Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A414702E001A11EC80D8FC39C4F9AE02.roa
File: A414702E001A11EC80D8FC39C4F9AE02.roa (raw, json)
Hash identifier: DPh03For2U3p6+ZdULHiW5rRZ1W8uuH5mysF5TYTdog=
Subject key identifier: D7:C2:F5:4A:92:71:4E:79:C5:05:F7:E9:C4:8A:91:01:02:CE:EE:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 49EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A414702E001A11EC80D8FC39C4F9AE02.roa
Signing time: Thu 10 Mar 2022 11:01:52 +0000
ROA not before: Thu 10 Mar 2022 11:01:52 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138713
IP address blocks: 103.170.146.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18926 (0x49ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 10 11:01:52 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6229daa0-3010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:db:dc:49:41:37:08:e1:69:31:73:91:ec:
ac:8a:56:e5:c9:9d:0d:04:99:b0:dc:06:8c:da:11:
5e:06:ae:3a:99:49:55:ce:85:48:53:c2:5b:37:40:
d0:37:14:17:d5:e8:e5:97:25:b3:47:29:ef:c8:e1:
a2:65:8e:91:00:21:d0:98:06:15:49:e2:29:52:29:
e8:ec:94:55:ee:44:e3:c8:ab:11:5b:81:38:c1:35:
c3:0b:28:93:a5:0b:0c:c4:97:7e:2b:2f:ce:ef:a1:
4e:bd:07:14:26:6c:27:e6:d0:09:9b:80:ae:f5:e6:
bf:c9:8b:65:95:7f:f7:c0:99:7a:56:b4:ca:22:13:
ce:fb:50:18:5f:13:91:61:55:52:64:c9:28:65:fd:
77:02:01:21:0f:e0:9a:04:a4:bf:33:77:13:89:ee:
40:f6:9a:45:80:16:b0:a2:7e:d9:da:c4:0b:b8:72:
c9:e8:dd:e5:59:d4:02:02:a5:ce:c4:54:44:76:80:
40:e9:cf:90:e6:f6:79:f3:40:af:53:5a:e0:92:3f:
85:28:09:ec:d8:b1:18:1e:0f:10:ce:a5:80:47:f6:
dd:be:86:ea:83:4b:25:2c:de:57:02:0d:08:69:09:
41:0e:04:83:3d:52:de:23:b0:f1:3e:8d:05:58:d8:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:F5:4A:92:71:4E:79:C5:05:F7:E9:C4:8A:91:01:02:CE:EE:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A414702E001A11EC80D8FC39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.146.0/23
103.173.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8c:23:04:13:58:85:53:7a:b9:09:c8:cc:79:46:10:8e:38:
9a:b7:a3:df:df:5f:82:24:c8:34:3b:40:3e:50:57:13:3d:61:
d9:04:20:45:c8:8f:bf:11:4b:6b:25:eb:dc:bf:d0:2a:98:58:
9d:29:cc:eb:84:2c:9c:cd:6c:1d:7e:a2:90:73:36:8a:b0:f0:
a5:fb:f3:d1:a3:0b:68:70:54:2b:fa:b1:33:57:16:40:d8:69:
c8:6b:18:ed:43:26:6b:5b:b6:81:fd:b5:75:65:1d:43:bc:95:
43:cc:c6:fe:ec:ef:bf:4e:40:09:a9:23:df:3a:20:1f:05:39:
0c:5d:43:47:b4:6a:d1:d9:41:97:0b:b7:e4:99:99:4a:5f:07:
db:87:04:52:4b:ca:58:29:ef:74:51:bb:21:5c:8f:92:9a:e5:
25:ee:cf:39:eb:da:bb:20:dc:84:86:a9:15:16:91:7b:db:de:
04:d3:50:12:09:fc:80:7b:fa:89:c4:87:94:11:54:73:c6:f8:
be:29:7d:6a:2e:98:58:02:df:9c:2c:24:c5:bf:41:00:42:40:
a8:f7:80:5c:69:63:72:c9:45:45:7f:fd:92:2f:17:75:57:ad:
95:4a:1d:c2:a5:01:d6:6f:d8:56:38:77:59:e3:42:22:25:e3:
7a:b5:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org