Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93CBCC7C618511ECBDB6FD4BC4F9AE02.roa
File: 93CBCC7C618511ECBDB6FD4BC4F9AE02.roa (raw, json)
Hash identifier: efgt9qIuzN4K5uYbmX6KEpagFxccqK8WjY1Z739nBPU=
Subject key identifier: 44:6A:F5:FD:44:43:E9:14:14:B2:AD:09:F7:89:53:17:B6:07:4A:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4F30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93CBCC7C618511ECBDB6FD4BC4F9AE02.roa
Signing time: Mon 16 May 2022 04:04:51 +0000
ROA not before: Mon 16 May 2022 04:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133309
IP address blocks: 103.43.36.0/24 maxlen: 24
103.159.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20272 (0x4f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cd62-6e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:5c:d8:3c:18:8a:22:e0:e3:95:98:bf:c5:
33:7a:c4:56:72:04:00:36:8d:98:91:90:06:f0:7d:
52:e2:50:48:68:a4:0b:23:f7:28:cf:af:e0:18:66:
e8:91:6c:4b:47:69:17:a8:95:43:36:d2:58:92:92:
c0:42:ec:46:e0:b0:ba:4b:f0:b1:2e:a0:90:5e:29:
10:dc:91:e1:25:11:4a:a0:36:f5:fb:c7:54:98:ab:
df:db:fe:e1:71:68:09:6c:ff:5c:be:92:b1:c4:d4:
4d:50:00:63:35:66:7d:ff:48:14:3d:cb:3b:b6:85:
bf:7b:cf:c6:0c:6e:17:91:f0:a6:7c:85:78:fd:25:
ae:b2:d9:3e:81:86:3d:81:1c:31:0c:cb:5a:1b:6a:
72:8a:d5:cf:6b:94:bf:f3:d9:45:5b:f9:b1:0d:60:
78:6e:e1:74:64:82:f5:10:62:b0:4c:9a:7e:9e:0c:
b5:2c:c9:52:b4:cc:48:54:68:00:6f:34:3d:d9:d1:
f5:22:25:11:41:08:d5:f2:53:a2:ce:95:dc:3a:08:
38:a6:24:15:b5:42:86:fa:86:0d:86:d5:8f:8b:a3:
8c:b7:16:99:b7:7d:ae:84:1d:e8:f7:da:df:8a:c3:
e4:e6:88:8d:d1:d8:90:7b:27:9b:1d:37:44:59:7b:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:F5:FD:44:43:E9:14:14:B2:AD:09:F7:89:53:17:B6:07:4A:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93CBCC7C618511ECBDB6FD4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.36.0/24
103.159.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:1d:2d:59:c2:ce:77:5f:fa:b6:ff:4d:56:b6:92:7a:f6:7c:
7b:4d:79:9b:6d:86:aa:41:50:a8:a9:50:60:4b:b4:9d:c4:2f:
99:e4:b9:11:5d:55:80:38:2b:0b:5e:de:4c:9d:3a:46:ed:2f:
11:a8:88:0f:ac:91:8e:11:c5:a3:28:55:f2:51:ca:61:66:76:
03:d7:75:37:2e:e8:78:24:ea:bd:93:6f:07:53:f5:cf:9c:27:
05:62:a9:f3:0d:45:1f:9e:23:af:8e:be:76:61:53:ce:e9:cf:
41:2b:21:26:8a:da:07:6f:d3:5a:f7:c6:19:b8:79:64:47:6d:
10:34:23:5c:8e:c0:18:4d:47:34:09:10:4f:25:c6:9b:58:fb:
00:4d:40:5c:22:b2:38:7b:4e:ba:7b:7f:12:a7:c8:f4:a7:5f:
9f:7d:a0:ba:6a:b0:da:e2:f6:45:0e:b7:4b:f4:3e:93:72:89:
df:3b:da:81:6f:91:b6:95:8c:2d:8c:a3:fb:79:52:31:d0:b4:
b1:e5:4f:16:09:6b:03:98:80:a9:31:c0:c0:b8:37:86:88:c2:
4a:ac:3c:e2:94:9e:dd:9b:b6:a5:ea:4f:d3:7f:10:7b:c7:b5:
eb:ef:f0:09:b8:7d:45:b6:a6:58:4a:ee:e7:cd:3a:7e:9e:b8:
e2:f7:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org