Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB12A066506011ED95BC9B2FC4F9AE02.roa
File: FB12A066506011ED95BC9B2FC4F9AE02.roa (raw, json)
Hash identifier: Tm4PuHaPL9kk7Bi/DNHA/XPzGhgMZaLUDgpPCXWO0K8=
Subject key identifier: AF:B5:CF:DC:F1:77:49:5F:8B:B5:14:94:C6:E9:40:6F:37:92:C4:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5EFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB12A066506011ED95BC9B2FC4F9AE02.roa
Signing time: Thu 20 Oct 2022 10:21:38 +0000
ROA not before: Thu 20 Oct 2022 10:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 103.253.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24315 (0x5efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 20 10:21:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63512132-154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:dc:93:04:8a:2a:48:f7:bf:d4:fc:90:ac:
f5:10:fe:dc:99:bf:69:4c:63:09:16:7e:cc:2d:52:
28:bd:9f:e3:b5:16:40:c0:d3:9c:3f:1f:57:c9:cb:
a6:3d:2b:2b:c9:6f:20:b5:14:48:48:6d:e2:8e:18:
8f:b6:74:4b:50:09:27:9c:f3:f1:95:d0:ab:b4:3f:
75:3b:da:bf:d9:fb:bc:eb:05:c5:25:99:ca:86:be:
92:6f:6e:e1:b3:46:2b:74:66:cb:e1:7a:2a:8a:2c:
0d:84:de:56:97:88:2b:9c:c1:3a:2b:3b:53:3d:f7:
7c:54:28:47:72:70:a0:df:1c:89:c9:5c:a6:75:4f:
b9:e2:a9:f6:67:0c:3e:22:0a:cc:39:d4:f9:e7:e5:
91:03:e8:1f:d1:d6:3e:53:52:da:9f:55:51:6d:ab:
6f:f2:ce:c0:35:36:f4:12:98:7c:d8:fa:2d:7f:e0:
79:43:93:77:08:6c:3b:75:b1:d5:77:cb:27:28:4d:
10:3d:7a:b6:49:ad:f4:15:e2:aa:e1:d3:54:bf:0a:
1b:39:22:7c:2a:b9:0a:46:aa:05:0b:62:20:28:3a:
25:ec:00:db:ed:28:81:cb:e2:d9:76:e6:92:dd:67:
44:d5:97:0a:d4:90:54:c5:b5:84:9a:b7:16:40:56:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:CF:DC:F1:77:49:5F:8B:B5:14:94:C6:E9:40:6F:37:92:C4:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB12A066506011ED95BC9B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.32.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b1:a0:4b:42:3e:b4:4a:83:8a:bc:1c:16:48:48:25:b8:3d:
18:02:0f:bc:99:b1:46:1b:16:3d:69:ee:70:06:e0:b7:1c:61:
ed:1a:f8:b8:a0:32:7b:6d:9e:16:38:e7:89:6c:5f:48:4d:11:
95:67:92:05:00:e7:fe:ac:49:7e:fa:96:e6:7c:9c:e9:05:d0:
cb:e4:24:11:5c:ad:e3:48:b6:f5:3d:a5:c0:75:a4:1e:4c:a9:
05:c2:ae:42:68:c2:81:96:b3:c2:b8:d2:f1:d5:a2:64:a8:93:
d9:56:8b:92:d0:42:a0:ab:b6:89:67:4c:ca:b2:d9:18:1f:a6:
9a:13:9e:b3:06:dc:ea:06:1f:ae:52:a8:16:ea:9e:19:aa:21:
73:4b:4c:f6:23:5c:b9:4e:50:6a:2e:bc:03:fe:35:bd:dd:8f:
d8:2a:76:7b:6a:a0:16:97:32:12:3b:cf:7d:8e:3e:3b:ed:ad:
23:f5:49:4f:8c:0f:f9:67:2b:ec:d3:f6:36:f6:f6:c0:fe:e9:
cc:77:2d:a6:98:6d:eb:ce:5b:92:e7:ab:3f:9d:d3:05:e6:ab:
3e:9c:7b:6b:ea:ce:54:72:b8:e0:a7:f2:70:54:65:08:32:88:
0c:be:2b:3a:6c:34:f0:e0:95:5f:15:ab:bd:78:6b:59:14:ab:
9b:ba:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org