Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A636824CD2B111ECBE65EA73C4F9AE02.roa
File: A636824CD2B111ECBE65EA73C4F9AE02.roa (raw, json)
Hash identifier: 4EMqvqri6wMUTYQPwHX8+nk1bIc3EwDa8wqwYEXIN5M=
Subject key identifier: 00:23:E7:77:E6:DA:75:52:1C:51:B5:30:49:8F:15:EB:B6:93:59:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4F71
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A636824CD2B111ECBE65EA73C4F9AE02.roa
Signing time: Mon 16 May 2022 04:06:09 +0000
ROA not before: Mon 16 May 2022 04:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133967
IP address blocks: 103.54.100.0/24 maxlen: 24
103.54.101.0/24 maxlen: 24
103.54.102.0/24 maxlen: 24
103.54.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20337 (0x4f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cdb1-fcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:a4:af:fd:64:a7:00:08:a9:df:e9:1e:63:
ef:98:18:f1:76:3d:f0:08:46:50:c6:f0:d3:31:dc:
75:93:1f:e3:2e:da:d8:ee:76:04:d7:be:92:0b:d9:
9e:d8:a0:9b:00:e1:1b:1d:44:e7:3b:c4:35:5c:ce:
22:09:a7:ed:4e:18:a2:23:d5:8f:f9:63:c8:80:74:
34:ec:b6:bf:18:e5:dc:6d:ff:fa:24:b6:e3:d4:13:
79:88:b1:47:05:98:a5:ba:13:24:a6:2b:c5:98:90:
3e:4b:89:a8:ea:dd:1d:a8:a0:9d:56:ba:d2:23:47:
94:3b:e6:ed:6e:96:6b:71:aa:c2:28:ef:5d:ae:99:
24:4c:d8:70:00:f9:79:1c:30:db:7f:7d:f8:5e:16:
ab:be:fa:d3:a9:27:a2:6c:49:63:db:5c:34:f7:aa:
1e:90:e9:84:91:a5:10:1a:7a:34:7e:57:c8:fa:51:
e6:23:ea:19:1e:5f:36:d8:cb:08:68:8e:bc:be:e8:
3f:68:f3:d7:37:b4:f6:d2:2a:00:7a:0d:53:0c:9b:
c7:47:c4:99:97:de:3b:66:26:75:f3:72:74:2d:6b:
3e:87:63:e2:bc:c2:8f:d7:6c:d4:33:1a:48:cc:f2:
5f:dc:2d:31:57:84:de:6e:fc:91:89:c4:be:d5:f1:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:E7:77:E6:DA:75:52:1C:51:B5:30:49:8F:15:EB:B6:93:59:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A636824CD2B111ECBE65EA73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:55:cb:f5:c7:b7:fb:b9:b3:21:24:01:cb:40:91:f5:5c:b9:
eb:dd:fa:d6:fe:05:37:4a:fb:93:9d:e0:60:0b:e5:75:73:a2:
be:9c:35:43:8e:3f:b1:02:28:37:b3:25:18:c3:59:57:24:26:
2d:7d:e3:c1:79:ae:6c:77:1f:82:98:8c:f1:0e:93:ad:3d:f2:
a1:a0:05:51:e2:0d:31:c7:df:d2:eb:b1:40:43:1d:22:0c:85:
3d:35:1c:5c:5c:ad:a9:0d:12:d3:53:7e:98:80:53:67:38:d8:
d5:4f:f0:41:b3:ee:51:15:e4:5d:47:69:9d:86:e0:61:8e:68:
af:76:ee:b9:36:0c:36:59:09:42:41:5a:88:b8:e9:18:35:07:
38:15:17:23:a5:5a:f7:08:c3:30:ce:58:ec:21:e1:86:af:12:
5c:43:ec:ef:cd:0a:0c:e4:39:e1:18:a7:05:9b:3d:56:f8:6e:
58:63:94:64:6b:e8:e5:2d:68:48:e5:a9:2a:96:5d:0e:94:f3:
08:70:1a:75:90:ac:36:c1:62:a1:30:b4:2e:79:70:03:c1:92:
c4:54:fd:5b:1b:aa:76:fc:02:a2:81:63:5a:45:f1:f6:3b:15:
b8:07:e0:90:ab:f6:6f:4e:d9:b9:bc:bd:18:38:1b:73:ca:a2:
73:20:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org