Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCD4A2F022EC11ECAD9D3041C4F9AE02.roa
File: CCD4A2F022EC11ECAD9D3041C4F9AE02.roa (raw, json)
Hash identifier: SNaMzRcW9VVgAAdZakmoIJIdVUc+WMgnuKx9bQC+ZtQ=
Subject key identifier: 12:11:D3:96:72:78:CA:EC:CD:C7:E8:73:B4:6B:A1:3E:98:90:3D:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4393
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCD4A2F022EC11ECAD9D3041C4F9AE02.roa
Signing time: Wed 15 Dec 2021 17:11:28 +0000
ROA not before: Wed 15 Dec 2021 17:11:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 209371
IP address blocks: 103.142.65.0/24 maxlen: 24
103.163.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17299 (0x4393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 15 17:11:28 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61ba21bf-15a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:bb:7f:7c:13:ba:d1:d6:9c:33:f0:52:8e:
fd:11:85:dd:f5:4c:c4:68:59:6a:09:15:fb:47:6e:
87:b8:ce:b1:48:42:27:31:45:7a:81:e2:d6:6b:f5:
61:d7:d6:ac:15:41:d3:5e:d8:2c:b4:67:fd:ec:cf:
b2:09:36:b1:6f:e5:6f:4d:42:0d:54:3a:6a:04:a0:
40:da:e8:5c:ae:8b:d8:e5:37:21:4b:e2:1e:d0:24:
5a:71:80:e2:e6:a5:9e:fa:66:91:05:0a:53:3b:5b:
cd:fa:e7:8e:ea:c5:bb:66:60:d2:f5:93:ed:b6:88:
9f:41:7b:f2:58:29:0c:a0:37:4a:93:58:70:ac:fe:
2d:e3:8e:92:05:9c:39:c4:0f:b5:7f:8c:09:55:16:
cc:34:b5:5c:0c:0a:7c:c6:14:7f:a2:34:52:b7:d8:
93:bd:af:2f:53:78:bc:5e:2f:f9:32:ef:ef:10:71:
3d:aa:2f:51:18:45:b0:5b:56:c6:87:6d:64:00:b5:
5a:03:c4:33:60:e5:52:5f:d2:a5:3a:40:90:53:37:
81:d3:bf:96:1f:ff:85:07:f5:db:7f:95:f7:33:ef:
2b:51:e1:86:8b:8c:ce:7e:1b:0d:2f:ac:81:1d:a3:
07:3c:28:dd:fe:56:f5:fb:c6:cd:01:c2:68:71:e9:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:D3:96:72:78:CA:EC:CD:C7:E8:73:B4:6B:A1:3E:98:90:3D:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCD4A2F022EC11ECAD9D3041C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.65.0/24
103.163.91.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c2:1b:c1:70:bc:0b:66:86:5f:ea:fa:56:1b:7c:4a:8b:90:
a7:9c:a8:e4:9b:30:71:94:c0:f6:06:d7:63:04:bc:b5:20:96:
15:a4:3c:6d:67:d0:76:f4:c8:20:6c:18:0c:e2:07:f2:ea:cc:
03:83:56:f9:9e:27:0f:32:d9:45:9d:0e:1f:cf:ed:75:a3:fe:
80:86:99:1b:56:3c:ff:74:49:a3:45:97:92:2a:da:8e:34:31:
79:af:40:e7:3a:a5:fd:73:90:bc:74:f8:5c:31:d8:75:28:a1:
03:0d:6f:1b:63:78:0f:23:bd:b1:f8:d8:67:6e:40:8d:3d:1c:
78:49:d1:51:1a:7c:b6:0a:12:df:05:04:5a:77:70:1c:02:6f:
35:55:1b:05:fb:ea:da:6d:a4:47:3d:42:11:4e:f2:dd:35:c6:
87:c7:b3:89:82:76:25:3c:95:b8:ec:fd:2b:8e:50:1b:fb:21:
91:6c:d4:9b:cd:de:c0:1e:0b:c3:53:9c:96:67:c0:c8:7f:16:
32:77:10:86:cf:90:bc:2f:90:d3:aa:ae:65:b3:4e:ca:8b:bd:
59:41:20:0b:67:df:14:db:5b:58:99:2b:83:99:82:08:ce:10:
6e:df:71:f0:ab:66:b4:0e:5d:98:98:c3:6e:2b:b8:37:dd:4f:
41:f8:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org