Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E81243A8883D11ED87E58B0EC4F9AE02.roa
File: E81243A8883D11ED87E58B0EC4F9AE02.roa (raw, json)
Hash identifier: rKc210CdvYnJPvuPajMFdiojz8Jl615DWkDzB3taD1E=
Subject key identifier: 7E:06:59:76:E3:16:12:E3:85:0A:E5:50:1B:0D:54:84:2C:C4:04:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 623E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E81243A8883D11ED87E58B0EC4F9AE02.roa
Signing time: Fri 30 Dec 2022 12:31:39 +0000
ROA not before: Fri 30 Dec 2022 12:31:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147230
IP address blocks: 103.142.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25150 (0x623e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 30 12:31:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63aeda2a-2d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:64:e0:f9:db:36:fd:17:6a:aa:50:47:69:
43:2b:f4:6f:ca:08:30:8b:d7:b9:08:23:ca:3a:83:
96:48:45:3f:8e:6f:fc:a0:c0:b6:f7:f3:b3:dc:e3:
46:11:ed:33:a2:67:66:6b:7a:7b:f7:14:00:de:c1:
c8:ee:ea:03:a9:7e:03:e8:20:15:88:ab:82:96:aa:
cb:03:60:22:f6:fe:08:79:69:75:50:d7:ff:79:7e:
8e:08:3d:d3:7d:ca:9c:46:73:c9:ff:59:6a:1d:66:
20:f8:e8:2f:a7:ea:4d:07:e0:e5:d1:9a:14:95:c9:
3a:12:2e:5f:49:a0:0f:17:f3:69:87:f8:b4:ff:f4:
e4:33:54:00:bd:55:78:86:c3:41:e8:cc:87:58:65:
aa:c2:d2:62:96:8c:8b:60:04:8b:6b:d6:e0:e4:9f:
87:81:07:c3:1d:f6:0a:fa:b1:ba:74:80:03:d9:79:
19:13:fa:cb:13:f4:24:4e:39:f1:37:45:2f:4f:d2:
aa:17:2b:d7:b7:6e:1e:0a:a1:e0:41:05:58:bb:81:
dd:6b:34:0d:e5:66:64:bc:4b:db:e4:47:50:fc:9b:
14:6e:cf:17:c2:26:d4:b8:c2:28:5c:8c:3f:4b:59:
ea:2e:3a:59:ea:39:12:d6:1b:16:b4:5a:4e:4d:a6:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:59:76:E3:16:12:E3:85:0A:E5:50:1B:0D:54:84:2C:C4:04:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E81243A8883D11ED87E58B0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.199.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:b1:bf:d6:7c:41:e1:6c:4e:45:19:7b:d5:dd:af:bc:58:
90:1a:9f:e7:27:4c:fd:6c:b1:77:35:da:bc:6f:29:9e:90:fb:
2c:b9:c4:d6:8e:82:ac:78:7a:98:cf:a7:66:90:5c:7c:03:75:
f8:7a:6a:b7:f2:29:16:32:7a:35:46:58:a3:5c:90:4c:eb:b3:
11:9c:12:86:04:3a:bb:84:b7:0f:f2:e0:ea:db:49:35:31:eb:
d2:1e:37:55:8a:42:3f:0c:6c:ed:71:ef:d0:75:83:4b:c8:09:
d9:1f:54:99:79:17:5d:13:55:e6:bb:f3:bc:d8:97:f1:d7:59:
e1:56:45:0c:5e:48:5c:84:5c:4f:2c:d7:51:79:33:57:7d:dd:
a8:90:e2:b5:cc:00:ac:49:32:2f:5e:d4:6d:e8:61:1e:84:08:
56:07:ca:c8:dc:da:64:cc:18:e9:48:1a:2b:6c:9f:5b:6b:b7:
c2:a6:67:9d:95:8a:7c:29:4e:d6:e7:36:12:88:cd:a2:6c:27:
5d:c8:cc:cb:08:5a:ef:97:b9:ae:b6:77:ab:36:cd:8f:f2:81:
4e:a2:2e:42:b1:a2:9a:b5:66:dd:fa:c5:35:27:84:7e:c4:14:
97:83:fb:dc:9c:88:70:cf:5c:53:f4:1e:e3:cf:a5:47:8e:f8:
a1:37:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org