Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1C446E0221B11ED9840C986C4F9AE02.roa
File: F1C446E0221B11ED9840C986C4F9AE02.roa (raw, json)
Hash identifier: tP4wNudhv4kiCfs3ZA3kHyq/vHThk8bJfZ68cN9+ztM=
Subject key identifier: B8:25:A4:35:C8:47:22:D4:D4:34:BC:D2:E2:CA:7C:DF:A1:93:68:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C0C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1C446E0221B11ED9840C986C4F9AE02.roa
Signing time: Thu 25 Aug 2022 07:31:50 +0000
ROA not before: Thu 25 Aug 2022 07:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141803
IP address blocks: 103.167.238.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23564 (0x5c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 25 07:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63072566-331c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:92:81:15:9f:84:41:33:bb:31:1a:fa:2a:
3e:b8:e1:74:a1:1b:b2:03:25:77:7f:a9:71:1d:c0:
36:dd:9e:84:16:44:47:e6:9f:94:f7:e4:dc:5c:cb:
c5:1a:0c:e0:86:2d:e3:5d:51:65:07:2f:19:5e:3b:
6e:d8:d6:4a:72:d1:58:95:94:6e:fe:a4:6a:e4:6e:
cf:4d:a3:2a:b3:15:97:3d:64:dd:7b:f8:c1:7f:c4:
71:6a:ee:a9:8c:06:12:62:b8:bf:13:13:32:53:6d:
87:f1:4c:44:3c:a9:39:24:68:c5:11:37:46:9e:ec:
0f:05:89:03:46:d4:af:ba:d4:84:a4:20:cd:d1:df:
8b:1f:5e:30:9c:f5:11:4c:a2:f1:f9:8a:f7:65:4b:
24:ab:36:f5:cd:b0:38:73:95:2e:b9:31:db:c3:13:
14:ea:f1:f3:85:87:b4:06:84:bc:ea:7d:23:47:79:
ca:17:57:67:e4:c5:3e:23:79:a9:31:d9:16:0c:d0:
20:9b:88:b5:bf:f5:8a:39:04:58:3d:c6:3e:06:2c:
d6:0e:18:89:bc:f7:78:6e:57:8a:f0:0b:da:fc:db:
de:28:dd:ce:3d:e2:d5:f5:bc:80:20:9a:5d:46:17:
d2:06:a7:f3:9e:84:8e:44:71:32:b8:dd:45:ac:35:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:A4:35:C8:47:22:D4:D4:34:BC:D2:E2:CA:7C:DF:A1:93:68:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1C446E0221B11ED9840C986C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.238.0/23
103.170.84.0/23
Signature Algorithm: sha256WithRSAEncryption
33:67:61:70:b4:53:0f:e8:bf:3c:f8:af:88:ba:c6:57:45:e2:
49:07:cd:96:21:df:cc:9d:fc:4d:6e:34:f1:66:82:9b:8b:f7:
d9:63:7e:58:a2:93:f2:ea:cb:3f:f7:e9:62:9a:21:1a:b3:53:
0b:9f:ca:e6:0e:fc:86:e8:2d:83:e2:e5:78:dc:92:b0:0a:45:
31:68:4b:4c:67:07:dc:35:4a:9e:7b:fa:8a:ec:fa:15:43:8d:
e2:ef:5c:ff:2c:9c:70:9c:41:71:7f:f7:0c:37:4a:cd:40:b3:
7a:93:91:5b:ee:63:ae:2c:b4:57:8b:96:70:7c:74:cb:4a:27:
b8:19:74:7c:3a:7e:ce:14:65:37:6d:3a:b8:33:66:00:8b:c9:
4d:96:b2:59:ce:45:72:2a:56:a4:b1:49:11:8a:07:b3:ef:fe:
12:6a:b2:48:05:d8:c4:19:45:70:cd:bc:df:fb:94:59:c9:59:
71:22:1d:96:bd:2f:d9:72:52:15:ce:41:61:c8:5f:7c:d6:70:
34:8d:f8:3a:ae:4a:4c:df:3f:85:b7:9d:2a:79:6a:0d:34:aa:
5d:c2:06:52:36:2e:d0:30:14:3d:80:41:d8:ad:9b:0b:1c:60:
f7:c4:db:d8:98:15:e7:57:22:ab:c1:fa:ee:cb:5c:db:e8:91:
6d:f3:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org