Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D20981ACD34E11EB8BCC4941C4F9AE02.roa
File: D20981ACD34E11EB8BCC4941C4F9AE02.roa (raw, json)
Hash identifier: 7YFtnH6GF9BlBq0MlI43cc5NyOw8uQIvkK/HpLd//9E=
Subject key identifier: 63:14:70:ED:A6:4A:DE:DC:18:A5:56:93:76:08:C5:45:71:7B:6B:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 538C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D20981ACD34E11EB8BCC4941C4F9AE02.roa
Signing time: Mon 16 May 2022 04:25:49 +0000
ROA not before: Mon 16 May 2022 04:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142033
IP address blocks: 103.59.204.0/24 maxlen: 24
103.59.205.0/24 maxlen: 24
103.59.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21388 (0x538c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d24c-1788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:8f:df:95:6a:92:12:0d:88:90:27:ec:ca:
e2:63:c5:07:16:fa:90:27:77:2b:15:bd:5c:63:66:
2f:16:0f:d3:48:f4:d4:c3:7e:55:de:f2:1f:ca:83:
a1:c8:2b:2d:4c:12:73:6c:73:49:19:8d:71:7d:d6:
dc:53:bc:0f:7d:d4:a7:55:a9:29:4a:68:73:ff:f3:
c9:8c:5e:9a:2a:b4:4d:84:69:d8:93:48:f7:1e:0b:
91:49:5c:cc:7f:a5:c7:ff:61:8d:97:8c:cb:75:c7:
43:66:a1:18:9f:6a:a7:d5:55:e7:f4:fa:48:b5:02:
d9:7c:15:b3:8b:eb:9b:0c:e0:f0:05:e0:df:9b:ab:
72:fb:21:ef:ba:ba:6b:07:f3:7d:aa:75:af:f0:19:
69:ff:3d:93:1a:51:bb:d2:01:7b:f8:7e:7a:d8:2f:
fb:96:c0:ad:a7:d5:79:44:7a:b4:6a:fa:2a:80:92:
99:a5:0b:39:28:40:15:b4:85:aa:33:b9:b7:08:d1:
44:32:da:a8:0c:1c:10:85:5c:40:89:40:46:60:52:
47:90:53:17:03:26:f2:3f:29:8e:97:8b:73:72:8a:
39:7f:56:8f:99:d6:54:e2:39:fc:39:d9:da:56:94:
c0:5b:82:67:ef:df:bc:94:de:0a:b3:b4:2d:6c:41:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:70:ED:A6:4A:DE:DC:18:A5:56:93:76:08:C5:45:71:7B:6B:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D20981ACD34E11EB8BCC4941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.204.0-103.59.206.255
Signature Algorithm: sha256WithRSAEncryption
44:d8:de:2d:fc:78:c8:a5:c5:18:d0:39:82:0e:82:52:0e:56:
f7:b1:1e:16:05:f2:17:33:b1:df:17:99:26:48:17:69:5e:fa:
53:39:50:d2:c2:3b:87:d8:07:9a:d5:7a:a1:00:b9:43:6c:15:
d1:20:79:66:f0:69:7c:bb:0e:b9:fa:5e:54:55:e3:5f:f4:7c:
b6:d3:e8:dd:8c:21:c1:2e:9c:6b:21:91:ca:83:c0:df:1a:5e:
99:54:f6:a1:3b:7b:21:68:a8:4a:57:4a:a8:f6:98:6b:7a:1a:
0f:f5:1a:40:d2:53:12:49:5e:25:81:3c:d8:54:80:b9:9e:c0:
9b:8a:5c:b2:0d:ed:5c:aa:80:a8:77:37:07:14:b5:eb:11:1b:
be:92:06:7e:9a:db:fa:3b:85:85:d8:dd:2a:b7:1b:90:92:f2:
a0:78:18:ba:3f:fc:4f:db:6a:1e:03:19:e2:5d:1a:ad:28:16:
46:b7:70:de:69:3f:7b:55:f0:8f:4e:28:07:74:16:0b:15:ae:
91:f7:1e:66:39:ac:99:9c:d9:b2:65:7e:ac:2e:06:6c:a0:f3:
d5:d0:73:25:b5:0d:78:f4:d4:0f:ff:e6:9f:55:e2:a4:71:8e:
2a:6a:75:0a:1f:4c:54:bc:5f:ef:ae:7a:17:94:f1:b0:1e:37:
4a:8f:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org