Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCAAE4EEDB8C11EAB2B9FE09C4F9AE02.roa
File: DCAAE4EEDB8C11EAB2B9FE09C4F9AE02.roa (raw, json)
Hash identifier: p0OD/rmAgjXyiCs8AnK+r3MWo/cJoJECNKCDc2eY+uo=
Subject key identifier: 59:EF:66:C6:48:14:76:F5:E6:3B:73:E9:B0:22:B4:01:EE:31:13:21
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3075
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCAAE4EEDB8C11EAB2B9FE09C4F9AE02.roa
Signing time: Tue 25 May 2021 16:10:02 +0000
ROA not before: Tue 25 May 2021 16:10:02 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 136721
IP address blocks: 103.103.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12405 (0x3075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 25 16:10:02 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60ad215a-5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:41:22:70:4e:c3:a7:cb:c4:f2:7a:3e:e5:
8b:b5:39:14:1a:5a:70:55:82:02:60:73:31:6e:61:
72:61:02:13:0d:61:4c:63:30:f3:1f:c1:08:17:1f:
8b:64:09:97:7c:bb:0b:e7:d9:96:b1:ae:d8:d6:90:
53:3e:64:d3:b5:9d:88:19:ef:ac:e3:18:e3:61:e9:
79:c0:78:18:c4:50:49:a1:96:2c:c6:e6:2d:ab:fb:
99:de:b0:7c:ad:20:41:3a:67:5b:91:da:2b:34:22:
2b:e7:3c:cd:f0:16:b8:d5:3d:7d:42:97:ca:ae:26:
33:87:6b:20:f9:0f:8b:11:18:f0:ad:fc:e1:0e:27:
81:29:93:da:b0:5f:98:8f:cf:c3:cc:f3:1e:8d:79:
cb:50:e4:8c:8a:c6:a4:ff:ae:0b:96:03:53:64:db:
16:2a:61:3d:2e:49:a3:b2:4d:ea:6e:5c:c1:3e:83:
4d:49:6d:6c:f0:8f:92:96:58:98:f0:ab:e7:bf:11:
81:0e:1c:88:59:30:c2:8f:4b:8b:cb:cc:4c:c4:1d:
9d:45:ea:97:7d:23:69:c0:89:e2:31:6a:54:79:09:
8a:54:3f:56:81:57:ba:b3:28:09:6a:7a:36:dc:cb:
f3:98:82:d8:4e:cd:cf:c1:0f:38:f0:b0:4a:0c:57:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:66:C6:48:14:76:F5:E6:3B:73:E9:B0:22:B4:01:EE:31:13:21
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCAAE4EEDB8C11EAB2B9FE09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:6a:57:f7:09:dd:ec:03:74:ac:cb:26:ce:63:e1:3f:32:aa:
55:13:a8:15:c9:9c:9d:4b:2d:00:12:c0:d8:0b:36:02:d1:31:
b9:43:ae:da:24:0a:80:73:e7:78:c5:67:17:6a:81:db:0a:ed:
55:97:69:21:0f:50:e6:96:21:2e:03:4b:00:07:4c:c9:9d:3f:
21:13:61:c4:dc:95:84:c1:25:98:15:fd:1e:d0:b0:5f:28:e4:
6a:77:aa:8d:61:18:bd:47:f8:21:7d:d6:9b:62:bf:97:1d:bb:
2d:ba:ff:b1:d8:ee:cc:10:a3:76:f2:42:91:75:79:74:3b:ab:
14:ff:bf:b8:f2:a4:34:20:7d:87:e7:1e:16:3b:df:e3:7e:df:
58:b1:f3:08:05:be:cd:38:37:a6:d8:e1:e2:4e:0e:75:e7:0b:
37:1e:ae:94:f2:ea:18:4e:c1:2b:86:7e:86:c0:2e:57:20:31:
bf:6f:82:88:ac:bf:c0:d2:94:fc:34:e1:20:14:27:fa:52:cc:
1b:7c:3f:14:92:d1:7e:25:a9:16:56:89:cc:a7:8a:d7:b7:a3:
f9:59:ba:dc:ce:4e:c2:a2:66:34:df:2f:d7:12:c5:11:35:19:
45:51:7d:e3:9a:7a:d3:8c:53:11:64:2b:26:40:a2:13:7e:0d:
24:f9:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org