Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A155214132911EDAA7D030FC4F9AE02.roa
File: 9A155214132911EDAA7D030FC4F9AE02.roa (raw, json)
Hash identifier: /ajWTDaCp/b3JlKQZnyaZya98pWhfPB4/NNMM6vOzaY=
Subject key identifier: B8:CF:1C:85:E9:3B:55:D4:72:84:6F:F7:CE:CD:F3:61:35:71:81:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5ABC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A155214132911EDAA7D030FC4F9AE02.roa
Signing time: Wed 03 Aug 2022 12:41:32 +0000
ROA not before: Wed 03 Aug 2022 12:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133670
IP address blocks: 103.46.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23228 (0x5abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 3 12:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62ea6cfc-f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:b0:10:0f:1d:5a:5b:5e:99:78:d9:cd:9d:
ae:e9:41:96:07:0d:8c:46:04:ae:0f:f2:99:8f:6b:
d4:94:9d:aa:be:59:09:9c:2c:ee:b9:4a:6e:0b:3d:
45:69:49:fe:2b:58:18:77:9c:01:1e:a0:8d:52:6d:
f2:35:4a:0a:a3:26:f7:5f:42:c7:0c:e5:d2:4a:8c:
c3:9c:81:a2:b1:8a:b9:95:bf:3a:f5:4b:10:e8:77:
3a:a7:df:e2:97:d5:9d:35:b7:6c:24:b4:fc:11:02:
6e:e3:37:84:75:46:68:e6:40:35:8b:ae:1a:97:b4:
c1:70:76:e7:c3:f0:1d:1c:f6:f0:86:a1:b5:17:a1:
17:49:0b:da:48:4f:29:13:b5:96:bf:b3:a7:a3:bd:
ca:70:92:22:63:ff:fc:45:72:81:67:ab:8a:f8:75:
0e:d1:6d:61:26:c8:d9:93:49:28:b3:dc:16:e4:f6:
ea:6a:7a:7f:fa:9f:36:af:53:bd:f3:4f:32:a3:1e:
2a:b5:de:86:16:62:fd:30:69:34:51:0c:af:ef:0f:
30:f6:0d:49:86:c6:be:a6:07:d3:67:6a:e7:00:c3:
97:a7:35:a5:63:30:08:ef:0f:4f:70:e0:cb:f7:ef:
8a:ea:46:19:5c:97:02:f0:4c:ff:56:c0:dd:67:34:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:1C:85:E9:3B:55:D4:72:84:6F:F7:CE:CD:F3:61:35:71:81:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A155214132911EDAA7D030FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.192.0/23
Signature Algorithm: sha256WithRSAEncryption
90:02:23:54:77:95:78:f7:eb:e4:33:08:67:a0:5d:45:c0:bb:
ca:e0:44:13:f2:36:7b:d8:d7:4a:5d:28:1c:75:56:f2:1a:f8:
65:cd:86:26:09:b8:cb:a1:f9:3a:87:cf:02:d4:5b:39:75:31:
43:07:70:3f:0b:7d:77:79:40:4c:df:3a:0c:33:38:6c:05:6f:
8b:c6:a5:23:8a:bc:1b:c7:7d:59:0e:b4:02:71:79:30:86:b6:
10:9f:51:46:58:80:37:3f:27:82:80:23:a6:f8:56:d2:91:d3:
53:43:e1:34:0c:5f:df:8f:73:0c:75:a5:8c:64:1a:6d:c5:cc:
05:bd:79:6e:8b:47:93:d2:c3:f8:5c:f1:33:c7:dc:0c:45:c7:
02:0b:11:5c:85:9d:30:50:54:3a:07:48:bf:61:da:a5:05:98:
eb:bc:f7:68:04:d2:50:80:a8:2a:c2:5e:da:17:63:cb:00:6c:
3a:4f:39:50:cf:b5:a9:73:be:99:b6:9c:02:1f:5c:e0:59:de:
6c:4f:cf:63:81:a5:bb:80:50:97:0b:69:1b:0c:d1:0b:de:e7:
1c:6d:bc:0b:6c:38:c5:a3:d3:72:2a:d3:6c:05:56:c9:7c:3f:
c9:2f:6c:7f:8c:89:76:08:05:ff:88:a1:0e:3e:da:34:64:01:
38:9b:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org