Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A32534F4B3A911EB8047C278C4F9AE02.roa
File: A32534F4B3A911EB8047C278C4F9AE02.roa (raw, json)
Hash identifier: Igi5WW2SEdT1TsgjXW43n+NXmFQ17/DqmkOMzC+85Po=
Subject key identifier: FD:EE:7A:4A:55:29:00:56:2E:D9:9B:9E:5F:C7:65:EE:8E:79:13:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5743
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A32534F4B3A911EB8047C278C4F9AE02.roa
Signing time: Wed 15 Jun 2022 04:51:45 +0000
ROA not before: Wed 15 Jun 2022 04:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137587
IP address blocks: 103.46.194.0/23 maxlen: 24
103.98.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22339 (0x5743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 15 04:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a96561-26a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:e1:09:67:7c:8a:df:b0:af:26:05:d5:8b:
46:3b:51:9c:40:9d:88:e8:83:c5:cb:1c:26:3e:a9:
fe:ea:07:ed:80:00:f6:cf:78:c2:67:bd:1d:ab:35:
14:63:b2:6b:ff:cf:2e:06:2d:89:60:f6:2e:cc:51:
c5:c6:11:9e:d5:67:59:0b:2a:d0:cd:80:2a:23:32:
76:2a:4e:fa:c1:43:c2:81:c4:71:f5:95:75:11:0e:
56:43:9c:22:87:6d:65:e4:42:c4:6d:88:51:be:82:
8f:6c:7e:28:6f:4f:a3:03:05:9e:6a:04:d0:06:4d:
60:66:bf:41:8f:9e:5e:bb:57:88:b3:53:0c:0c:6c:
b1:15:22:e5:eb:76:c5:18:52:cb:5e:2f:fd:ae:1e:
96:f0:99:ac:d3:b6:25:80:50:29:51:e9:4f:95:e8:
70:d4:82:fb:10:4e:72:9b:76:e2:07:e6:15:d3:4f:
cc:77:af:1d:f1:ab:13:0f:28:ca:49:d9:87:27:34:
0a:6c:23:2b:89:ef:78:dd:1a:71:ab:3b:8d:9f:e5:
2d:99:c5:bc:e1:41:9f:05:a2:8b:33:ac:00:33:21:
f9:da:eb:7d:43:a2:16:98:da:fd:dc:8a:e2:66:63:
c3:31:6f:8a:f4:7f:da:f4:bf:0b:df:80:84:ef:38:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:7A:4A:55:29:00:56:2E:D9:9B:9E:5F:C7:65:EE:8E:79:13:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A32534F4B3A911EB8047C278C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.194.0/23
103.98.188.0/22
Signature Algorithm: sha256WithRSAEncryption
10:77:77:b7:54:f5:bd:92:46:e9:cb:fc:a4:b3:3f:fa:11:e9:
08:f6:95:a4:35:5a:44:94:5a:df:47:32:62:4e:ec:b0:d5:5f:
6b:6f:ee:c2:fa:e6:89:08:fc:a4:7a:66:a3:64:22:5d:35:2b:
b8:a5:91:9b:7d:11:b6:c5:43:eb:7a:97:23:4f:ee:f8:9f:ec:
96:58:d5:2c:ed:aa:b6:05:0d:53:64:73:a3:0e:16:68:00:89:
3e:e7:ff:5e:f9:dd:4a:02:72:55:f9:1e:11:7d:cb:ca:d6:a2:
eb:de:92:fd:db:03:56:55:8f:bf:86:3a:a6:67:80:f0:71:b6:
fd:36:32:35:4e:af:1d:12:95:55:ab:8b:dd:f9:6f:59:40:ea:
c7:ef:e3:47:e3:6e:5e:4b:0d:d6:48:0a:ff:01:6c:3d:97:8b:
d7:59:d3:a7:93:84:fd:41:63:b3:0a:0a:a2:95:a0:15:4d:7a:
f7:7a:b9:90:b8:42:d4:b1:0d:93:88:4d:6c:20:d6:87:68:db:
f0:8c:bb:c3:ad:e4:96:7c:fd:38:aa:c4:8d:d1:79:e4:d0:7b:
cd:40:34:52:a7:47:f8:7d:15:d1:7b:4c:c6:d7:a6:27:b8:47:
d4:74:99:86:3c:e9:8c:93:b2:81:91:25:8c:be:8e:0b:a9:d1:
2d:4a:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org