Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/74DC69B4CB7311EBAD67EF4AC4F9AE02.roa
File: 74DC69B4CB7311EBAD67EF4AC4F9AE02.roa (raw, json)
Hash identifier: B3yPvV1Gf7i8fm4L2tM8NtTdFZegieK12yg7GAOS2bo=
Subject key identifier: 1A:67:BC:06:65:C0:44:29:40:D5:9D:F2:BA:58:2F:D1:73:DE:C4:39
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1737
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/74DC69B4CB7311EBAD67EF4AC4F9AE02.roa
Signing time: Sat 16 Apr 2022 17:23:39 +0000
ROA not before: Sat 16 Apr 2022 17:23:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18254
IP address blocks: 103.19.8.0/24 maxlen: 24
103.19.9.0/24 maxlen: 24
103.93.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5943 (0x1737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Apr 16 17:23:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=625afb9a-d439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:12:68:59:f6:98:7f:fb:48:61:f4:8f:a3:
dc:86:3b:b1:10:18:11:f7:73:4b:84:42:8e:ce:0b:
03:f3:e2:d9:60:16:6b:94:d5:f3:de:5a:52:82:3b:
ee:41:16:0d:bf:3d:b2:ff:45:a3:6b:74:28:b0:ca:
72:ec:3f:33:79:7f:94:e0:97:37:26:8b:94:f8:4d:
c4:3a:7d:5f:2a:4e:ec:f1:a4:d6:ce:b1:d4:e3:ce:
77:af:62:c8:a5:87:e8:df:5b:18:b8:b6:ed:f9:a1:
2d:d6:bc:23:c5:73:17:9b:d4:96:57:45:1b:d0:c7:
e6:56:a4:e7:1a:aa:12:7f:29:17:ac:2e:be:df:66:
31:40:07:19:a2:ec:7d:17:50:03:36:c1:6c:2a:6b:
41:4e:88:27:7a:0d:c9:06:29:13:86:6f:c9:6b:f2:
6b:70:2a:c0:bf:77:6f:aa:a2:3c:d5:e2:eb:d1:5f:
01:68:d7:53:5c:03:2d:fe:f5:68:90:ce:63:24:e0:
7e:26:87:43:e5:b6:a2:18:94:c6:76:02:5c:0f:35:
bf:a6:41:25:df:51:1b:ca:04:48:59:5f:4c:51:c6:
65:32:f6:3b:b8:2e:58:25:21:34:d7:4e:e2:24:bc:
37:96:0b:c5:6b:3b:1d:fb:77:07:e5:ba:c2:e8:4f:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:BC:06:65:C0:44:29:40:D5:9D:F2:BA:58:2F:D1:73:DE:C4:39
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/74DC69B4CB7311EBAD67EF4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.8.0/23
103.93.252.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f3:16:bf:0c:4d:32:80:a4:ec:8c:94:ed:cb:ae:f9:cf:90:
81:b7:80:b5:d7:b4:f5:6e:a3:a5:88:fd:53:5b:df:36:fb:4a:
c4:bb:be:08:b7:d1:db:05:5a:2b:8c:a7:e8:a1:46:e1:69:a1:
5a:54:be:d9:4f:3b:92:1a:a9:e3:2a:e3:e6:5c:6a:9e:84:b2:
04:2f:82:32:70:9f:e0:0d:75:67:a1:66:f3:e2:d7:d6:2e:63:
ae:e8:da:ce:ca:4e:83:2f:ec:15:cb:fa:11:f1:dc:81:2c:47:
75:38:1d:22:c8:3b:a9:d0:29:43:0b:2b:7e:04:20:6d:60:ac:
58:ca:ab:13:30:75:e6:04:8a:08:f6:c1:5d:3e:3c:f4:64:d7:
c2:a6:d0:6d:76:19:e6:22:0e:e8:25:fa:16:5c:84:ea:ce:bd:
a9:e1:8f:68:be:b2:eb:81:2f:d1:4b:ff:69:76:d6:1b:bd:f9:
ae:42:70:16:02:9d:4d:72:01:13:81:6a:69:42:3b:7e:a4:85:
41:a4:4e:89:4c:ea:33:64:f6:5c:48:f3:02:ed:4d:a7:03:36:
57:a2:15:83:7c:6d:52:85:14:8d:d1:ae:88:4b:24:e7:92:c3:
82:55:6b:99:5c:a1:79:00:a6:6f:9d:97:3a:b0:62:a3:3f:c5:
a0:a4:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-fra.rpki-client.org