Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9D3B0BC46B811ECB8463B6AC4F9AE02.roa
File: F9D3B0BC46B811ECB8463B6AC4F9AE02.roa (raw, json)
Hash identifier: esnJCclKvWC1me9ujkm1SMItbPS6ckDjK2Yw+Hpzb8I=
Subject key identifier: 80:02:05:9E:63:4D:2C:99:45:B3:0A:2D:AB:39:2B:0B:7F:7B:5B:8E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5066
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9D3B0BC46B811ECB8463B6AC4F9AE02.roa
Signing time: Mon 16 May 2022 04:10:46 +0000
ROA not before: Mon 16 May 2022 04:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135719
IP address blocks: 103.105.236.0/23 maxlen: 24
103.105.238.0/23 maxlen: 24
103.137.168.0/22 maxlen: 22
103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20582 (0x5066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cec6-f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:66:fa:b3:32:d5:43:3f:a0:be:4d:fa:1e:
dc:4a:05:76:a5:85:5d:f5:44:e9:18:2d:68:6b:30:
ce:31:8b:33:56:90:fe:40:3c:e7:38:72:f4:bc:90:
bb:f3:c4:42:8e:36:0f:50:e9:52:09:1a:6d:d5:aa:
94:88:72:5a:f2:aa:02:32:fe:4b:86:85:b6:66:7c:
85:be:97:6f:27:af:c3:39:8e:73:f6:50:e7:27:74:
0d:6c:55:0a:a2:99:93:73:10:e8:e9:79:bf:ff:ba:
df:7f:a0:ce:e3:05:69:fe:38:07:eb:e7:50:12:97:
e3:96:99:a3:26:cb:5f:0b:ec:8c:56:3d:64:94:50:
58:19:8e:5e:c0:b0:6c:ae:5b:67:15:68:53:f0:6b:
fc:1c:c0:a8:da:cc:b2:3d:4e:52:fe:5a:cf:33:8d:
7c:02:a7:60:0f:22:21:38:4b:59:72:54:91:e5:e3:
a4:4a:a5:47:af:71:8b:ea:7e:3a:61:a4:3f:e7:9c:
e7:f2:70:85:32:c9:07:57:e0:94:d2:06:b3:17:69:
16:00:21:ac:23:cd:fe:10:df:51:85:48:e0:1d:fc:
c4:49:af:97:ae:8f:1f:0b:a0:0b:cd:e1:5c:93:0b:
5a:70:23:12:b6:00:38:03:86:f5:a3:c8:ab:d3:65:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:05:9E:63:4D:2C:99:45:B3:0A:2D:AB:39:2B:0B:7F:7B:5B:8E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9D3B0BC46B811ECB8463B6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.236.0/22
103.137.168.0/22
Signature Algorithm: sha256WithRSAEncryption
98:c5:98:5d:18:b1:b3:15:d6:dd:06:38:15:2b:c0:ea:51:2b:
90:fb:52:2c:1c:48:73:62:53:9e:7b:bb:e4:dc:63:fc:75:8b:
a0:88:f9:9e:e2:e7:10:ea:e9:f0:aa:f6:0a:3a:64:96:1d:ce:
3e:e4:1e:65:c8:df:16:f4:14:2d:4e:89:d4:0b:51:01:05:fb:
26:81:51:97:42:39:e1:f1:8f:65:f1:c0:b9:0f:88:af:99:60:
bc:c0:b2:6b:29:92:2b:ba:88:2e:70:9f:0d:bd:f4:9f:d7:35:
09:e9:d8:e5:f9:20:ce:23:d4:2b:56:78:32:7d:7d:a9:86:ad:
bc:4d:bc:ba:27:fa:85:d6:e2:b2:44:e5:54:81:04:fc:a4:31:
04:9a:e2:d0:02:aa:9c:ae:fd:94:bf:1d:25:ff:b8:b2:df:0e:
12:63:61:d8:48:a7:15:18:e6:15:25:05:cf:cb:7a:c8:00:56:
80:20:75:0c:f9:b9:e8:76:e3:6a:16:21:40:59:8f:30:ac:73:
77:7d:5b:c3:c1:3b:af:d8:76:5d:9f:f2:87:02:91:82:01:d0:
bf:dc:b6:ca:ad:9b:c9:c8:7d:c0:f6:cf:8c:b1:f4:e1:bd:5d:
bc:f9:db:99:7e:37:04:8d:09:32:02:70:f7:97:24:81:86:6b:
f9:9a:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org