Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A826B02C21E911ED8D28CF48C4F9AE02.roa
File: A826B02C21E911ED8D28CF48C4F9AE02.roa (raw, json)
Hash identifier: NlqUNOUz9x6zcWU/c5gGLrFUj79dCLffHjD/xpSDJPY=
Subject key identifier: 83:15:CE:46:90:73:92:A0:DC:AE:95:2E:9B:80:D1:6D:A2:0C:5F:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A826B02C21E911ED8D28CF48C4F9AE02.roa
Signing time: Fri 02 Sep 2022 13:31:44 +0000
ROA not before: Fri 02 Sep 2022 13:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150030
IP address blocks: 103.165.72.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23695 (0x5c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 2 13:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=631205bf-cb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:1f:61:aa:c6:ab:7e:58:e8:19:70:b4:d1:
7d:5f:b5:8a:43:63:32:ac:9e:f2:46:a1:99:1f:10:
41:17:63:1c:93:2d:b9:0e:aa:7f:b3:dc:c9:a4:63:
c0:de:72:13:2e:50:eb:51:b8:aa:93:99:85:1d:e5:
d4:47:b0:75:82:ab:cd:0c:9c:9d:f3:6f:40:d9:10:
df:65:e5:2f:e8:d5:d5:88:4c:0d:c0:a7:70:c4:a2:
cc:c3:ff:57:1c:c7:06:ef:5a:3e:6f:af:f7:99:85:
4a:ec:12:3c:3f:71:2e:d4:4b:46:d9:8e:7f:17:07:
05:9d:39:cc:ab:ec:86:1f:f2:b7:29:34:66:dd:0f:
5a:7f:a6:a1:c1:23:4d:52:d8:11:90:b0:c2:1e:90:
dc:04:9b:81:68:32:a3:4e:6c:a9:ea:f1:6e:d5:ac:
85:63:d5:eb:92:cf:bc:c4:09:26:85:2e:78:d8:f2:
62:a0:34:55:05:0a:c5:82:85:b3:b2:4a:08:fc:89:
08:b4:85:71:e8:c3:e1:07:e8:2d:e3:7a:a7:f5:6a:
2d:8a:3b:68:48:ba:40:26:14:f5:f0:48:f0:3f:cb:
ad:26:90:0f:2a:d4:2c:a8:e7:01:5f:ef:73:7d:64:
7f:f6:ed:14:82:46:7d:7a:39:9c:8a:7a:5a:b5:bd:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:CE:46:90:73:92:A0:DC:AE:95:2E:9B:80:D1:6D:A2:0C:5F:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A826B02C21E911ED8D28CF48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.72.0/23
103.171.110.0/23
103.178.160.0/23
103.178.166.0/23
103.178.202.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:1f:94:0f:d1:94:5e:b8:1e:08:57:96:06:d3:03:e0:7a:e2:
a3:49:a8:63:ea:2b:b2:bd:aa:93:ca:a6:29:ae:d4:3e:bd:6d:
ae:c4:38:4d:77:84:0b:6d:54:9d:f1:a9:3e:72:ae:9a:44:21:
24:30:42:78:a5:ad:dc:42:17:b2:b9:f8:b9:41:b6:54:de:56:
fc:0c:5d:70:d8:97:92:ee:c0:3e:96:b0:c2:ed:cd:ef:bd:03:
c9:8a:c2:c9:11:3f:e0:67:ae:b6:0e:25:e5:36:fd:cd:fb:e2:
2c:bc:5e:8e:ab:4d:45:f8:56:57:54:63:5f:e2:e9:6a:d5:ca:
a7:72:28:9f:e3:be:9e:dd:97:27:a6:3f:91:9a:22:71:6b:82:
7c:a1:e2:09:12:0c:d3:a6:fd:6c:23:a4:92:39:e1:de:97:db:
0b:7c:ec:4b:37:20:76:60:4a:57:2c:56:b0:ff:c5:e1:44:74:
e6:ea:ff:a5:64:6c:c4:be:3b:43:13:76:40:41:c3:f1:0c:26:
4b:e2:cd:a2:6c:62:c9:af:54:04:1a:11:70:25:f9:65:15:4c:
e5:05:07:63:c6:22:8a:79:ec:a0:62:52:b2:8e:48:45:1a:80:
5e:9c:2b:e2:99:ca:14:ea:0b:c6:c2:7e:62:a1:7f:69:20:1e:
f1:42:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org