Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B0F260FB9611ECB0A2556AC4F9AE02.roa
File: A3B0F260FB9611ECB0A2556AC4F9AE02.roa (raw, json)
Hash identifier: IKXWhYnodkIWY6wDz2yCM5dFs7FSbqhQCI2I4t4Vwl0=
Subject key identifier: 72:A7:EB:3B:82:37:EF:C0:9F:A8:70:BB:2B:8E:60:73:3A:99:84:70
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5886
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B0F260FB9611ECB0A2556AC4F9AE02.roa
Signing time: Mon 04 Jul 2022 12:41:35 +0000
ROA not before: Mon 04 Jul 2022 12:41:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136288
IP address blocks: 103.87.28.0/22 maxlen: 24
103.154.26.0/24 maxlen: 24
103.177.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22662 (0x5886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 4 12:41:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c2dfff-63c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:34:15:e8:95:81:a9:45:cf:30:68:84:94:
8d:9e:db:55:85:2e:43:e7:d8:93:e0:12:6c:66:ab:
c3:6c:d1:2b:48:97:09:6b:d2:37:b4:5c:7b:d0:0f:
6d:93:54:13:45:30:85:b6:81:cd:2b:12:34:5f:ad:
99:c8:05:df:33:11:fb:88:1d:18:95:c9:96:ac:e6:
d0:e5:53:24:20:12:1f:de:a0:64:ae:53:2a:99:9f:
76:e6:83:01:d4:70:cc:18:c9:c5:fc:ca:70:6a:23:
d1:b1:7b:ba:65:d6:be:78:ea:7f:47:38:66:37:d2:
76:96:1c:ea:9e:c9:6f:2a:43:a7:22:65:cb:dd:76:
3f:7d:df:f3:85:fa:9b:fc:4a:12:49:bc:30:2f:30:
28:3a:f2:8f:5d:e7:99:71:7b:35:17:0d:58:75:d6:
60:b7:91:8d:79:f5:19:78:21:85:20:28:d1:64:3b:
b8:0a:6e:61:89:4f:f2:01:ce:d8:b4:9d:8e:4e:d0:
bc:77:83:51:cc:03:51:06:52:5c:c8:96:fc:1a:bd:
7c:4b:c3:00:92:53:41:a9:c7:44:49:7c:1d:44:c0:
1d:1a:26:92:41:5d:13:14:f2:85:7c:6e:c3:ea:6f:
f8:41:8d:5c:e7:74:a1:5c:ac:fa:90:ac:1c:0f:b5:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:EB:3B:82:37:EF:C0:9F:A8:70:BB:2B:8E:60:73:3A:99:84:70
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B0F260FB9611ECB0A2556AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.28.0/22
103.154.26.0/24
103.177.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:69:2b:d8:7a:9c:98:72:c1:92:dd:1e:9d:2f:f2:4a:ed:48:
bd:1a:5c:b7:0c:1c:4b:17:22:de:ca:12:19:27:17:23:e9:27:
19:a1:8c:d0:73:8e:ea:f7:1f:02:f5:bf:57:e7:84:75:62:2d:
9d:d4:e4:41:55:b6:ac:dc:d7:5d:ef:67:40:9a:b5:d2:99:90:
9d:0a:98:e9:e8:2a:99:7c:23:53:b0:d0:be:45:02:93:1c:4b:
22:c6:32:2b:32:50:dd:3c:dd:09:b2:3e:3d:c8:d8:85:df:3d:
3c:77:76:b6:4f:07:a8:b7:d0:54:dc:89:c1:ab:ed:0d:5b:a7:
b2:54:4a:69:df:02:6c:2c:6c:c1:b5:fc:28:72:6b:c6:15:bf:
6b:dc:fe:e7:77:97:ab:88:ea:f9:1c:6a:aa:fa:6e:72:5b:64:
a5:dc:eb:5d:60:33:c8:07:7d:c0:a3:21:26:07:0a:7d:a8:de:
93:9c:bd:a3:86:19:5b:61:f9:4b:ad:28:42:6d:4f:ca:db:4b:
9e:50:d8:ec:b0:4e:ed:d6:16:bb:63:71:1d:13:16:a7:41:0e:
9b:f8:74:e7:47:c3:e4:f6:b9:8e:f1:01:5b:04:f1:72:c1:68:
68:c6:1b:f8:28:54:a5:27:9a:fa:64:d9:ae:78:e7:3a:f7:c7:
80:84:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org