Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A22E68FA8FBC11EC8DE45719C4F9AE02.roa
File: A22E68FA8FBC11EC8DE45719C4F9AE02.roa (raw, json)
Hash identifier: JpyOXlqbquu18nXrgZMhZWXPmoDjPlbnfgIVVOsIfmU=
Subject key identifier: 78:9F:42:97:F3:35:B0:D6:A1:DC:D9:FB:C8:9A:58:90:B5:41:00:83
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4896
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A22E68FA8FBC11EC8DE45719C4F9AE02.roa
Signing time: Thu 17 Feb 2022 06:41:28 +0000
ROA not before: Thu 17 Feb 2022 06:41:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132759
IP address blocks: 103.249.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18582 (0x4896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 17 06:41:28 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=620dee18-2c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:0c:b8:e0:04:8a:c4:57:96:c6:4b:e8:3d:
12:52:4d:40:84:bc:48:cf:19:11:e1:65:63:bb:99:
48:35:47:8c:ec:d6:ad:04:c9:4c:66:86:90:b7:12:
65:a0:95:0b:4b:1a:cc:0a:ae:06:e9:5e:11:db:24:
3a:d8:0b:7d:78:e9:af:dd:b4:9e:e0:37:5b:b8:3b:
ab:b0:04:2f:94:4c:70:54:8d:31:2a:63:59:99:15:
63:3c:b0:15:f7:0e:49:c2:48:44:6b:68:da:4f:0e:
54:1c:3b:6e:93:e2:c3:9d:f0:ab:4f:21:0d:0b:d1:
24:01:5c:a3:69:1b:83:0a:3b:e0:71:2e:db:32:08:
27:0d:5d:af:ae:70:99:2c:6f:11:c9:6e:a6:96:3a:
1a:cb:c1:3a:8b:96:bf:b9:98:b4:8e:8b:86:e9:da:
bc:88:cb:2e:f9:b3:f1:cc:55:60:ac:2a:cd:90:78:
72:d5:1d:c6:93:d6:e8:ae:0e:ef:d4:70:2f:bb:19:
ff:84:dc:68:85:4d:42:d2:87:8a:9d:a0:4d:69:18:
69:cd:98:2e:87:86:be:f9:8c:3d:58:56:c8:7a:d1:
d2:b0:b6:f0:24:7c:f2:58:4e:ff:1b:c3:67:c0:fb:
a9:18:f0:e8:62:29:b5:70:0c:47:6f:29:54:44:3d:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:42:97:F3:35:B0:D6:A1:DC:D9:FB:C8:9A:58:90:B5:41:00:83
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A22E68FA8FBC11EC8DE45719C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.76.0/22
Signature Algorithm: sha256WithRSAEncryption
19:97:68:35:d8:fd:c0:88:25:83:4c:b3:74:f4:52:da:ff:f2:
9b:0e:84:52:41:db:bd:7f:20:3b:5c:63:1a:2f:7f:14:ad:98:
f4:09:b9:5c:c6:5a:3c:5e:fe:52:7e:3d:6b:24:7e:8a:4f:2c:
07:7e:d3:03:7f:d0:41:dd:84:10:64:d9:a0:b4:00:b3:28:54:
07:fd:44:2d:e5:46:4c:6e:17:b1:16:5e:54:ba:94:02:7b:7a:
6b:22:72:a3:bd:f7:be:49:06:64:b2:0f:70:1a:f7:d2:fa:88:
67:50:2d:ff:c8:1e:2e:9f:fd:cd:e6:08:fa:45:05:f1:de:ff:
52:e0:33:e9:4c:1f:6f:91:25:4f:69:b7:bc:6b:e9:e0:02:03:
b8:b9:fa:ef:22:6f:ee:e9:5d:bf:45:a5:0f:07:11:1e:9d:fa:
8a:5e:ae:d3:f0:28:a6:3d:6c:78:16:21:14:09:93:14:3c:79:
21:01:e2:64:06:93:0b:6d:b0:50:f7:34:e9:eb:43:02:ad:57:
0a:9f:db:09:65:35:da:8c:49:fd:8b:88:cc:dc:3e:d1:3b:8e:
44:15:31:2d:e0:c0:12:1c:63:a3:bd:7a:7f:c1:74:11:ba:ca:
45:8d:4b:d2:88:59:d1:da:e6:ae:56:3f:29:da:cd:6f:c2:1a:
24:d5:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org