Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A393F462E24B11ECA37AFA6EC4F9AE02.roa
File: A393F462E24B11ECA37AFA6EC4F9AE02.roa (raw, json)
Hash identifier: 6pM8eePLnaufnAfR5CTka/PvrjMEShWwHogRN818Zl4=
Subject key identifier: E5:1D:2C:ED:73:17:D4:DE:08:11:8E:EA:9C:94:71:8D:93:38:37:09
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 567D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A393F462E24B11ECA37AFA6EC4F9AE02.roa
Signing time: Thu 02 Jun 2022 08:11:44 +0000
ROA not before: Thu 02 Jun 2022 08:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134851
IP address blocks: 103.188.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22141 (0x567d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 08:11:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=629870bf-fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:dc:1d:1c:b5:df:42:a4:da:c0:1b:6e:6d:
0b:c6:01:d8:a4:50:10:ea:97:e2:74:7a:1e:0a:f7:
09:75:64:c7:0c:9d:6b:53:48:cf:cb:f7:00:6f:57:
38:3d:4e:fc:23:17:18:90:48:e0:c7:a2:1d:2a:a5:
5f:35:6c:ce:25:9f:02:7c:f0:28:d5:92:3f:97:e5:
54:ee:de:c4:e4:ac:8d:26:1c:c1:9e:1b:3d:d5:be:
f0:e2:83:93:55:f2:cb:e0:e5:d6:cc:e1:8e:11:bd:
30:82:9d:bf:31:8f:4f:f4:ec:2e:c4:f5:2c:eb:bb:
31:6a:0e:c7:9b:44:f1:a6:5b:42:53:f8:c3:e8:3e:
f9:aa:28:c9:fe:bb:a5:73:d6:54:94:35:d3:ea:49:
f7:d1:c0:f1:0d:40:99:fc:9a:c6:b3:23:16:2c:e5:
b1:ea:a6:02:61:20:5c:c2:a5:79:91:ce:15:78:cf:
c6:57:2f:98:c9:c7:e4:2a:6f:ab:78:61:7b:dd:ab:
56:95:f5:62:11:d9:7e:e5:37:c0:4e:61:dc:90:2d:
41:87:37:a8:7f:e5:90:80:8e:f6:bd:f3:0b:5a:8d:
2e:99:66:29:eb:c1:fd:01:91:80:58:46:bd:c5:f7:
1c:92:3e:1b:81:c7:54:8a:e3:6a:8b:96:ef:cd:b0:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:2C:ED:73:17:D4:DE:08:11:8E:EA:9C:94:71:8D:93:38:37:09
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A393F462E24B11ECA37AFA6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.114.0/23
Signature Algorithm: sha256WithRSAEncryption
61:1e:74:5c:c8:6a:09:85:ae:8f:87:55:2a:2c:6d:8f:2c:53:
98:c3:c7:c6:81:f9:70:bc:05:20:5f:bd:45:3a:7a:7d:de:6f:
ed:df:53:2d:7a:43:1f:25:ee:db:f4:ee:d8:dd:fa:d9:6c:d0:
f1:9f:28:11:ac:08:6b:6a:3b:30:09:e7:2b:13:2d:e1:81:42:
a5:09:6b:02:40:b3:71:0f:9a:15:32:c0:29:bb:be:9d:2e:45:
b9:e7:1a:7e:eb:a0:e2:eb:84:fc:6f:10:03:b9:ef:9f:70:a5:
01:10:c4:2b:c6:45:9c:c3:51:8c:4d:aa:8c:01:6f:f6:af:14:
56:92:22:89:e6:f3:65:75:35:31:99:56:f5:37:bd:a3:e9:5b:
2d:29:b5:5d:0b:17:be:dc:5b:d9:d7:16:fa:e5:a7:7c:25:56:
92:cc:dd:04:5c:ef:da:ce:50:ec:cd:42:b9:e9:22:49:a4:d0:
2b:ed:0e:7a:8a:f8:4a:4b:14:f3:21:52:ad:5b:b9:86:cf:81:
aa:cc:a6:b1:aa:48:fd:99:e3:8e:97:d2:8e:ac:ff:3d:ac:60:
4d:b2:b2:9d:f6:ea:22:2b:08:37:84:5d:b0:cf:5f:dc:ea:2f:
ac:e5:48:bd:67:63:c9:48:e5:43:ba:81:de:91:86:d1:e9:39:
f2:d0:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org