Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE68E928C39411EB9F40242CC4F9AE02.roa
File: AE68E928C39411EB9F40242CC4F9AE02.roa (raw, json)
Hash identifier: /lH/A9vjLQuPIz1DKTpwKWJWx+UTToLoaPYCCJ678QA=
Subject key identifier: 19:BE:29:B1:F0:93:15:0A:AE:7B:6A:FD:E8:38:B9:86:A7:60:B1:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 353B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE68E928C39411EB9F40242CC4F9AE02.roa
Signing time: Wed 02 Jun 2021 11:21:32 +0000
ROA not before: Wed 02 Jun 2021 11:21:32 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135262
IP address blocks: 103.104.231.0/24 maxlen: 24
103.219.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13627 (0x353b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 11:21:32 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60b769bb-eb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:fb:02:3d:ab:4a:27:09:d6:1f:b1:d8:f0:
1f:2b:2e:51:f8:fb:ae:9b:5e:d3:c1:da:84:4c:e3:
f6:c4:68:23:c2:48:9e:8d:bf:52:93:d1:96:87:09:
f4:ec:1a:b4:f1:23:20:a2:7e:d7:95:6d:65:cc:a1:
b4:53:0c:9e:1e:fb:7e:00:42:93:71:58:20:37:b6:
ef:5d:d2:b7:d4:31:51:b8:57:ad:c0:b6:9f:96:6e:
3a:6c:ae:fd:c4:83:11:a7:c2:ad:b5:11:03:53:79:
65:97:8c:a9:c6:a7:f8:ed:68:b8:5c:93:ee:62:18:
33:60:2e:f3:54:86:f3:be:f6:c7:13:a8:58:d1:ae:
71:62:21:56:91:fd:49:c7:60:99:be:73:05:05:4d:
56:b6:36:25:2d:7e:b5:27:92:bd:2e:38:03:6a:0e:
ed:b6:42:50:7d:0e:3b:f2:89:72:41:49:96:2e:1c:
a5:6b:7c:96:9d:36:a8:4f:e5:93:84:5d:ff:84:0b:
88:2e:7f:0f:4b:aa:1e:8e:4e:8d:4b:17:87:40:35:
96:6b:b4:5d:77:79:f1:6d:70:bc:f8:27:73:8c:9b:
e0:e1:10:5e:ac:86:ae:cd:d2:9f:3a:3e:1d:36:60:
cf:3c:4a:64:db:b9:1b:5e:8e:c0:1a:48:9f:73:85:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:29:B1:F0:93:15:0A:AE:7B:6A:FD:E8:38:B9:86:A7:60:B1:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE68E928C39411EB9F40242CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.231.0/24
103.219.60.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b4:50:ca:94:68:8f:1e:16:b1:24:3e:71:93:da:bb:86:51:
20:c7:bb:9b:cc:54:58:7e:89:c2:f2:5f:f5:40:c7:53:39:a7:
3b:46:91:be:38:50:a3:29:d3:cc:c7:8f:dc:ab:37:66:bb:17:
d1:c9:59:4c:df:57:3e:47:50:30:46:f2:ca:a7:da:74:0e:b5:
58:79:28:dc:9b:41:09:a9:9f:5f:2b:7f:ff:97:66:73:5f:cd:
b9:57:63:bf:92:43:6d:de:18:41:c4:6e:df:3d:63:b3:ef:3d:
d3:5c:16:f5:18:fb:c3:f6:9b:1d:85:0e:5e:1d:60:94:0f:cb:
0f:9f:b5:d0:a8:fe:70:a2:5a:eb:4b:26:80:18:2a:52:c5:d3:
d2:08:82:fc:a0:87:33:79:b0:dd:c8:37:e9:8b:d5:6a:a3:7e:
9e:7c:a4:7c:bd:57:cd:60:3f:ad:c7:5b:13:f8:a1:7c:23:77:
cb:0b:da:76:fd:ad:b0:67:58:3d:12:a9:55:bd:27:a5:55:24:
50:5d:1e:42:81:d9:7e:39:1d:fd:ed:df:99:e0:d4:5b:c2:e0:
39:57:8f:32:1a:ee:4f:3e:54:9e:25:79:94:f7:5a:0a:33:05:
b1:f3:70:ea:e6:41:68:36:71:bb:7b:11:5d:56:82:c3:85:34:
46:08:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org