Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F38A7CA65C2711EDAB91A60AC4F9AE02.roa
File: F38A7CA65C2711EDAB91A60AC4F9AE02.roa (raw, json)
Hash identifier: KPWjXn3zllpEaoc7v/4wuqZ+Rmeh4jLlcknZ1SbLYfw=
Subject key identifier: E2:8F:2D:D3:30:4F:03:2E:E2:73:08:3D:6F:30:E5:A9:27:32:AA:BE
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 18B7
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F38A7CA65C2711EDAB91A60AC4F9AE02.roa
Signing time: Wed 14 Dec 2022 08:53:34 +0000
ROA not before: Wed 14 Dec 2022 08:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18254
IP address blocks: 103.19.8.0/23 maxlen: 24
103.93.252.0/24 maxlen: 24
103.93.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6327 (0x18b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Dec 14 08:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63998f0d-1e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:19:77:a4:ac:a2:f9:8b:e8:4f:fe:63:fe:
01:d1:85:09:82:f7:29:48:b8:1f:1f:e3:d6:c0:6f:
a3:cf:43:0b:6a:08:82:8c:b6:36:5c:40:71:e0:d6:
b8:49:0c:bc:7a:4e:26:43:3b:47:4a:0c:c0:16:ce:
a2:6c:e5:6f:b0:7e:52:36:5a:54:54:12:54:06:ac:
44:f3:cf:d0:4c:3e:e7:8d:e2:07:0a:f2:66:c6:f8:
a8:f3:91:cc:69:f5:7f:ce:9b:a7:ae:97:5d:42:d6:
11:12:d6:40:3e:9f:1b:b4:81:b4:db:e0:18:c5:8a:
c9:4a:16:9b:d4:83:42:13:50:2e:86:df:09:19:b5:
b0:ca:36:8d:74:b7:ff:ab:f2:1d:46:ce:20:4d:63:
a7:71:0a:40:59:c2:67:cb:f1:af:d8:ea:68:d3:c8:
a8:5f:b0:f9:68:7e:16:b1:b4:7d:0b:9a:71:31:46:
f6:3d:1e:70:a3:56:10:42:95:85:3a:4b:f8:20:fe:
4e:66:fa:78:90:3c:1c:50:99:1b:57:ed:bf:e0:db:
31:6b:40:39:49:a6:de:1a:2f:e5:3d:80:a6:97:81:
73:47:70:bb:df:bf:dd:08:ba:cc:23:85:0e:87:c5:
d3:c8:bb:70:35:23:f8:3e:4a:7b:cc:f4:2b:13:f8:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:2D:D3:30:4F:03:2E:E2:73:08:3D:6F:30:E5:A9:27:32:AA:BE
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F38A7CA65C2711EDAB91A60AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.8.0/23
103.93.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:cd:b8:86:31:1f:ed:fe:ad:41:4e:94:7b:a1:f7:31:33:f3:
1c:33:1f:2e:dc:43:9a:99:55:f6:65:c7:a0:03:2f:d3:f1:54:
07:d4:b2:ee:2d:ce:e6:99:e6:09:d3:91:78:f2:17:17:42:a6:
07:3d:c2:9c:db:dc:38:00:04:c8:f0:00:85:d9:c8:ba:0d:32:
f9:ca:30:a6:de:f6:3b:f6:58:95:cb:be:2f:83:42:bf:8a:d5:
ee:d3:e1:06:37:ba:cc:a5:0d:2f:d1:1e:76:02:ba:a7:61:b8:
5e:8f:09:d3:c1:96:1a:07:e6:d1:d2:07:67:e5:38:d7:f8:06:
24:38:cf:85:67:88:4d:f1:d5:1b:2c:11:94:26:c2:e2:f3:05:
26:ac:fe:6e:62:a7:d8:82:db:28:29:12:d8:57:07:d0:b7:e0:
d7:3f:b9:32:c4:ec:a2:71:25:86:68:38:e3:41:69:06:34:c4:
9d:46:e1:4b:31:aa:d4:65:2f:b6:da:f6:f8:74:b8:71:e9:d0:
1a:db:f8:1b:9a:bf:bf:61:21:31:43:e6:05:96:be:80:2f:4a:
30:5c:62:2d:04:77:40:41:1f:cc:61:bb:a1:d6:c4:ae:15:40:
50:64:b0:f4:27:4e:e6:a7:13:6f:52:a2:fd:63:98:78:8a:5c:
63:6d:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-ams.rpki-client.org