Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6516DFAD44111EDAA76FD2DC4F9AE02.roa
File: E6516DFAD44111EDAA76FD2DC4F9AE02.roa (raw, json)
Hash identifier: DEZuVgr+qHYayFCp7i9jl10VUiHn6SI2mkGjylRJvt0=
Subject key identifier: B9:A6:30:C8:19:6D:48:A3:CC:D9:FF:8F:4C:BF:F1:65:29:EC:9A:9D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 67F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6516DFAD44111EDAA76FD2DC4F9AE02.roa
Signing time: Thu 06 Apr 2023 06:11:42 +0000
ROA not before: Thu 06 Apr 2023 06:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150638
IP address blocks: 103.127.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26615 (0x67f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 6 06:11:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=642e629e-b138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:d5:e0:c4:9a:21:43:4b:7e:f3:c0:9d:9f:
91:f8:df:89:c7:d4:22:19:3e:e2:31:6d:0c:72:b6:
8e:7f:5b:9d:5f:7a:38:f7:33:9a:03:51:08:32:94:
1c:13:dd:c1:ea:ad:a6:22:47:5a:f8:00:47:5a:ce:
f6:a4:87:4a:af:8b:5d:e4:7d:16:68:5d:b5:8f:79:
91:6c:ba:16:bc:8e:d7:ae:36:35:cc:2c:80:88:54:
99:b2:9a:62:1f:43:a7:a7:64:f4:28:32:93:bc:98:
f7:c3:e7:ec:4e:72:4f:dc:16:db:f9:e4:b4:02:d4:
ad:81:0f:be:69:84:2e:59:08:a0:d1:8a:e9:d9:8d:
e5:d0:52:a4:70:0a:6e:76:67:f2:ed:7d:ac:57:96:
2a:a3:33:8c:2e:9a:80:28:0d:9f:19:f0:b3:07:90:
7f:d7:3c:ad:b2:6b:e9:66:97:90:26:b0:cf:b7:86:
fd:0a:3a:cb:bc:b7:37:80:2d:1c:78:73:10:a8:51:
cd:06:46:17:ea:28:d7:e5:3c:23:bf:d5:43:f6:27:
fc:85:f4:fd:4a:f6:db:32:77:2f:f5:39:63:42:6f:
ea:fb:9c:68:2d:05:3a:5c:37:a5:b5:bb:4c:41:7b:
2e:2c:0f:3d:5e:39:7c:ec:d8:0d:75:93:5a:7a:e7:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:30:C8:19:6D:48:A3:CC:D9:FF:8F:4C:BF:F1:65:29:EC:9A:9D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6516DFAD44111EDAA76FD2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.35.0/24
Signature Algorithm: sha256WithRSAEncryption
50:20:97:10:28:c1:08:5d:db:bf:53:71:5c:9e:40:f7:55:03:
56:16:f2:8d:2f:76:7c:87:52:a2:c2:ae:43:8b:a8:e2:c1:2f:
23:d9:91:a6:9a:00:58:61:f8:54:6a:62:6e:ab:d5:3e:9f:cf:
ba:b7:c2:4a:01:78:0c:67:4b:7e:5e:45:0e:3f:12:8e:67:12:
8e:88:be:f4:a6:37:43:b6:e4:bf:12:89:6f:c7:f0:78:d3:f6:
f6:d7:06:3b:b5:ad:dd:91:87:f3:47:be:81:94:99:36:3d:61:
b0:1f:7d:e7:34:85:e7:db:ce:99:32:92:b9:29:7b:49:85:b1:
30:c9:53:f7:58:20:60:5d:3c:be:82:02:9f:f7:d0:39:72:f3:
e7:b9:20:3c:a9:32:da:b0:78:a2:60:42:c6:08:5a:2a:a9:e6:
af:c2:e0:65:2e:81:13:9c:ee:4e:9a:07:9b:37:9b:f0:7c:61:
7b:c6:29:ed:e0:22:2d:27:1c:89:5b:a2:7d:c1:a9:e7:ad:e4:
31:67:97:21:f0:51:0e:30:b0:2e:f3:22:25:5b:e1:42:cb:f7:
4e:eb:dc:47:08:ba:71:5c:18:1c:07:33:44:16:85:2a:bc:6b:
17:1b:c5:94:1b:d7:83:58:bb:12:7c:ab:ed:0a:c0:9a:af:98:
57:af:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org