Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9C238009DF711ECB3037F60C4F9AE02.roa
File: F9C238009DF711ECB3037F60C4F9AE02.roa (raw, json)
Hash identifier: C3SHllsS1JtrVklY3vbG/Lu/jxnB+hP6M2rC3aIjQaE=
Subject key identifier: 90:CF:2C:AE:2D:22:36:45:CE:F6:27:AC:70:39:9D:C4:BD:62:11:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5478
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9C238009DF711ECB3037F60C4F9AE02.roa
Signing time: Mon 16 May 2022 04:30:06 +0000
ROA not before: Mon 16 May 2022 04:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149245
IP address blocks: 103.179.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21624 (0x5478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d34e-6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:93:2f:11:d2:c1:25:81:03:f4:bf:5a:a1:
1e:5e:08:7f:d0:1e:41:af:5c:99:ea:27:be:5d:3e:
6d:85:a1:4a:24:cc:48:3e:77:bf:f8:d1:98:5f:37:
73:7b:4b:56:a0:ce:20:66:aa:9b:03:e8:90:ea:65:
09:27:4d:be:c6:a3:42:6e:7f:9b:7b:01:b8:27:8c:
37:e7:c6:4a:29:26:e9:9f:9f:55:db:b7:31:be:d9:
2b:00:6b:f6:3d:75:5b:1f:48:64:2e:df:20:2d:8c:
8e:e0:a9:01:6b:b4:fe:de:aa:73:de:10:d6:06:75:
85:56:85:1a:5e:0b:dc:2c:ce:e3:ff:1f:8e:11:ae:
da:54:65:14:df:24:d9:56:62:2c:9a:18:0d:25:62:
d3:3e:ed:ac:79:38:65:66:39:40:21:04:d8:33:1e:
a1:4f:79:a9:2b:d4:3b:1d:79:c7:f1:15:9b:0f:31:
65:9c:96:2f:27:12:3f:95:80:d3:27:5e:68:da:15:
cf:72:bb:9e:7d:80:d8:dc:1b:c5:e5:75:c8:22:b6:
1c:86:8f:40:6a:b9:f8:64:56:7f:85:e6:2f:28:ab:
79:17:6e:0a:5f:78:89:20:bc:5a:c7:78:78:98:1e:
b2:a3:4e:45:af:06:bd:eb:cf:c5:c8:2c:b8:bf:55:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:2C:AE:2D:22:36:45:CE:F6:27:AC:70:39:9D:C4:BD:62:11:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9C238009DF711ECB3037F60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.40.0/23
Signature Algorithm: sha256WithRSAEncryption
35:25:78:57:ad:6d:d1:7e:6f:96:f6:a9:5e:21:85:5c:ad:8c:
e3:1b:0d:e1:66:1a:4f:63:97:51:1b:dd:01:00:46:40:56:75:
aa:9c:8e:58:3c:9e:ce:35:51:c7:a3:e1:f4:70:f5:83:05:b0:
14:e0:ef:06:e6:1a:6f:a2:b5:18:a1:ea:a8:f9:55:ed:ad:40:
a4:6a:d8:60:cd:b9:4c:d2:79:92:0f:45:cd:8b:f6:27:de:7d:
18:0b:55:44:70:fe:1d:3d:26:94:b1:2a:11:06:8a:2d:4a:f5:
8b:e7:a8:93:a7:d9:6d:dd:6b:37:90:72:29:95:13:47:95:77:
c6:5f:ad:d1:e4:57:85:82:95:65:ef:08:d5:81:60:5a:d8:a8:
64:6d:2d:b2:c1:d3:2c:88:e7:d9:45:61:44:2e:14:87:34:51:
3c:54:be:88:b0:b1:8e:83:5b:f3:6c:8d:79:ed:9e:23:52:f5:
17:9e:4d:0a:45:a0:5c:ab:7f:23:41:7d:39:9b:2f:69:01:76:
d5:bb:cf:0f:ca:7c:fd:c8:dc:11:28:0f:84:5a:3f:6c:eb:f6:
f6:46:33:6a:8b:62:84:ba:97:0d:ec:26:7b:62:4d:d9:ba:4a:
08:0d:71:4d:e0:fc:31:e8:7f:3f:1f:db:b6:98:b8:b7:e7:a2:
a5:a9:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org