Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDADB268109611EC997DE028C4F9AE02.roa
File: EDADB268109611EC997DE028C4F9AE02.roa (raw, json)
Hash identifier: uuhou6WFbfSSdm2lGn4nzIiEdNfNVh+PDRCJ/+PXJDU=
Subject key identifier: F9:7A:E2:DD:1D:A8:8A:A2:3B:E5:54:FA:3C:FA:D8:E0:FC:2D:46:98
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3CBB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDADB268109611EC997DE028C4F9AE02.roa
Signing time: Wed 08 Sep 2021 11:21:36 +0000
ROA not before: Wed 08 Sep 2021 11:21:36 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 146859
IP address blocks: 103.170.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15547 (0x3cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 8 11:21:36 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61389cc0-dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:e5:3f:cf:f3:0e:8c:b1:15:a5:d5:c3:b1:
bb:a6:7c:b0:c5:22:ac:8d:46:8d:7e:5f:86:2d:03:
07:e6:19:55:17:28:0b:4b:53:9d:cd:37:a7:33:09:
7d:71:ea:d0:62:dd:2e:00:47:56:3b:f0:0b:8a:70:
0b:b7:4b:94:5e:5e:9e:49:9f:b4:ee:a1:f3:0c:8d:
a5:36:be:52:29:af:6e:16:7d:06:b5:15:fe:0c:c3:
09:e3:bb:f8:e1:1e:19:2f:f6:dd:02:45:ad:c7:63:
c4:da:34:52:00:13:5a:b2:af:6c:01:21:5d:a8:b0:
d0:e1:33:0c:0d:22:59:0c:b6:42:01:1d:57:ff:d7:
af:3d:1c:eb:6b:a9:5b:41:07:80:56:12:ce:13:4d:
26:19:90:c1:32:40:6a:27:3f:42:d8:ef:aa:03:71:
34:a2:b5:5a:96:4e:8a:c5:39:aa:7e:73:b2:b6:ed:
4e:04:97:bd:77:bc:5b:39:80:08:00:71:a3:a9:5d:
46:57:24:eb:cb:04:2e:7f:48:8f:73:aa:dc:78:52:
86:65:0b:e4:16:be:67:b0:51:5e:33:28:bf:2f:7c:
2e:33:0f:b3:c4:14:50:79:a8:2f:c6:e4:a4:ba:da:
00:ca:d8:68:99:e4:28:1b:70:35:0e:c2:9c:ab:7a:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:E2:DD:1D:A8:8A:A2:3B:E5:54:FA:3C:FA:D8:E0:FC:2D:46:98
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDADB268109611EC997DE028C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.114.0/24
Signature Algorithm: sha256WithRSAEncryption
49:28:8b:0c:5e:f0:00:22:7e:a6:47:fb:8b:68:26:62:0f:be:
cb:2d:62:c6:0c:82:c3:c3:a9:bb:b6:32:1c:56:f4:fc:b0:f4:
37:eb:f2:cc:c5:87:58:63:ad:90:3e:20:96:4a:2f:21:fc:03:
82:1d:56:6b:19:93:1f:08:00:09:aa:9d:7c:db:4b:c3:ac:32:
8e:3c:fd:31:50:fa:89:91:73:99:1a:76:b3:24:1f:67:b5:e1:
74:4c:9d:0a:41:ad:7c:51:b4:33:9e:ca:d9:c9:ee:59:90:41:
fd:83:50:d9:3e:4d:4e:49:19:dd:08:2e:d6:bd:6c:02:19:f9:
24:dd:1d:7a:c1:cc:91:85:8c:fa:fe:ab:21:c6:6b:a5:18:91:
09:be:65:25:51:d7:6d:eb:f5:1b:d3:61:86:2f:71:42:75:bd:
68:5e:b7:d3:cd:c2:cd:0c:9f:9c:79:b4:49:fe:db:9f:81:a1:
8f:58:9e:1e:cb:1d:e8:bd:c2:b4:89:9d:40:f4:e0:c0:e0:58:
00:14:41:90:a1:16:3c:73:92:cd:f0:14:8a:7f:c5:bc:29:d8:
c0:5d:76:3e:b5:79:aa:ef:6a:0c:90:65:03:ab:d2:a9:e6:99:
9c:ae:50:35:ef:e1:b5:50:95:76:f7:59:7d:15:fb:0f:33:35:
2c:73:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org