Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F885E582244711EDAA01984DC4F9AE02.roa
File: F885E582244711EDAA01984DC4F9AE02.roa (raw, json)
Hash identifier: lRn9F2qHT8l2DEUJn6pB5HXWPSqe7Bh/fVzse58k/BI=
Subject key identifier: 4B:69:0C:E1:3A:A0:AE:CF:75:77:6A:B1:FE:A1:3D:1A:4F:B4:9C:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F885E582244711EDAA01984DC4F9AE02.roa
Signing time: Thu 25 Aug 2022 10:31:35 +0000
ROA not before: Thu 25 Aug 2022 10:31:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141567
IP address blocks: 103.167.212.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23573 (0x5c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 25 10:31:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63074f85-2acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c2:60:52:4f:d1:04:3e:a3:cf:f6:c5:bd:4b:
c1:1e:5a:54:aa:53:82:a4:ab:ba:10:30:a6:3a:27:
c6:13:96:48:16:1c:32:d3:07:65:85:29:ec:cb:c4:
2b:39:0c:12:e8:e1:ae:b9:8c:b4:0f:74:cf:31:82:
22:23:5d:97:71:8e:07:eb:5f:17:f1:71:bb:f3:37:
64:af:3f:49:15:5b:b7:0f:d2:e4:f2:b1:fa:e6:4d:
f6:ba:86:4e:0d:29:57:8f:f6:01:68:93:34:a8:a9:
12:3a:8b:e8:10:79:6b:90:f5:3e:ea:a2:5c:c0:a9:
09:f6:40:b3:45:23:00:63:91:d0:38:1c:38:0d:70:
93:34:4c:38:94:0d:71:1d:ae:49:6c:df:0f:8b:5b:
7e:d0:6f:e9:e0:1f:5d:fe:63:61:f1:3f:96:82:cd:
f6:ae:14:ac:b6:70:30:4b:17:91:ec:74:71:05:77:
9e:d3:4d:83:2a:0c:c2:00:91:18:ea:7b:5a:53:8f:
6a:91:97:68:38:c8:c4:b9:a2:f8:f3:af:74:93:38:
e5:37:14:d7:46:0d:d8:3f:b5:2c:ae:bf:c3:f3:e0:
a4:1e:31:84:2f:ed:2c:a5:e5:d5:62:03:0d:d9:24:
46:67:d1:4b:1d:36:28:b5:a7:50:8e:40:b4:b1:90:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:0C:E1:3A:A0:AE:CF:75:77:6A:B1:FE:A1:3D:1A:4F:B4:9C:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F885E582244711EDAA01984DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.212.0/23
103.170.148.0/23
Signature Algorithm: sha256WithRSAEncryption
25:26:19:e7:ce:30:c7:93:df:73:4a:e8:12:2e:ef:66:5c:de:
0d:01:a5:bb:8d:ae:bb:9b:44:18:00:e8:7b:e0:52:9b:7a:94:
97:c7:67:7e:78:b8:c4:62:17:08:45:cb:65:85:03:e7:7d:4b:
d3:cf:c7:fb:84:42:f4:d0:59:a3:b3:d2:d8:2b:4d:ef:35:90:
46:d6:86:44:ae:98:43:2b:be:c5:bb:b2:5a:81:56:4b:54:a1:
1f:ac:b4:8f:33:8b:31:31:9b:e6:b6:9a:62:c9:20:bf:b8:3b:
0a:f0:be:67:b2:92:39:30:b7:9e:86:46:fc:d6:a3:82:3e:fb:
74:5b:33:ca:d7:93:c5:3a:e8:0a:e5:bf:b8:a3:a0:7c:aa:dc:
e9:04:21:41:8d:29:a7:47:64:b1:59:80:86:e3:1d:89:d5:48:
c9:f6:06:39:b0:5a:1c:51:9c:a2:76:6f:24:dc:ac:d0:2d:40:
85:6a:d6:a3:43:1b:ea:fb:0f:89:14:84:15:d6:e4:d3:f2:08:
53:98:52:73:3e:95:46:b4:24:e3:90:5e:0f:fb:ab:a8:99:55:
a8:a1:2b:8e:74:64:25:a0:48:45:fd:40:8f:c8:33:35:c1:2f:
b4:0d:5f:ba:e4:45:2e:4c:b5:12:60:d4:29:3c:d4:d3:3d:31:
29:e3:82:f9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICXBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwODI1MTAzMTM0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzA3NGY4NS0yYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8MJgUk/RBD6jz/bFvUvBHlpUqlOCpKu6EDCmOifGE5ZIFhwy0wdlhSnsy8Qr
OQwS6OGuuYy0D3TPMYIiI12XcY4H618X8XG78zdkrz9JFVu3D9Lk8rH65k32uoZO
DSlXj/YBaJM0qKkSOovoEHlrkPU+6qJcwKkJ9kCzRSMAY5HQOBw4DXCTNEw4lA1x
Ha5JbN8Pi1t+0G/p4B9d/mNh8T+Wgs32rhSstnAwSxeR7HRxBXee002DKgzCAJEY
6ntaU49qkZdoOMjEuaL48690kzjlNxTXRg3YP7Usrr/D8+CkHjGEL+0speXVYgMN
2SRGZ9FLHTYotadQjkC0sZDxuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEtpDOE6
oK7PdXdqsf6hPRpPtJzvMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjg4NUU1ODIy
NDQ3MTFFREFBMDE5ODREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnp9QDBAFnqpQwDQYJKoZIhvcNAQELBQADggEBACUmGefO
MMeT33NK6BIu72Zc3g0BpbuNrrubRBgA6HvgUpt6lJfHZ354uMRiFwhFy2WFA+d9
S9PPx/uEQvTQWaOz0tgrTe81kEbWhkSumEMrvsW7slqBVktUoR+stI8zizExm+a2
mmLJIL+4Owrwvmeykjkwt56GRvzWo4I++3RbM8rXk8U66Arlv7ijoHyq3OkEIUGN
KadHZLFZgIbjHYnVSMn2BjmwWhxRnKJ2byTcrNAtQIVq1qNDG+r7D4kUhBXW5NPy
CFOYUnM+lUa0JOOQXg/7q6iZVaihK450ZCWgSEX9QI/IMzXBL7QNX7rkRS5MtRJg
1Ck81NM9MSnjgvk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org