Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1832D288A9511ECAB3F1882C4F9AE02.roa
File: E1832D288A9511ECAB3F1882C4F9AE02.roa (raw, json)
Hash identifier: YlzdG3xfmo3JlZ2CE+MKpHfwcpjB3qeBq9MPtTwmBZw=
Subject key identifier: 03:DC:7E:55:11:6D:0F:1B:B6:AF:33:46:F3:41:3B:FA:89:CD:6B:1F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 54E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1832D288A9511ECAB3F1882C4F9AE02.roa
Signing time: Mon 16 May 2022 04:32:09 +0000
ROA not before: Mon 16 May 2022 04:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 103.142.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21734 (0x54e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d3c9-539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:8b:a9:56:64:af:26:e8:01:ee:24:39:e7:
fd:69:47:88:10:a3:71:19:c1:0a:db:09:0d:1e:c8:
e5:79:8a:b0:d1:06:18:b9:04:0f:46:8d:b2:97:6d:
08:77:c7:9d:dd:da:31:fa:d5:a6:88:ed:2c:33:1d:
ac:b1:7b:37:e3:23:12:e9:41:dd:f9:84:f6:70:b5:
cd:b5:28:2f:5e:3f:27:76:91:62:e0:34:05:b7:a4:
1d:01:85:c1:17:fb:ed:0b:70:f2:5b:0a:69:ba:2d:
8d:d2:dc:e1:07:4a:c3:49:27:e6:6b:98:28:87:2b:
4c:a4:cf:7b:70:da:7d:89:aa:37:e0:74:92:27:c1:
47:4d:2e:65:00:30:8a:92:9a:5a:e2:b3:07:a4:7f:
d9:c8:3c:52:76:82:37:31:84:16:8f:93:e6:ea:35:
74:1e:70:88:3d:c0:11:c0:a5:cd:9c:5b:a8:ce:62:
24:11:69:c9:d2:5c:3b:52:0a:97:54:20:c8:34:a8:
dc:9a:68:8c:1f:bb:77:43:27:7c:8b:9a:42:46:1c:
0f:23:81:fd:5c:de:14:b4:80:40:f2:2e:21:76:18:
74:23:87:94:1f:24:ba:9d:82:0e:be:c5:f7:87:28:
cb:6e:9b:86:f0:34:34:ac:21:68:0a:d1:c7:4f:39:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:7E:55:11:6D:0F:1B:B6:AF:33:46:F3:41:3B:FA:89:CD:6B:1F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1832D288A9511ECAB3F1882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:84:ee:60:53:57:a7:10:b9:62:ec:9e:30:cb:14:5c:30:64:
fa:b9:89:e0:41:33:97:e6:e4:43:ce:69:73:02:db:1c:d4:72:
21:1d:89:af:0d:f8:74:b5:1e:32:32:db:27:af:9e:88:09:87:
30:a9:2f:ee:87:88:ca:e6:e8:9c:d0:d9:01:8c:b8:39:32:0e:
15:cc:8c:29:e8:75:ed:32:fa:82:25:d2:9f:b2:5a:11:12:b4:
14:74:68:39:79:16:45:15:50:8a:7a:6c:54:9a:35:de:b7:dc:
9a:fe:84:2e:0b:71:7a:07:eb:ca:03:57:7c:dc:b4:3e:63:03:
d4:92:30:ef:da:14:c0:f4:92:a9:4f:a9:a0:3d:3d:f8:60:63:
32:85:e4:3a:97:bc:ce:bb:d1:5e:e0:c6:8b:24:fa:64:eb:0f:
f6:c9:93:8b:34:81:c0:9b:0a:0b:f1:05:d4:cb:c5:ef:57:ba:
91:6e:8b:57:f5:ed:84:dd:63:89:7c:7a:28:84:4f:ae:71:25:
b0:e3:97:bb:9d:49:15:f8:3a:6b:6c:f5:11:75:21:30:b1:17:
f4:bd:61:81:ea:84:fa:58:12:cf:b6:a5:8e:25:9f:87:b7:a9:
4e:2b:0f:d7:6f:12:65:05:76:1c:c3:25:c5:bc:0f:ea:96:1b:
84:6d:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org