Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
File: F48EB0CC5C2711EDAB91A60AC4F9AE02.roa (raw, json)
Hash identifier: 6w2BAie9vXP2pN3v59LqW+Mac6E62TIjiSXWYWl0Xdc=
Subject key identifier: E9:70:31:24:C1:76:15:3A:AB:DA:80:A4:74:DE:33:93:BC:CA:E9:BC
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 18D8
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
Signing time: Fri 10 Feb 2023 08:23:38 +0000
ROA not before: Fri 10 Feb 2023 08:23:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 997
IP address blocks: 103.19.8.0/23 maxlen: 24
103.93.252.0/24 maxlen: 24
103.93.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6360 (0x18d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Feb 10 08:23:38 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e5ff0a-f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:83:79:cb:79:8b:74:58:b9:af:72:c1:92:
68:74:dc:7f:3c:bf:b5:2a:58:ef:a8:f1:69:1c:e2:
c8:83:d2:3f:ca:1b:8f:38:ea:d3:44:4e:8e:5e:1f:
31:18:80:68:f5:c8:98:cc:4e:bd:52:6b:2a:04:54:
19:b4:11:90:49:a5:5f:cc:d6:d8:bf:b3:11:5e:f4:
5e:29:8d:9d:7b:73:9b:c4:f2:08:8e:df:7f:0c:c2:
87:82:b1:b7:50:56:e2:fc:b6:2a:26:cc:09:9d:a0:
48:94:14:b0:0e:71:33:d5:72:29:f8:ca:6f:fb:d4:
09:e6:64:d2:d5:2b:5e:5b:a8:b2:bf:2f:7e:51:68:
16:3e:d0:ea:87:de:f1:4a:c2:42:f5:75:79:99:ec:
67:0b:2d:7e:33:c7:fa:66:1b:a8:cd:8c:59:e3:bd:
75:fb:dd:3a:43:6c:42:af:3f:17:dc:85:1d:12:df:
2a:be:e0:02:2d:c9:93:39:0b:64:35:97:7c:50:f6:
46:9c:56:91:e4:7a:f8:9d:52:de:7a:ef:4c:21:fa:
16:34:21:53:8a:16:1b:0a:61:e6:da:c1:dc:90:16:
89:d6:7f:83:74:ae:11:1f:eb:d2:bc:39:b0:f7:51:
b2:53:97:86:b3:27:22:2c:84:bf:ff:ee:3d:de:78:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:31:24:C1:76:15:3A:AB:DA:80:A4:74:DE:33:93:BC:CA:E9:BC
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.8.0/23
103.93.252.0/23
Signature Algorithm: sha256WithRSAEncryption
28:09:12:40:b4:cf:f3:ff:7f:e3:cb:ae:b5:4d:fb:d8:a3:60:
ce:d8:5a:59:fc:6b:4b:d6:a1:c0:9f:bf:3d:b3:2d:8b:e6:de:
54:37:36:fd:6f:3f:a9:ba:0c:a0:b7:42:3c:9c:91:b8:a3:67:
14:e1:be:8c:1e:c2:ab:8e:84:a0:d0:b3:cf:8a:ea:b0:bb:99:
10:7c:bd:f3:ce:8a:c5:e4:bc:b9:64:d2:97:c7:65:34:30:de:
81:9d:a6:31:d5:6d:88:13:5d:1b:1a:cd:3d:2b:07:6f:84:0d:
6c:b2:3d:bb:bd:36:ca:e8:58:f3:99:ef:30:3a:f5:3d:8d:00:
fc:39:64:6a:e1:68:eb:cc:15:29:f2:a8:5c:4e:2f:17:f6:64:
cd:df:af:d4:d1:1e:8a:38:b5:a0:8c:93:e4:b3:63:03:5d:44:
c0:7b:38:f0:1d:4f:7d:b9:10:1c:1d:69:08:73:c7:26:a8:25:
61:ab:68:03:5a:dd:96:19:3b:21:e9:e4:1e:9b:f0:80:e6:9a:
e4:89:14:0e:33:71:a2:57:ad:dc:bd:2e:20:7e:45:4c:69:b1:
29:ee:7e:db:46:fc:76:0d:be:bd:c0:24:fd:cb:76:7a:b9:6b:
7b:2a:5e:7f:de:59:57:8b:15:14:98:04:50:54:a1:b3:c7:43:
8f:2c:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-ams.rpki-client.org