Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C0E148FCB1AE11ED9549A263C4F9AE02.roa
File: C0E148FCB1AE11ED9549A263C4F9AE02.roa (raw, json)
Hash identifier: +LdZZhSUIR2JTqhBh8ZRmxBAAv6hspL3MKRsV1QNapU=
Subject key identifier: 99:CF:79:ED:EB:1D:3C:CF:40:AC:06:C8:E4:CD:B1:69:4A:81:AA:4A
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 04E6
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C0E148FCB1AE11ED9549A263C4F9AE02.roa
Signing time: Thu 30 Mar 2023 05:11:19 +0000
ROA not before: Thu 30 Mar 2023 05:11:19 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 17766
IP address blocks: 43.251.108.0/22 maxlen: 24
103.1.228.0/24 maxlen: 24
103.1.229.0/24 maxlen: 24
103.1.230.0/23 maxlen: 24
103.16.148.0/22 maxlen: 22
103.16.148.0/24 maxlen: 24
103.16.149.0/24 maxlen: 24
150.129.84.0/22 maxlen: 22
150.129.84.0/24 maxlen: 24
203.149.64.0/20 maxlen: 20
203.149.64.0/22 maxlen: 22
203.149.64.0/24 maxlen: 24
203.149.65.0/24 maxlen: 24
203.149.66.0/24 maxlen: 24
203.149.67.0/24 maxlen: 24
203.149.68.0/22 maxlen: 22
203.149.68.0/24 maxlen: 24
203.149.69.0/24 maxlen: 24
203.149.70.0/24 maxlen: 24
203.149.71.0/24 maxlen: 24
203.149.72.0/22 maxlen: 22
203.149.72.0/24 maxlen: 24
203.149.73.0/24 maxlen: 24
203.149.74.0/24 maxlen: 24
203.149.75.0/24 maxlen: 24
203.149.76.0/22 maxlen: 22
203.149.76.0/24 maxlen: 24
203.149.77.0/24 maxlen: 24
203.149.78.0/24 maxlen: 24
203.149.79.0/24 maxlen: 24
203.149.80.0/21 maxlen: 22
203.149.80.0/24 maxlen: 24
203.149.81.0/24 maxlen: 24
203.149.82.0/24 maxlen: 24
203.149.83.0/24 maxlen: 24
203.149.84.0/24 maxlen: 24
203.149.85.0/24 maxlen: 24
203.149.86.0/24 maxlen: 24
203.149.87.0/24 maxlen: 24
210.215.0.0/16 maxlen: 16
210.215.5.0/24 maxlen: 24
210.215.6.0/24 maxlen: 24
210.215.48.0/24 maxlen: 24
210.215.72.0/24 maxlen: 24
210.215.75.0/24 maxlen: 24
210.215.77.0/24 maxlen: 24
210.215.83.0/24 maxlen: 24
210.215.84.0/24 maxlen: 24
210.215.87.0/24 maxlen: 24
210.215.90.0/24 maxlen: 24
210.215.101.0/24 maxlen: 24
210.215.102.0/24 maxlen: 24
210.215.130.0/24 maxlen: 24
210.215.131.0/24 maxlen: 24
210.215.136.0/24 maxlen: 24
210.215.151.0/24 maxlen: 24
2001:db0::/32 maxlen: 32
2001:db0::/36 maxlen: 37
2001:db0:1000::/36 maxlen: 36
2001:db0:1000::/37 maxlen: 37
2001:db0:2000::/36 maxlen: 36
2001:db0:2000::/37 maxlen: 37
2001:db0:3000::/36 maxlen: 36
2001:db0:3000::/37 maxlen: 37
2001:db0:4000::/36 maxlen: 36
2001:db0:4000::/37 maxlen: 37
2001:db0:6000::/36 maxlen: 36
2001:db0:6800::/37 maxlen: 37
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Mar 30 05:11:19 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=642519f7-a2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:f9:b0:16:55:97:32:cb:54:b2:a3:f0:bc:
b9:5b:ef:71:4f:1b:c0:5e:1f:cb:63:6b:be:97:09:
22:18:6b:ee:d0:20:9c:75:a5:47:66:c2:34:13:0d:
0d:f5:3e:05:ea:d0:78:0b:44:96:ed:77:86:d5:61:
3b:43:e9:10:cb:50:bf:8b:44:6d:56:a3:77:ea:3b:
7a:9e:dd:24:f2:81:67:d9:a6:b0:6e:7e:cc:2a:da:
19:53:7b:88:ce:7c:52:b6:f3:08:c0:de:c3:5f:24:
57:b4:89:d4:c2:df:e0:16:5c:33:90:24:c4:0c:50:
e8:e4:85:fa:81:32:2d:99:82:b0:93:41:74:7e:a2:
18:0a:59:9c:43:12:c8:40:dd:3e:56:8f:6b:5b:78:
7d:e3:85:35:4c:b9:e3:61:5e:2f:cc:7c:17:ed:d1:
9a:1e:58:16:a7:8c:4e:c4:d4:7e:9a:fd:8e:f8:bd:
db:de:c7:1a:17:6e:e3:6d:2e:f9:8e:ba:d3:94:79:
c5:42:44:87:86:f7:1c:7e:03:7c:cf:b3:d8:3a:ec:
a6:a8:c7:a7:a5:7f:05:5a:f9:92:46:41:9c:9e:1e:
cc:a4:33:ef:e5:49:10:97:e9:ab:0f:4b:21:9f:80:
23:be:1d:b9:e1:e6:0d:9a:d6:81:9b:57:87:39:a9:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:79:ED:EB:1D:3C:CF:40:AC:06:C8:E4:CD:B1:69:4A:81:AA:4A
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C0E148FCB1AE11ED9549A263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.108.0/22
103.1.228.0/22
103.16.148.0/22
150.129.84.0/22
203.149.64.0-203.149.87.255
210.215.0.0/16
IPv6:
2001:db0::/32
Signature Algorithm: sha256WithRSAEncryption
62:d7:f0:c1:b5:f3:b7:75:c3:ec:73:36:fc:9b:69:48:62:a8:
57:31:2a:e5:be:a8:ae:74:3e:6b:8d:47:07:0f:3b:7a:49:2e:
cd:ee:69:78:7c:da:59:db:4c:f9:e6:9b:51:7f:68:14:5a:b3:
2b:94:27:1a:14:dc:5b:4e:47:40:e1:77:d6:bb:22:d8:21:35:
e2:94:2d:48:ca:52:1c:41:fa:81:6b:2e:df:b1:e0:af:61:a1:
2f:f4:21:87:6c:01:26:8e:40:73:f7:df:af:df:77:8f:14:50:
7e:6d:72:89:07:76:ed:e7:c0:82:c1:54:ec:98:5f:de:d3:ab:
d9:a5:9c:ec:1f:76:ee:48:e8:63:06:08:f4:53:b6:c5:94:fa:
96:44:b0:c2:d2:11:94:d5:ab:71:92:da:a1:0f:6b:71:ad:a2:
72:df:13:3a:55:9c:3f:ef:10:61:88:2e:7d:69:af:7d:c5:f3:
eb:9a:7e:60:3c:b6:b6:dc:0b:8d:bb:9f:c4:41:7b:b4:d3:02:
ef:3c:6d:fa:88:4d:cb:19:76:f5:a1:60:73:a8:57:72:b7:90:
02:6b:65:9e:6f:48:c8:79:42:0f:fa:0b:f6:a6:11:0c:fd:4a:
9a:b1:12:f0:d8:32:1b:50:fb:c7:1d:05:7e:5e:71:9a:34:09:
15:b5:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org