Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD4A0ABC81EE11EDA11A302DC4F9AE02.roa
File: FD4A0ABC81EE11EDA11A302DC4F9AE02.roa (raw, json)
Hash identifier: JIF4n/+j5kksclChCy4zY+JFTvamCAYXkuIUl7HWgoc=
Subject key identifier: 65:DF:85:47:FE:2C:E3:32:AB:28:67:79:C1:8D:16:D1:D2:1A:8A:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 61C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD4A0ABC81EE11EDA11A302DC4F9AE02.roa
Signing time: Thu 22 Dec 2022 11:51:37 +0000
ROA not before: Thu 22 Dec 2022 11:51:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134301
IP address blocks: 103.62.147.0/24 maxlen: 24
103.98.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25030 (0x61c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 22 11:51:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a444c9-0d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:51:fc:d8:3a:b2:4d:87:99:f3:f1:80:81:
68:31:8a:a1:72:d5:a1:11:db:1b:91:5d:0e:85:1a:
95:b6:e8:39:08:c9:36:4a:37:61:27:17:2f:8d:74:
0a:c5:38:c9:0b:d4:f4:ff:89:57:dd:fb:84:04:af:
1f:44:46:32:e9:95:dd:53:e3:ce:30:d5:88:4f:1c:
48:86:50:f0:06:83:5a:51:89:47:c3:4b:0a:fa:52:
92:52:d4:a5:6c:5b:bf:0c:b9:1b:c1:6c:51:c5:3d:
90:a9:ec:ca:b9:d8:d7:77:7d:55:a8:4e:a1:84:03:
92:e9:78:e4:4c:ca:a2:d8:5a:41:86:54:75:f7:ca:
5d:77:2a:92:b2:49:12:0d:bb:b0:6a:60:d0:a5:e7:
65:c0:bd:7e:98:2c:31:b9:c0:7c:33:1a:7c:13:05:
50:8b:49:f7:4f:5b:0b:22:0b:3e:c5:5a:44:5e:ba:
f9:de:47:ed:82:c7:33:78:99:46:4b:b8:17:bd:28:
64:85:60:77:79:d9:2b:07:e1:ba:7c:84:13:f7:02:
9b:d4:1d:ed:3a:2a:e3:1d:78:f7:3c:39:a6:35:f8:
12:c2:f2:8c:8e:5c:b9:c8:97:ed:e7:61:3f:5d:c5:
02:71:4d:75:c3:15:bc:73:23:32:fc:a7:10:42:c8:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:85:47:FE:2C:E3:32:AB:28:67:79:C1:8D:16:D1:D2:1A:8A:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD4A0ABC81EE11EDA11A302DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.147.0/24
103.98.53.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b5:a8:fd:18:24:2d:01:b8:da:76:74:c9:b2:5a:91:0a:55:
d6:2b:a2:45:fd:0c:3b:bd:a8:5b:76:fe:09:92:2e:f0:2d:79:
74:c3:63:29:16:28:f8:07:b0:e5:6a:60:22:85:2b:52:c0:49:
28:db:13:be:d2:cf:88:8e:e1:ae:85:8f:9b:72:d7:6a:e3:94:
ff:4d:30:0d:2c:85:c8:4f:04:5f:8d:86:5b:14:ad:bb:97:5c:
d8:a9:1c:24:44:6d:a9:b4:6b:c1:3c:c4:ff:78:10:29:ea:23:
f8:76:e2:f4:7d:3c:33:e5:22:43:c0:85:d2:90:09:7c:f0:d3:
37:e7:79:f8:81:d0:1d:d9:26:23:4b:83:20:83:8f:d7:70:9f:
68:85:1b:d2:f7:e0:3f:a1:35:e1:3c:72:49:09:8f:cb:82:09:
35:9b:35:4e:f7:d4:ec:dd:ae:28:75:74:0b:1f:8c:e4:df:db:
ca:42:61:78:2e:d5:3d:d6:18:34:c6:6b:cd:7c:03:72:34:21:
08:f7:28:b2:06:7d:6d:b9:d3:68:a7:10:13:e3:52:5f:13:cc:
55:29:50:1e:88:7a:10:06:d3:54:32:73:40:97:69:53:58:57:
0c:b9:1b:9e:ac:c7:c5:09:d0:f4:1d:f2:6c:ea:30:32:74:83:
78:81:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org