Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9007BEAAC3811ECAB9D0940C4F9AE02.roa
File: E9007BEAAC3811ECAB9D0940C4F9AE02.roa (raw, json)
Hash identifier: sc2OLPe7GsaZkcg9DOBG3g95D5BZPswBiKXmfM/4YIY=
Subject key identifier: 4D:8F:25:ED:4D:D5:19:0F:51:5E:BE:90:E1:BC:E0:4E:59:B4:C2:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4AF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9007BEAAC3811ECAB9D0940C4F9AE02.roa
Signing time: Fri 25 Mar 2022 12:41:37 +0000
ROA not before: Fri 25 Mar 2022 12:41:37 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19186 (0x4af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 25 12:41:37 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=623db881-4efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:c8:96:7e:8b:8d:cb:bd:11:3d:f1:e0:6a:
d7:fe:ce:1a:12:81:99:c0:27:50:cf:d9:54:7e:05:
d5:ff:74:67:84:65:00:73:d0:7c:5f:2a:00:42:c8:
fe:d8:f6:ff:29:8f:68:5d:99:7d:8a:a2:6a:83:46:
07:4e:eb:af:bb:75:cf:44:15:37:5a:25:73:99:81:
3a:38:cb:6c:2a:f7:db:6e:d5:7e:d2:16:eb:66:3b:
be:26:fd:82:93:76:d3:10:fc:fc:88:30:ec:92:bd:
81:a7:f3:16:e5:15:2b:e9:40:af:e5:f8:c5:9c:1d:
9c:e6:4e:9f:4d:cd:5a:4b:6e:99:79:bb:1f:fd:8a:
85:e6:3e:f1:cc:73:f3:38:ac:f2:1b:7c:b8:4f:b7:
54:cc:ea:48:79:86:34:e0:a1:06:bf:92:0d:b7:98:
1b:27:00:35:16:70:60:2a:cc:52:45:4e:fa:d2:b9:
7e:cb:90:7b:c9:87:6c:4b:31:46:8a:39:10:19:16:
91:2b:f0:2f:33:8e:2c:b8:b7:b3:82:e0:82:0c:17:
5e:89:13:f2:85:93:4e:b3:21:77:c2:80:6d:33:a7:
88:6d:b7:38:54:8b:b4:41:f5:cd:8f:c4:65:8f:8b:
72:c3:50:ee:90:ac:f7:10:50:43:01:b1:b0:7b:80:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:25:ED:4D:D5:19:0F:51:5E:BE:90:E1:BC:E0:4E:59:B4:C2:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9007BEAAC3811ECAB9D0940C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.173.240.0/23
103.178.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:18:9d:1a:74:1b:ed:e4:15:57:90:ee:9b:b2:9b:ed:32:20:
13:ca:d7:ea:0a:2d:d5:7e:93:b8:08:02:d7:59:c0:09:d1:e0:
ff:f0:4f:cc:e3:5e:8c:fa:f6:56:43:e3:82:18:87:7d:32:3e:
47:5a:d6:89:a9:33:1f:ac:af:11:bd:46:6c:ac:0d:d2:45:9d:
2e:3f:bc:eb:38:2b:68:ca:dd:26:d8:f5:a4:87:1b:07:f7:4b:
69:53:8f:98:c7:ab:00:c8:44:39:5c:b1:27:8b:8a:65:c7:69:
65:b6:14:28:6c:85:c4:7d:e3:f2:89:96:96:63:0d:70:d2:72:
ff:01:4e:33:85:1e:56:ae:b9:40:42:13:58:86:c6:e1:e4:93:
43:51:33:93:e1:33:09:cc:14:b8:bc:0e:83:87:58:44:e5:e1:
b5:a2:c9:22:d6:10:e0:26:06:5d:5b:a7:39:4c:35:70:c6:5d:
e9:f2:dd:4e:23:cf:79:e7:c7:6e:5d:97:8c:5e:ef:c6:b9:a6:
6a:fd:a2:5d:07:fa:7e:d4:d9:09:ea:47:dd:fa:bb:5b:3e:cf:
34:66:37:c7:49:e3:81:c9:0f:76:ca:4e:c2:c6:c9:2f:32:23:
b7:ce:94:ad:37:a9:77:f3:71:f5:ad:20:f6:79:75:14:18:27:
4c:4e:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org