Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939E2BA8DA2D11EB8FAAB246C4F9AE02.roa
File: 939E2BA8DA2D11EB8FAAB246C4F9AE02.roa (raw, json)
Hash identifier: 5NRaJLDiep3bPo2H25HKa2BftNaKhqZLTsWhVoRShLg=
Subject key identifier: B5:9B:65:7E:C3:3E:73:93:B5:61:41:53:9C:44:09:37:BB:A1:D4:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5924
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939E2BA8DA2D11EB8FAAB246C4F9AE02.roa
Signing time: Wed 13 Jul 2022 06:41:26 +0000
ROA not before: Wed 13 Jul 2022 06:41:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137163
IP address blocks: 45.248.3.0/24 maxlen: 24
103.81.24.0/23 maxlen: 24
103.81.26.0/23 maxlen: 24
103.189.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22820 (0x5924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 13 06:41:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62ce6916-6e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:e6:2f:20:93:e6:af:8f:ba:f8:51:e5:c2:
d0:bb:6a:0b:fb:71:5c:14:0f:60:62:c3:b0:57:65:
89:40:75:4e:05:2c:d2:af:d4:e1:43:5a:06:e3:66:
3b:5b:82:86:43:2a:60:06:b2:d8:63:c6:74:f0:20:
8e:88:1f:e0:78:db:31:97:38:ba:1d:89:a0:e1:cd:
85:48:e2:a2:ea:e5:21:1f:be:34:7a:26:1e:d0:4e:
4d:91:52:f1:22:41:86:19:69:3c:42:c9:b9:43:bf:
df:48:07:94:34:5d:72:cb:a6:a4:44:5b:1e:2e:78:
ba:d7:2d:04:ee:78:58:a1:36:59:54:67:8e:ba:f8:
59:e5:af:12:a5:5d:73:98:bb:5c:b4:77:92:f9:83:
1e:30:da:6d:2b:18:b2:6c:8c:29:82:69:31:a0:d0:
20:ab:e9:2d:aa:09:03:6f:f5:9d:43:9f:7c:51:9e:
e6:1b:ac:d5:a4:56:1f:66:30:8f:3d:f7:53:2c:ce:
41:1d:98:8b:bf:9d:94:61:e7:91:57:48:eb:01:06:
f7:f0:df:60:07:fe:f9:e4:35:05:fe:29:2b:24:c6:
e4:67:71:86:78:85:c7:06:5c:d0:bd:0d:41:41:de:
d0:af:f1:44:84:e5:3f:6a:ac:fa:fb:94:54:54:8a:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:65:7E:C3:3E:73:93:B5:61:41:53:9C:44:09:37:BB:A1:D4:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939E2BA8DA2D11EB8FAAB246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.3.0/24
103.81.24.0/22
103.189.124.0/23
Signature Algorithm: sha256WithRSAEncryption
44:d9:f2:4b:75:4e:c1:42:84:22:65:d5:73:67:28:d4:ed:56:
00:ee:d7:a0:f6:64:14:5c:ce:26:ec:1e:46:c4:1c:65:e2:c4:
62:dd:6e:4f:64:08:02:3e:59:7a:5e:80:f4:f1:4a:c9:18:a1:
ea:37:02:5b:f2:fb:08:b6:48:f1:4c:ad:ca:58:05:30:3f:a7:
a5:1c:f6:f1:27:eb:af:2a:8a:57:24:0b:46:05:55:67:06:28:
14:f0:1d:6f:17:9e:c0:24:ba:b0:fb:35:78:a5:a3:93:49:51:
4d:e6:d2:66:ee:8e:5e:64:5a:bc:85:42:9e:4d:13:f9:63:29:
b2:99:be:34:09:fc:fb:d4:5b:55:cf:8d:b6:8b:36:14:61:d1:
17:4a:dd:e3:46:44:43:1c:43:d3:b1:7c:24:bf:02:ae:97:a4:
3b:52:18:dc:c0:82:8a:02:42:c7:c3:72:09:fc:58:8b:19:78:
ce:0a:b3:59:5f:ef:25:0e:7c:d4:8b:cd:e2:21:7f:6c:c8:24:
ed:97:b0:a5:03:e2:57:d7:61:e7:95:0c:c6:aa:95:f0:ad:48:
37:7c:06:3c:87:92:f8:d9:ac:43:7f:5a:13:11:91:67:4a:21:
fa:45:18:d9:15:db:62:ee:1a:e1:42:60:49:2d:3d:72:ea:f5:
af:fb:48:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org