Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/2D884060277F11EDB836C830C4F9AE02.roa
File: 2D884060277F11EDB836C830C4F9AE02.roa (raw, json)
Hash identifier: ptfAfjhRaVXLAxF6wB6e6lu/+dOwEgBj4o5KjFdn6zs=
Subject key identifier: 03:7E:BB:5D:20:C2:E8:C0:5E:87:01:32:88:49:73:7E:3E:95:FB:08
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 02
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/2D884060277F11EDB836C830C4F9AE02.roa
Signing time: Mon 29 Aug 2022 09:44:30 +0000
ROA not before: Mon 29 Aug 2022 09:44:30 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 58931
IP address blocks: 103.205.240.0/22 maxlen: 22
115.42.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Aug 29 09:44:30 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=630c8a7d-1bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:ce:75:6c:f5:11:4e:74:4e:ec:25:66:8c:
9a:6f:25:e4:79:50:06:e3:b3:ca:e5:9a:8b:d2:fe:
ac:6b:44:96:1c:cb:ec:ff:af:f7:fc:55:43:78:5a:
25:1c:8a:f4:37:91:53:d3:27:55:50:94:9f:ab:63:
6f:1b:37:e8:75:bb:fd:a2:a6:ed:fe:30:f9:68:60:
e7:0e:6a:62:1a:ea:1b:5e:d2:0e:7c:c4:9a:74:95:
4e:08:2d:76:cc:50:d4:5a:8b:3e:14:60:eb:da:d8:
cc:dc:70:c9:98:cd:a9:7a:29:53:28:d7:ef:b0:8a:
c3:b5:96:8d:3c:7b:dc:cb:cc:25:ec:f9:0b:fa:ab:
ed:72:e7:fc:1f:94:41:45:02:39:53:67:d1:11:1b:
68:99:12:aa:e0:be:b1:03:85:b6:45:bf:08:cc:c4:
01:59:95:5c:ed:00:58:23:12:f1:81:70:93:ee:e0:
b1:41:bc:64:be:8a:71:fa:7a:ef:01:00:b9:b2:7d:
03:98:ca:be:d6:81:85:23:3d:97:46:30:a5:ca:0b:
ee:8b:3f:8f:f0:b5:fb:59:6f:48:15:fa:73:8b:ee:
b7:b1:ae:1e:a9:d1:9b:5b:10:f6:7e:63:4d:63:9d:
69:5a:5a:3f:e3:97:de:38:8d:62:57:ca:4c:d3:41:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:BB:5D:20:C2:E8:C0:5E:87:01:32:88:49:73:7E:3E:95:FB:08
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/2D884060277F11EDB836C830C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.240.0/22
115.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:29:a5:36:67:f5:70:f0:57:e6:f8:e8:61:71:26:c0:6a:31:
b0:e7:df:19:9d:4a:64:ae:c8:81:e7:a1:ac:14:fe:96:e4:67:
24:5f:12:73:f7:c3:c7:c7:b3:f7:e3:db:c1:ea:87:04:ce:88:
e6:16:ab:83:c5:54:f7:32:9d:41:2e:ba:b4:f5:87:39:d5:73:
06:1d:27:aa:db:e8:9c:c1:1c:55:45:48:1a:2e:d0:2b:f1:15:
58:91:7c:f0:d3:00:94:47:14:f3:1b:93:1a:a1:67:93:9b:a4:
74:63:06:0a:79:79:e4:1f:a4:fc:da:75:81:93:8d:af:2f:0e:
ea:cf:7b:57:72:b3:90:8c:a5:ea:81:60:e1:58:15:ac:07:f5:
6a:24:96:11:30:35:ee:c7:c9:bb:c7:36:49:47:16:8f:d6:0c:
51:86:b1:8b:cd:9d:0a:b7:c7:96:cc:a6:23:2e:70:67:e3:ba:
2d:b7:40:60:d1:d2:f9:e4:55:be:db:5c:e3:02:23:d9:16:1e:
3f:f4:72:68:45:d7:c6:cc:8a:00:68:21:16:b9:b8:ae:52:24:
91:9b:cc:78:db:34:fa:a6:2c:d7:ad:49:1c:39:65:c9:dd:72:
8b:c2:65:8c:55:f7:ca:97:7f:27:80:df:7d:1f:c0:58:0f:dd:
6a:c3:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-ams.rpki-client.org