Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC59F5CB96A11ECB44AC533C4F9AE02.roa
File: CCC59F5CB96A11ECB44AC533C4F9AE02.roa (raw, json)
Hash identifier: 7COv74c9Yz7jVckmBI2ewpjYZQXCZi2VJO5JsL2Pwok=
Subject key identifier: 41:2F:CE:E2:4A:20:C1:17:85:E3:FD:D0:03:E5:13:BF:BD:F6:BE:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 50B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC59F5CB96A11ECB44AC533C4F9AE02.roa
Signing time: Mon 16 May 2022 04:12:20 +0000
ROA not before: Mon 16 May 2022 04:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136230
IP address blocks: 103.184.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20664 (0x50b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cf24-fce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:bf:c0:90:a6:1a:09:07:61:2d:7e:fd:78:
a6:49:17:10:70:7f:9c:63:aa:63:21:30:69:ce:e2:
78:4d:e2:51:d4:50:69:40:57:d3:cf:3a:36:66:95:
a7:76:36:d5:10:83:ad:3b:00:67:af:22:81:af:1c:
59:3b:86:03:a9:80:05:13:7e:d9:ae:90:0a:00:66:
af:e4:fe:fc:1b:ac:4e:1d:23:99:a5:75:7d:ad:c3:
46:b2:ba:84:ea:a9:78:2f:4e:a8:e3:3d:15:86:0e:
97:96:1d:d1:56:d3:ae:c4:8b:3b:b8:02:80:0d:36:
d8:26:37:8a:49:d5:b0:b0:f5:1f:98:ae:96:07:62:
9f:96:5a:8b:07:62:b6:28:f6:8a:9b:63:ca:fe:84:
6a:da:79:f2:6c:70:d0:79:71:82:15:92:91:51:95:
bb:87:73:59:a2:cc:a5:76:1b:2f:54:54:8d:ef:36:
47:bd:f2:59:8d:45:06:cc:97:da:a9:2d:b2:de:48:
86:1d:ed:86:f0:bf:07:14:65:33:69:b1:bf:2a:40:
6e:3a:8f:3a:b1:5f:56:90:89:71:0d:32:03:9d:29:
6b:3b:d7:f9:9d:73:c8:60:cb:2e:fc:96:83:da:7a:
59:26:e7:5f:d0:7e:5a:2c:52:8e:b0:ee:5a:bd:7f:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:CE:E2:4A:20:C1:17:85:E3:FD:D0:03:E5:13:BF:BD:F6:BE:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC59F5CB96A11ECB44AC533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.106.0/23
Signature Algorithm: sha256WithRSAEncryption
07:9e:3d:9c:72:38:cb:a5:e0:22:3b:ad:ba:ac:18:3b:6f:9c:
7b:3e:0b:7e:3a:9a:96:4b:bf:62:1c:20:5f:e8:ee:9c:06:1d:
17:53:23:84:98:ff:95:5a:84:d8:f6:4c:14:aa:bd:2d:54:b4:
f5:f9:fe:a6:bd:65:a0:4e:9f:ce:cb:3e:40:bb:d9:f7:52:80:
68:f2:ea:02:b9:18:7b:3b:7c:48:9d:6a:3d:ad:d3:19:92:89:
7d:c7:1a:55:34:bb:a0:9b:38:6e:90:58:bf:31:3b:01:73:d8:
8e:fc:95:1c:4f:16:7e:ef:81:49:98:1c:d4:88:44:56:59:9b:
21:2a:b1:5e:bc:e0:70:48:1d:93:2c:f5:5c:8a:b8:e8:6f:53:
e6:6b:b0:5d:09:09:12:5b:dc:86:1f:21:4e:03:54:05:8f:69:
f8:ed:cd:cf:81:81:f5:07:a4:26:b5:89:25:fe:b4:6e:a9:6d:
52:8c:25:39:75:98:3a:79:3b:60:35:bc:76:1f:ba:13:55:25:
4e:71:9a:59:37:db:08:44:44:1d:d9:3e:97:78:a1:b3:17:c3:
95:07:2b:5e:ec:66:d1:4b:45:7f:96:94:44:22:30:f2:9a:11:
01:7c:d1:d8:5e:d0:1d:ff:fa:af:5c:d7:2d:8f:96:45:87:d6:
8f:cb:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org