Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/65C53308F11011EB8E63FC73C4F9AE02.roa
File: 65C53308F11011EB8E63FC73C4F9AE02.roa (raw, json)
Hash identifier: S/TbyvJRYE3kw9NViM+YEfK/xAbU7fGLC2PXOekY1eE=
Subject key identifier: 92:9A:0B:BE:FF:18:4E:08:27:3B:DF:09:00:45:CA:71:98:AB:98:75
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 379D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/65C53308F11011EB8E63FC73C4F9AE02.roa
Signing time: Mon 27 Jun 2022 12:00:37 +0000
ROA not before: Mon 27 Jun 2022 12:00:37 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 135967
IP address blocks: 45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.155.216.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 23
103.176.250.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2001:df4:d880::/48 maxlen: 48
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14237 (0x379d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 27 12:00:37 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62b99be5-bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:7f:0b:d3:50:c5:9e:ba:f2:5d:06:40:88:
4d:39:0c:82:11:f1:d8:bd:ed:9f:6a:16:da:f6:ad:
d7:99:aa:f1:ae:f8:7e:09:3b:bb:ce:ef:3d:b5:4e:
d5:31:ab:35:f6:1e:f4:5e:1f:21:12:3e:d9:80:17:
e4:8b:d3:a8:1f:47:e0:8e:4d:f9:bf:ac:de:aa:54:
0a:a6:ab:98:8b:78:49:06:51:54:6e:89:c8:84:d1:
97:38:04:03:d5:e8:72:b6:20:42:38:73:cb:aa:fb:
e0:65:28:44:85:ce:ed:62:97:f0:d9:e6:27:74:2f:
01:e4:1f:5e:f3:cc:70:18:8f:a0:38:7e:84:cb:2d:
ee:24:c2:d1:1f:7f:d4:cb:c8:62:1c:89:9e:af:5a:
00:a9:44:07:c3:b1:f8:51:37:05:5c:d0:19:a0:82:
6e:9b:30:27:29:48:53:f3:df:61:4e:ed:52:51:31:
49:76:ff:8b:8a:6f:12:b8:7f:25:d7:ac:99:7f:5f:
78:76:0b:20:6c:33:0b:17:ad:7e:8b:d6:cf:62:52:
39:c9:03:aa:06:b7:5e:7c:5c:da:43:4d:4d:f5:ae:
48:f0:33:0c:3d:4a:02:53:f7:0b:e0:12:75:c5:07:
ed:b4:f6:86:bc:28:fc:4f:15:f9:0c:09:66:3d:5e:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:0B:BE:FF:18:4E:08:27:3B:DF:09:00:45:CA:71:98:AB:98:75
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/65C53308F11011EB8E63FC73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.155.216.0/23
103.161.16.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.179.174.0/23
103.180.138.0/23
103.187.168.0/23
103.188.82.0/23
103.188.242.0/23
IPv6:
2001:df4:d880::/48
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
09:c0:2e:c2:eb:d6:e4:8b:0d:7c:1f:71:f1:82:c6:60:95:22:
8f:41:83:66:67:1e:bb:80:b4:b0:2a:81:aa:30:4d:a8:5d:43:
ca:74:02:12:34:7b:5a:24:35:f2:b4:ff:b0:a6:03:0b:35:2c:
cb:c8:4d:76:fc:fc:f4:00:f7:01:45:b9:22:93:04:9c:6b:07:
8f:6f:25:03:72:17:24:b5:42:92:03:27:c8:67:83:ea:be:74:
ef:62:5f:fc:fb:60:1d:90:ee:24:75:b3:84:c5:68:a0:bd:19:
68:31:a6:16:1c:ff:6e:15:6c:fa:2a:20:82:10:9f:76:47:9d:
f6:e2:c1:46:f1:6c:63:90:7c:f2:51:65:1b:91:11:60:a3:17:
c0:f0:8f:16:ce:ae:3a:be:18:40:3e:59:04:8d:a3:1b:bf:06:
f5:16:10:c0:a8:33:4b:5b:14:80:c2:83:0f:50:2b:46:f1:cd:
aa:f0:0b:6f:57:22:aa:8b:42:43:4f:db:00:0f:4d:66:ee:ae:
80:17:3b:65:60:f2:a4:ca:62:22:cb:99:01:63:0f:ca:4c:8e:
b1:85:6a:32:ff:22:02:41:3b:03:48:9c:90:b1:b7:93:cc:9d:
0d:6a:8a:e8:f6:1b:ef:84:6a:ac:ed:ad:b2:8b:24:e8:e5:22:
38:5c:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org