Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDF7649E8FDE11EDA9919C57C4F9AE02.roa
File: EDF7649E8FDE11EDA9919C57C4F9AE02.roa (raw, json)
Hash identifier: TmwnyVUjrOtQNH9Sjd3vEUrYtBSVnnsrKJnslgnV++w=
Subject key identifier: B3:44:21:2C:45:C1:CB:5D:37:E2:73:88:16:44:28:CD:F7:B9:F7:C8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 65BB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDF7649E8FDE11EDA9919C57C4F9AE02.roa
Signing time: Mon 27 Feb 2023 12:21:39 +0000
ROA not before: Mon 27 Feb 2023 12:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 103.225.77.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26043 (0x65bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 27 12:21:39 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fca053-a7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:29:27:3f:da:8b:f4:8e:55:6a:c3:6f:ec:
a5:fd:fc:b8:05:23:81:27:58:a3:35:76:c4:c4:97:
9d:5a:e6:b4:bc:66:85:16:c6:c9:dd:83:ec:7a:a0:
c0:a3:70:5e:c2:6d:35:9c:f6:65:4b:4f:23:61:06:
45:7e:c6:b5:9a:9d:d6:9b:e2:b4:e2:9b:56:40:16:
6f:a9:d5:f9:20:42:93:a6:34:e9:21:2f:52:12:86:
a7:a9:0e:1f:ae:ab:c6:91:3f:f7:eb:a0:ee:5c:9d:
5b:94:43:f1:c6:14:13:6a:a4:a3:b3:5d:46:12:0a:
5d:a4:53:2e:77:25:bf:fa:62:76:10:3c:10:e6:ca:
fe:04:41:d0:45:6e:bf:cc:27:b3:4b:4b:6e:40:55:
27:da:6c:c4:b7:6f:12:42:fd:f7:0d:69:50:5a:eb:
f6:00:79:ac:6e:49:a9:70:50:ae:87:64:42:64:90:
ef:f8:da:71:52:c1:3f:4e:fd:1e:0b:71:fc:7b:4b:
cd:9e:f9:2f:e3:04:e7:86:84:20:44:e2:a8:73:77:
98:16:ce:cf:1a:f9:f7:cd:67:f6:15:97:93:17:ed:
66:79:d8:c6:fe:14:c2:0f:a2:38:ed:01:45:d5:b9:
ea:a2:bb:15:df:62:7e:58:56:aa:dd:03:37:c4:92:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:21:2C:45:C1:CB:5D:37:E2:73:88:16:44:28:CD:F7:B9:F7:C8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDF7649E8FDE11EDA9919C57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.77.0/24
203.78.131.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1c:19:cb:ec:c6:15:3a:ba:29:8c:54:7f:2a:e3:c0:c6:eb:
d8:84:25:b1:4e:d4:de:f9:58:ed:f2:c8:98:10:37:44:49:7d:
5e:da:f6:9f:22:01:dc:df:98:97:e1:8b:30:04:b0:0b:3b:ce:
68:cd:d2:56:10:90:e9:f1:db:1c:cb:73:09:ae:df:cd:ab:af:
55:7c:e9:e7:95:32:f0:88:cc:6b:71:04:d2:9e:29:4c:a7:23:
62:7b:fa:80:16:52:df:93:a7:3e:7c:84:f7:09:ed:c1:52:2b:
49:de:1c:0d:ac:0d:be:6a:1e:ae:aa:1c:24:69:56:d6:2a:c6:
48:1c:78:f9:16:e5:94:65:ad:28:ba:e1:22:63:ce:56:f3:d3:
70:cb:82:1f:60:5b:87:c3:22:f9:1a:85:97:29:b8:0a:02:ee:
ff:75:eb:6a:eb:b1:76:89:ae:32:f9:e9:10:81:a6:d4:99:ab:
a3:51:0d:0e:14:f1:a4:55:07:e1:cf:30:55:27:df:64:79:d2:
76:0b:35:b2:f6:4e:14:e5:86:e5:cc:f8:fb:b2:67:bc:a7:a8:
17:2c:29:6f:4b:37:ae:29:62:fd:46:e4:0a:a7:aa:da:c7:90:
4d:70:0a:74:77:40:60:19:c7:80:38:fd:b1:26:85:7f:d4:2a:
29:37:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org