Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEDD4AE6190C11EBADB1173DC4F9AE02.roa
File: DEDD4AE6190C11EBADB1173DC4F9AE02.roa (raw, json)
Hash identifier: IJ8HdAb8GFP8TENFTfeFpN2tGYA1zknGKJdNP+WDCJ8=
Subject key identifier: 1F:FC:91:41:2D:0F:60:5C:4D:B2:04:DD:01:05:49:DA:4A:95:84:37
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4FBC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEDD4AE6190C11EBADB1173DC4F9AE02.roa
Signing time: Mon 16 May 2022 04:07:34 +0000
ROA not before: Mon 16 May 2022 04:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134303
IP address blocks: 103.61.231.0/24 maxlen: 24
103.133.38.0/24 maxlen: 24
103.155.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20412 (0x4fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ce04-6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:02:6c:d0:14:6b:c4:1a:29:46:87:35:a5:
ba:64:fd:44:7e:ad:34:1b:30:c9:6e:97:ad:3a:e4:
9e:55:1a:8a:1c:c5:39:8a:6f:f5:f6:47:4c:bf:db:
ee:c0:bd:ba:6c:76:9d:a8:2e:18:d0:68:c4:a8:be:
fe:63:3d:d8:53:d5:45:0b:4e:e0:91:09:9f:e7:8d:
48:ab:4b:4c:47:fc:88:1c:1d:b9:f2:42:7f:bb:51:
31:19:1e:eb:6d:a0:f7:23:4b:40:c0:f6:1e:33:7c:
01:d4:4a:c5:08:6c:a7:4d:96:32:6a:c0:90:be:78:
79:96:73:cc:15:91:aa:1e:6e:c7:22:6d:2b:2f:52:
dd:45:fb:84:88:91:e7:42:b3:0c:e0:ea:1e:1f:62:
92:96:e3:e2:bf:98:19:6a:e1:10:60:9d:ea:33:5a:
85:8f:00:c7:d0:e9:6b:ca:40:bd:93:1e:16:04:28:
fa:d9:15:1c:66:54:af:fd:bc:af:57:3e:e3:2f:98:
cd:1f:77:44:83:c2:b0:f6:7a:8a:4e:77:2b:b2:a6:
a9:98:16:a7:09:0f:b5:94:b7:28:d2:29:13:76:69:
44:3d:cf:c1:58:1e:ae:29:d3:74:1c:82:60:3c:59:
ff:a5:06:31:ce:15:ec:96:c3:5e:b2:94:a9:69:09:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FC:91:41:2D:0F:60:5C:4D:B2:04:DD:01:05:49:DA:4A:95:84:37
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEDD4AE6190C11EBADB1173DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.231.0/24
103.133.38.0/24
103.155.147.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2b:00:d1:ee:3e:40:f5:3e:7f:6d:b7:1a:a7:18:a6:2f:91:
7a:ef:c5:90:a9:2a:41:ac:02:29:b6:9c:a8:3e:72:3d:0c:b1:
c5:48:e1:e6:52:94:ee:45:f1:2b:9f:8e:07:53:1a:28:a3:b9:
b0:d8:63:fe:56:02:db:89:0e:66:28:43:2a:da:44:2d:e1:9f:
88:03:6a:b7:fd:f7:49:30:78:5f:57:bd:af:52:2b:3a:f1:d0:
e5:05:d3:cd:0f:0e:ba:4a:91:15:d2:f0:c6:72:48:db:e9:ff:
39:b1:c6:c8:ec:4d:e0:67:cd:86:2e:2f:fd:c7:14:3f:67:8d:
82:c1:22:25:93:a8:31:56:ff:01:71:da:4b:74:62:2d:6d:9d:
23:ef:25:4e:50:c4:c0:4d:3a:3b:a0:01:6e:a0:c6:cb:c4:ac:
10:00:69:4d:7b:97:44:f7:ce:73:fd:99:32:69:7e:b3:0d:7b:
f1:02:79:9f:18:ab:e2:d8:a6:d3:fd:35:e0:b5:ae:9a:b7:1a:
15:f4:da:c8:ab:d1:e0:db:61:5e:f0:c5:d2:d4:6d:7f:47:c9:
8e:f2:c6:46:d3:38:96:b9:0d:f9:e1:aa:d1:df:9f:9a:6d:69:
22:52:62:04:76:ac:2c:aa:bb:5f:e2:f5:4b:32:2c:0a:f8:6b:
14:5c:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org