Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3BD98C67C011EC9482490EC4F9AE02.roa
File: ED3BD98C67C011EC9482490EC4F9AE02.roa (raw, json)
Hash identifier: wrnmcREtxcot06/jEYbpke5FX9D1QAozTYHC94l/1Kw=
Subject key identifier: B6:CB:51:8F:85:74:67:6E:A8:AE:D2:17:6B:1C:CD:D4:EF:ED:99:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 461F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3BD98C67C011EC9482490EC4F9AE02.roa
Signing time: Mon 17 Jan 2022 05:11:29 +0000
ROA not before: Mon 17 Jan 2022 05:11:29 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132420
IP address blocks: 103.171.45.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
202.66.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17951 (0x461f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 17 05:11:29 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61e4fa80-4e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:7b:df:78:db:1e:db:b9:40:4e:32:c5:67:
96:14:8a:d7:d7:2d:c4:b6:3e:03:1c:8f:de:c1:be:
8b:ca:12:c0:dd:ec:b1:44:d1:da:32:26:2d:46:4d:
e5:94:2e:60:70:09:b3:63:e9:43:c6:48:e1:4e:fc:
33:b3:0d:17:a4:ce:73:af:86:90:e6:ed:d7:bd:74:
93:9d:ef:95:99:0d:3a:3c:07:be:02:e1:9c:f2:37:
cb:57:27:a6:de:03:ec:39:5d:ce:8d:24:8e:19:af:
47:30:2a:11:44:c1:4e:e1:9d:4d:75:0b:52:5b:b6:
99:2a:22:46:19:fd:c4:34:bf:ec:e7:4a:35:a3:d0:
11:00:66:08:c7:1c:cf:74:3d:0a:a2:88:62:56:46:
a0:7b:67:76:82:05:88:37:ef:34:b9:99:14:45:19:
40:00:e2:c2:ee:3d:e7:19:f1:de:75:3f:be:25:28:
4b:f4:4d:7d:a5:b7:b7:4a:8c:58:9e:d8:c1:1e:2e:
81:db:ac:b2:dc:78:a6:a5:e7:2f:0d:36:a7:36:c4:
57:5b:e4:d6:f2:7a:b3:6d:bb:4a:0c:b5:86:6f:fc:
44:d0:12:59:e3:91:4e:2f:ed:75:d4:08:b6:6a:e1:
c6:a5:13:19:c6:aa:1b:f5:5a:00:32:8c:3b:95:e4:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:51:8F:85:74:67:6E:A8:AE:D2:17:6B:1C:CD:D4:EF:ED:99:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3BD98C67C011EC9482490EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.45.0/24
103.175.163.0/24
202.66.175.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b0:34:c7:f6:0d:40:88:86:df:72:b3:42:25:8a:c4:ff:8b:
51:61:0e:85:31:42:c4:f9:77:b3:7f:20:96:1c:a7:69:12:52:
9f:9f:7e:9b:bb:6d:a5:a6:95:78:ed:27:04:a6:fa:56:6c:d7:
d7:82:6d:78:72:b7:b0:b0:49:1a:ab:02:df:c0:77:51:dd:62:
86:d5:bd:bb:c1:bb:6c:ac:8b:a7:13:04:c3:2e:46:a3:af:a5:
36:54:4c:da:b1:7b:9b:c6:53:2d:a1:6a:39:f9:3b:d8:8c:6c:
36:09:13:70:7c:4a:29:6a:b4:77:40:77:77:50:48:27:95:e6:
b0:a8:be:42:a9:6a:fa:98:8b:ad:0e:98:b0:06:d8:56:f5:c3:
d1:a2:28:1e:dc:31:03:8b:3f:57:26:89:da:e2:9d:4d:90:b1:
19:ad:38:9b:1d:fe:4e:7b:19:41:b9:1b:41:2d:9d:98:a8:6b:
e0:c1:49:b9:fc:ed:61:97:e6:8b:90:7a:d4:9f:7e:42:39:5a:
6c:99:86:b2:8c:f9:0c:8c:c4:2a:74:39:ec:c1:b9:0c:3c:62:
9c:1a:b0:fa:2e:8d:98:53:9c:55:4c:47:2e:d2:5c:be:2b:e4:
7b:61:91:a1:1a:e2:45:e9:74:81:04:f1:6d:f5:33:80:81:92:
bc:7a:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org