Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01307242511111EDAEDFAB16C4F9AE02.roa
File: 01307242511111EDAEDFAB16C4F9AE02.roa (raw, json)
Hash identifier: 56G/WtnGam8n78HBlYGDVrAb79vd+7S5txg1rF1yfeU=
Subject key identifier: 69:99:70:55:E1:5B:ED:CC:FA:5B:82:62:A3:92:0C:0F:72:47:D0:07
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F09
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01307242511111EDAEDFAB16C4F9AE02.roa
Signing time: Fri 21 Oct 2022 07:21:39 +0000
ROA not before: Fri 21 Oct 2022 07:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24329 (0x5f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 21 07:21:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63524883-9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:ae:10:ed:31:7a:f6:b1:ca:1f:51:58:ea:
ee:b2:53:e9:5f:c6:9a:73:1a:55:9c:c1:37:3e:f9:
c6:61:61:2b:03:a4:3c:e6:75:17:bd:cb:4a:f4:79:
23:2f:9c:1f:28:22:d6:13:e7:e6:8a:5d:28:b6:22:
4d:f5:b7:e3:e5:9e:47:ac:43:cf:ad:80:1e:54:74:
7b:ad:28:97:f2:0c:db:6d:d6:23:67:59:53:f6:64:
27:99:fe:4c:2c:84:0e:db:c5:90:5e:ea:7b:ec:fb:
57:e9:60:80:fc:4b:9a:f1:92:c6:10:1c:83:b3:71:
41:ce:d9:56:4b:91:14:0b:e7:73:bc:26:84:60:11:
b8:27:26:f0:a5:f2:60:b0:85:91:99:a5:94:8c:95:
7b:94:e3:58:c8:c2:70:aa:30:a4:42:74:6c:d5:0a:
d3:42:9d:23:62:d4:11:fc:8a:05:09:07:6f:6b:fe:
9b:57:91:6f:8a:11:d8:5b:aa:31:a5:e0:aa:9c:d2:
e1:50:c8:6d:96:6e:80:f8:89:4f:6c:49:8a:d6:92:
f4:9a:a2:be:d3:08:b4:5f:5d:6f:b2:88:f0:e3:c7:
6e:1a:21:ab:37:36:e3:48:1e:eb:99:bf:c4:ee:65:
80:44:2e:86:15:22:ca:28:ba:34:ec:d5:ef:04:b6:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:70:55:E1:5B:ED:CC:FA:5B:82:62:A3:92:0C:0F:72:47:D0:07
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01307242511111EDAEDFAB16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.179.118.0-103.179.121.255
103.179.226.0/23
103.180.176.0/23
103.180.212.0/23
103.181.64.0/23
103.181.110.0/23
103.181.114.0/23
103.181.152.0/23
103.181.174.0/23
103.181.198.0/23
103.189.82.0/23
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0f:f0:b4:8e:26:f4:6e:db:b7:d4:4b:85:ff:a1:1e:fa:a9:
7a:45:67:e5:58:0f:50:51:bd:3e:a6:5b:51:c3:9a:eb:9c:82:
f3:d7:34:a5:02:7f:dc:aa:7d:a3:14:d9:0e:9c:aa:bf:8b:1e:
6d:bc:e3:7e:b7:99:27:af:ac:c5:ba:52:5f:f2:63:b9:f5:88:
83:71:29:8e:70:c7:b6:7f:e0:a0:8b:8b:ab:68:c8:b1:09:d4:
0a:43:49:8d:be:13:4b:dd:93:09:5f:f6:4a:ab:4b:4c:f7:fb:
92:03:1f:57:2b:ff:6b:ee:9c:34:64:48:ea:42:46:f1:74:8f:
b5:78:df:dd:0f:eb:3d:a0:56:2d:f1:bd:ea:f8:59:0e:a1:26:
af:83:7a:ee:f8:2f:57:bd:a4:e0:c2:72:3d:3b:d0:78:74:93:
0d:3f:59:05:19:27:ba:6c:29:48:fe:04:5a:67:3f:80:a5:7e:
be:eb:23:a1:09:f5:18:4c:1d:fc:71:dd:5e:70:ae:54:f7:6d:
2d:e9:09:49:4c:45:04:32:34:26:88:04:9c:10:28:74:85:4d:
cf:ac:9d:25:e7:4e:eb:b3:68:6a:fd:64:13:ae:75:3f:85:18:
05:56:03:c4:8b:e1:2f:23:81:2a:fc:43:b1:73:62:5a:59:e2:
76:82:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org