Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB0BF12EEF9C11EBB1473214C4F9AE02.roa
File: FB0BF12EEF9C11EBB1473214C4F9AE02.roa (raw, json)
Hash identifier: 38A1D36um/ABQnv+6ot3NJyJQip/Fr7Ogm0QvYfCcqE=
Subject key identifier: D3:6F:EE:4C:DA:31:45:8B:59:58:81:31:2A:25:03:B2:58:98:26:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5396
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB0BF12EEF9C11EBB1473214C4F9AE02.roa
Signing time: Mon 16 May 2022 04:26:00 +0000
ROA not before: Mon 16 May 2022 04:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142449
IP address blocks: 103.160.167.0/24 maxlen: 24
103.170.64.0/24 maxlen: 24
103.170.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21398 (0x5396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d258-c916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:13:3d:93:95:78:20:b2:72:9f:c2:63:e1:
45:ad:80:92:ac:eb:4a:9f:05:cb:e0:5b:29:b8:f8:
a2:96:98:9b:75:07:63:16:fd:67:ba:e3:60:65:d7:
3b:dd:5b:0f:4f:2e:fb:fd:61:6b:a2:dc:76:d1:7d:
97:39:aa:19:2d:b0:28:18:d2:7b:62:21:63:57:5c:
3b:2e:0e:63:73:d8:15:0c:22:20:e0:11:ac:ff:14:
f4:02:24:9e:55:46:16:e4:ef:dd:5a:09:41:a8:46:
e1:8e:30:98:67:c4:e4:17:33:08:cf:59:16:70:d2:
90:42:c6:42:b8:a2:e4:80:57:10:0d:ce:d7:f4:aa:
5d:b2:58:10:9e:b3:ec:8a:f9:4c:33:af:74:96:e2:
17:af:c1:c8:f4:84:a9:29:ab:89:06:f5:be:33:51:
f2:d0:f8:df:de:8b:65:31:cc:e1:97:8f:7d:72:f7:
5b:2f:cc:34:ef:dc:d3:88:f9:1b:dd:94:40:fd:0d:
3a:eb:89:0f:bb:db:32:d8:f4:03:68:b9:0d:b2:88:
90:c7:aa:5a:ef:47:b5:3e:07:a0:6b:25:42:a5:06:
02:ec:7d:78:a4:61:38:c7:63:8d:8d:b4:be:94:94:
b8:44:82:7f:65:4e:66:b1:63:cc:e1:7d:8a:e9:2d:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:EE:4C:DA:31:45:8B:59:58:81:31:2A:25:03:B2:58:98:26:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB0BF12EEF9C11EBB1473214C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.167.0/24
103.170.64.0/23
Signature Algorithm: sha256WithRSAEncryption
52:23:6f:41:d4:a5:27:17:d6:4e:a0:f9:13:41:f2:6a:7d:75:
c5:b2:98:7f:8b:ac:a2:de:2f:ce:90:31:3f:89:e5:c2:3e:68:
14:da:46:89:50:82:03:dd:f7:ca:16:30:56:a6:9c:23:b6:c4:
d7:61:f4:5d:a1:a2:7b:cd:0d:d7:48:6c:f7:b8:76:4f:5c:1a:
07:e3:d0:6a:1e:64:bb:14:5d:9c:f1:02:98:48:61:4d:a2:85:
30:1e:91:98:12:a6:c2:47:27:79:fe:4a:6f:f8:e1:b0:f5:ab:
8e:6b:ba:b9:6a:85:c8:c8:96:d3:d1:21:da:26:31:b5:e6:e6:
a4:44:44:3a:4f:f4:11:bc:c5:cb:05:f4:0f:b6:b7:e5:81:58:
54:67:a0:87:64:ee:22:2b:56:8c:e8:a5:06:23:36:90:1f:44:
f0:85:c7:23:7d:de:cd:2a:3c:07:4f:d1:8b:96:53:a7:11:c5:
42:36:9e:8a:14:b6:19:b1:7c:64:32:5e:c5:1b:1b:a1:62:73:
c7:d7:97:29:d0:05:53:58:3e:5a:2f:02:41:55:a3:8d:8f:19:
8e:60:a7:7a:a0:7e:74:0d:4a:b2:14:3b:90:58:5e:ad:14:22:
e3:62:f3:d7:38:9e:d1:e7:60:9e:b7:73:ba:e6:e3:5a:38:b0:
ce:26:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org