Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/8ED303ACC6C511EC97E4C916C4F9AE02.roa
File: 8ED303ACC6C511EC97E4C916C4F9AE02.roa (raw, json)
Hash identifier: fBGUjlrYcWFEdC3Xu66Lz5nz3t7EJXBsfIAtUVfdMCo=
Subject key identifier: 9F:24:E3:9E:5E:10:13:28:7E:ED:9A:73:88:24:44:E7:1A:F8:9F:B1
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 02
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/8ED303ACC6C511EC97E4C916C4F9AE02.roa
Signing time: Thu 28 Apr 2022 07:33:55 +0000
ROA not before: Thu 28 Apr 2022 07:33:55 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 132742
IP address blocks: 103.80.144.0/22 maxlen: 24
203.114.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Apr 28 07:33:55 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=626a4363-7bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:d2:36:e0:08:c2:c8:54:7f:2a:22:04:f9:
85:e6:b5:c4:82:e7:21:94:07:6f:6d:e9:3f:8f:5e:
64:2b:3b:83:4b:de:2a:9f:df:78:6e:0a:5f:f6:f7:
1a:d5:26:f9:2f:c0:e0:83:ba:e8:ff:e6:99:f9:90:
6a:af:f8:b8:a4:c2:6f:ea:85:4f:7c:95:14:6c:86:
9c:c1:51:e3:3d:0b:60:d5:8a:28:1b:81:a9:73:f2:
79:6d:d1:93:39:6b:2b:75:9f:24:e3:4c:d2:ce:b7:
38:ba:16:62:52:64:e2:d1:88:7f:9e:32:b3:65:43:
ed:72:09:55:c4:72:47:4c:f8:3a:c7:ba:92:3e:fc:
68:c7:cc:0c:f8:8f:d2:27:db:91:5e:ec:f1:bf:47:
b9:83:63:72:5e:c3:8e:0f:29:a8:07:f6:2d:73:83:
bb:fb:d7:c2:15:58:76:b3:f5:1d:43:cb:2e:5b:2d:
8a:2f:a2:2b:88:12:ca:b0:2f:84:32:f6:c6:2d:c8:
df:6a:bb:79:4d:10:78:7c:f3:8f:ca:73:fb:34:7d:
33:00:11:a8:d7:6b:7f:a3:a3:e8:f3:83:b4:11:5d:
60:51:9c:84:4e:07:39:81:de:4e:c7:ee:f9:d2:83:
6c:47:f7:b2:0c:2b:35:eb:44:ce:34:d3:d8:19:20:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:E3:9E:5E:10:13:28:7E:ED:9A:73:88:24:44:E7:1A:F8:9F:B1
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/8ED303ACC6C511EC97E4C916C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.144.0/22
203.114.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:68:a4:1e:64:91:e7:01:54:d4:bd:21:51:66:5a:c3:1a:ba:
85:42:e6:42:1a:32:7e:9c:cd:74:3f:a9:a0:9f:15:3c:79:83:
00:5e:ad:a3:ea:a0:1a:be:c6:bc:97:5f:6d:49:22:c1:21:3a:
1b:40:54:f6:45:4b:00:5b:d3:4a:b2:48:e9:93:0e:dd:a5:20:
e7:cc:99:be:c2:cb:7a:b5:c8:da:84:2a:51:f3:a7:e6:81:00:
0f:b1:f9:8a:e7:39:8b:1b:82:cb:12:9a:72:bc:28:88:d8:b9:
34:ce:40:fc:ec:3d:e0:08:5a:e8:f9:64:a8:68:3c:8c:b3:47:
b6:c7:c1:f9:7b:e5:e2:5e:77:62:29:28:51:58:f2:64:00:68:
8f:b9:fd:94:87:a6:45:dc:5d:02:74:20:fe:09:c6:b1:8c:5b:
93:71:3b:0e:fa:2e:b2:75:32:37:a9:91:88:53:b8:6c:3d:af:
c8:55:bb:77:26:60:e7:85:92:88:e1:d0:63:a9:ad:c3:59:d1:
e2:45:a8:33:a7:e4:b3:8b:ca:47:18:fc:df:5a:7d:0c:29:58:
8b:88:88:5e:59:2d:f5:1f:fb:d5:44:95:62:d3:21:e7:b3:89:
11:c1:ee:df:57:c5:26:8a:e9:20:af:18:2f:12:1e:42:99:f2:
16:93:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org