Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59659F68FEF11ED8ED0464BC4F9AE02.roa
File: A59659F68FEF11ED8ED0464BC4F9AE02.roa (raw, json)
Hash identifier: 9aSX8nt/kg0GtblzRn0iV78jH3R8dSWwjo7zoMjHgeI=
Subject key identifier: 5A:7D:4C:83:F1:CF:64:66:20:5C:C5:9B:83:B6:9D:84:A8:3E:8E:1E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 62C9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59659F68FEF11ED8ED0464BC4F9AE02.roa
Signing time: Mon 09 Jan 2023 07:31:36 +0000
ROA not before: Mon 09 Jan 2023 07:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150606
IP address blocks: 103.61.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25289 (0x62c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 9 07:31:36 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bbc2d7-3cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:28:43:b3:e6:01:02:be:bf:e9:05:b3:c3:
06:66:d8:5b:2a:a1:08:37:d5:6c:5d:02:c6:fb:de:
a6:45:10:bb:f4:da:cb:c8:94:23:24:d4:46:6f:fc:
d6:14:7b:c5:86:61:0d:7e:50:84:49:02:7b:f9:4a:
ce:58:1f:2c:d3:f6:e5:51:aa:c7:d7:8e:2b:e6:c6:
6d:74:e6:60:c1:fd:5a:48:86:25:eb:82:07:ae:26:
a9:d9:5f:33:98:34:e0:fc:98:ba:68:84:90:76:9b:
2b:4c:69:01:73:70:29:8b:5c:e2:22:01:db:04:cc:
5f:ec:8e:ef:b5:bb:57:79:e3:e5:5a:42:a6:bb:fc:
e5:c7:ac:bd:34:b8:97:fc:c5:06:bd:3f:b5:43:62:
5a:ab:41:4e:e6:c4:80:d0:b0:86:94:76:95:e1:49:
63:b8:6b:44:0b:b6:91:0b:6f:1f:e5:6c:84:c3:38:
05:17:78:b1:7a:3f:7c:b7:c9:8e:1b:ce:ef:74:0a:
5d:48:a0:fe:a3:be:b3:a1:20:6e:31:76:83:18:80:
8d:95:23:a0:c3:f1:31:32:af:20:d3:d6:9c:8c:db:
f1:21:2c:5e:bc:24:d6:03:52:8c:0d:ed:e3:0c:9b:
44:ed:4b:3c:5e:4d:fb:ad:3c:e7:ff:f5:2b:27:6d:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:4C:83:F1:CF:64:66:20:5C:C5:9B:83:B6:9D:84:A8:3E:8E:1E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59659F68FEF11ED8ED0464BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:fa:65:ba:71:b5:ba:8b:ef:53:1f:07:63:5c:f7:fd:4d:8a:
f8:53:95:4c:a1:2a:04:f1:fa:7f:32:64:16:12:36:f1:a9:18:
e5:34:b5:b0:9a:1c:6d:70:fa:bb:85:2f:73:61:3b:f0:d9:fb:
6a:1d:09:2f:fb:2d:c8:03:7c:40:ab:4e:4d:a4:77:0d:ca:51:
15:78:3a:b1:05:7d:84:e6:b3:7b:e3:01:45:ac:bc:18:f9:7e:
91:18:6a:70:88:39:5f:40:34:cd:63:26:7c:dd:0f:16:d2:45:
bd:6b:5d:61:87:d1:70:19:d8:10:69:52:da:60:4b:18:5b:86:
b8:64:2f:38:c8:85:74:8d:a0:b5:8a:08:42:5b:7b:88:a8:b4:
60:7a:64:e0:10:50:0e:fb:19:b4:25:d6:dc:84:2b:eb:05:e2:
e1:59:a9:f2:ee:46:c1:64:35:fa:03:80:a6:f8:73:6c:24:1b:
25:1f:91:16:07:1d:5e:a7:5f:c6:f6:a8:3c:36:06:eb:9e:0e:
81:35:bc:5c:39:42:62:12:ee:13:b1:1d:7b:71:f5:59:e5:f7:
f7:9d:4c:af:94:8b:f7:d0:25:7f:08:94:0e:58:e8:f2:68:85:
c0:9d:ef:a7:63:ee:a1:a6:fc:e8:a6:26:5c:4d:7d:b6:37:4e:
95:b5:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org