:c2:
03:1d:4a:7a:62:24:59:17:65:2a:99:60:71:7e:dd:
7c:65:4c:74:33:ca:30:e6:b2:ec:19:e0:9a:5b:9b:
9d:ff:9e:89:25:a9:30:1f:6d:1a:60:dd:0f:d1:9c:
e0:70:7e:70:a0:33:d5:21:b2:59:ef:c5:f1:72:d3:
ee:5e:47:f2:8e:3c:e5:12:dd:57:7f:d3:26:47:d6:
3c:4c:3e:77:d3:da:4d:f7:de:58:e0:d5:7c:eb:8f:
03:62:ae:00:6d:8c:6a:1a:0d:91:c1:0d:ef:27:94:
b9:43:8f:50:9c:ac:08:56:0c:5a:51:69:85:24:68:
4b:6e:22:1b:b7:12:e0:88:83:4e:62:b6:fb:08:d2:
fa:b5:bc:0e:f1:ba:a4:33:64:bf:33:7d:18:93:99:
71:28:02:c1:65:26:9f:3a:fa:68:df:8e:16:17:10:
84:2c:18:a1:f9:0e:73:e6:b0:f8:08:e7:79:d5:15:
b7:3b:03:5e:b6:50:ca:15:96:5a:17:8c:be:42:fb:
18:fc:c3:0b:50:eb:54:b1:6e:e2:2e:61:d6:34:60:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:4A:B6:14:0F:BC:33:AA:A1:A4:E4:D7:4B:FD:F3:DE:60:40:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92F65FC886AB11EDBF00E67AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:df:cf:60:96:a0:54:c5:9f:d8:31:d2:dd:81:ad:60:af:3b:
d5:ab:05:e2:14:f2:b7:65:a2:08:60:7d:72:f3:04:43:04:5a:
57:f6:16:6a:43:1c:11:a9:55:68:fa:00:fd:67:f5:b9:35:31:
6e:75:c3:c9:49:ca:b7:fb:6d:57:ac:79:19:e6:fa:41:83:62:
0e:d8:32:2f:cc:eb:8e:d5:17:67:b7:42:9f:46:ac:e7:4a:53:
16:e3:77:7b:a8:69:e4:27:43:97:c7:f7:4a:4f:f3:36:37:00:
5d:0f:d8:75:c5:d4:1c:72:98:48:81:05:18:4d:0a:1e:16:f9:
c8:d7:9f:55:a3:58:69:46:01:10:e5:ff:3d:06:bd:94:54:f4:
c0:13:51:34:8f:ce:8d:cd:4a:b3:12:f7:5c:ad:a5:18:94:e3:
05:ac:c2:38:f6:5a:42:0d:3e:c9:33:ea:d9:07:eb:f3:5e:30:
7e:bb:f8:e2:42:f2:94:c9:be:e0:71:ca:63:9e:10:14:e9:0e:
14:e2:de:13:42:e6:b4:d0:79:3e:a1:1c:32:8f:b8:84:a6:9b:
4e:0b:26:5c:ce:de:71:e4:42:c7:c9:7a:bc:03:96:38:bd:5b:
02:38:9e:cc:cd:9f:44:f8:e6:5f:73:5e:06:01:2e:44:8b:e1:
03:40:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org