Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/18FDA8D870AE11ED85FF5377C4F9AE02.roa
File: 18FDA8D870AE11ED85FF5377C4F9AE02.roa (raw, json)
Hash identifier: OPW7CMgmlCE+EMsEkM+2sHkTTOwLhc3TU/k2QhAqNYo=
Subject key identifier: 97:21:1E:42:C2:61:C6:C6:49:C6:42:85:FC:66:FD:F5:99:C3:30:98
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 1B
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/18FDA8D870AE11ED85FF5377C4F9AE02.roa
Signing time: Wed 30 Nov 2022 12:54:17 +0000
ROA not before: Wed 30 Nov 2022 12:54:17 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 23674
IP address blocks: 103.19.48.0/24 maxlen: 24
103.19.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Nov 30 12:54:17 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63875278-cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:e7:a8:36:98:c0:ab:e6:21:ea:d2:75:2c:
93:0d:86:ae:26:07:3f:6e:41:64:ab:ee:70:21:c9:
fd:04:67:1c:3d:3a:39:97:7d:07:ca:bc:14:77:2b:
20:2b:24:47:fc:52:ff:ad:17:74:38:a6:a3:a2:5b:
3d:1b:0f:90:8b:e9:71:bd:ee:b4:b3:97:15:3b:b3:
5c:00:17:7f:44:94:d7:88:1a:6b:61:82:a7:b0:49:
43:b3:24:6b:38:11:a2:54:2f:75:63:00:86:36:1e:
3a:b5:ef:f5:e9:b2:b4:cf:8e:15:7b:0b:a0:95:76:
ee:a3:77:40:e3:c6:45:08:64:c4:77:2b:be:5d:3e:
86:af:7e:d9:61:bf:30:91:ce:48:fc:70:03:c7:3d:
90:f5:02:10:9b:e6:14:18:7d:94:2e:42:e4:d6:4f:
84:d0:77:fc:95:ef:63:0b:43:74:48:8b:07:ee:8c:
99:8c:b1:71:b0:6e:19:e4:bb:79:c5:de:66:d3:fa:
3f:6f:16:db:7b:be:02:9e:34:c4:bd:15:e9:29:87:
40:f3:2e:b4:9b:f5:5b:f8:39:b1:30:ae:dd:d6:10:
64:99:73:ce:8a:9a:c2:3f:29:1c:e7:ce:72:b9:1e:
a1:43:14:d5:55:e0:59:6a:79:39:e4:a8:50:0d:1a:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:1E:42:C2:61:C6:C6:49:C6:42:85:FC:66:FD:F5:99:C3:30:98
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/18FDA8D870AE11ED85FF5377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.48.0/23
Signature Algorithm: sha256WithRSAEncryption
50:9d:1a:ed:1b:b5:5d:7d:a2:77:4a:cb:84:d8:ce:28:42:04:
8a:c7:a2:7f:25:80:b9:8c:1b:c5:66:f1:0f:c3:fa:d3:26:2d:
a7:0b:e4:f9:5d:db:9f:47:00:7e:5f:6d:21:42:6d:2d:a0:64:
e9:ed:ae:d7:5a:1d:d8:69:06:03:3a:5b:e8:a9:90:57:e5:8d:
a1:3e:b7:3f:0e:e5:24:c9:25:48:11:e5:78:4d:ef:8f:72:17:
a5:5c:e5:96:a1:2e:17:45:64:09:6d:ea:f7:a1:cf:0d:25:96:
d3:36:31:e4:d4:a0:12:8c:bc:36:ea:24:6b:15:0b:df:a9:78:
4e:90:4e:2e:f8:87:25:27:8e:2a:58:da:87:68:d0:89:55:21:
28:58:53:04:55:3d:dc:26:c3:10:56:87:23:00:39:1e:4e:15:
68:93:8f:60:03:97:26:47:4d:97:e0:5c:9f:c0:a3:84:8e:6f:
73:c3:06:b9:72:22:19:70:67:dc:12:33:d1:e3:e5:81:65:98:
ef:bc:bd:7c:76:d9:80:a7:79:92:da:78:6a:80:c4:75:fa:53:
fd:fc:b1:8a:84:17:a1:b0:b5:00:66:77:a9:61:f9:b8:ef:ac:
61:99:9a:28:cf:60:69:9f:23:73:aa:9b:cd:90:e8:a2:73:91:
e0:90:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org