Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0390A148D46911ED87EE4259C4F9AE02.roa
File: 0390A148D46911ED87EE4259C4F9AE02.roa (raw, json)
Hash identifier: 4N+Z1ATehEA5C/0FCOTzy2cdsUSLEzwCXzMBcrFWtHQ=
Subject key identifier: F5:C0:6F:56:E9:1F:18:FA:CC:D7:B7:1C:5D:B6:E5:26:52:7B:76:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 68C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0390A148D46911ED87EE4259C4F9AE02.roa
Signing time: Fri 21 Apr 2023 04:31:42 +0000
ROA not before: Fri 21 Apr 2023 04:31:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.86.68.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.98.36.0/24 maxlen: 24
103.98.37.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.174.159.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.177.174.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.183.54.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
2404:ba00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26821 (0x68c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 21 04:31:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644211ae-9706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:9b:99:ee:81:8a:9f:d8:c7:39:34:db:32:
20:e9:fe:2f:a4:4e:fe:d9:ab:6b:3e:f0:01:73:1b:
58:7f:bf:c5:84:d4:6e:bc:a5:22:16:fe:4d:d5:ac:
98:70:3d:d1:07:4a:2b:8d:b0:b0:34:4c:95:89:75:
e0:96:a2:bc:af:40:32:ab:82:53:7b:e7:e8:83:08:
99:08:f4:d9:26:e0:8c:57:60:80:72:25:fd:28:30:
28:dd:73:ac:ec:32:71:a3:16:ba:c2:c9:20:23:0c:
d8:2e:0e:8e:96:b5:33:b6:ad:ee:4e:b8:4f:de:01:
08:b6:b6:15:94:13:45:11:57:78:7e:58:de:67:dd:
61:2a:ba:e8:ac:ef:73:bc:70:d9:e6:a1:e6:31:2f:
89:df:b3:1c:8c:be:88:84:6c:8e:cf:45:dc:43:d4:
ed:6c:0a:e4:9d:11:17:aa:67:c0:31:70:73:ba:82:
b3:dd:69:22:4b:64:59:44:5b:ec:30:be:ae:46:54:
25:ca:73:a7:9f:42:80:98:42:87:fc:a8:f7:2c:d7:
26:46:7b:50:b2:cb:3a:64:9b:04:11:2e:a9:01:7a:
10:df:18:83:e6:1f:03:3d:c8:d2:3f:77:07:b8:dc:
1a:41:57:2e:72:ad:8a:2a:a6:21:0c:f7:8c:28:ee:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:6F:56:E9:1F:18:FA:CC:D7:B7:1C:5D:B6:E5:26:52:7B:76:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0390A148D46911ED87EE4259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.118.104.0/22
59.152.120.0/22
103.10.224.0/22
103.38.68.0/23
103.38.128.0/22
103.58.152.0/22
103.59.204.0/22
103.86.68.0/24
103.88.56.0/22
103.98.36.0/23
103.99.196.0/22
103.147.1.0/24
103.159.98.0/24
103.159.212.0/24
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.169.156.0/23
103.171.9.0/24
103.174.159.0/24
103.175.30.0/23
103.176.176.0/24
103.177.174.0/23
103.179.122.0/24
103.182.130.0/23
103.183.54.0/23
103.189.146.0/24
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.251.52.0/22
203.192.192.0-203.192.211.255
203.192.220.0-203.192.226.255
203.192.228.0-203.192.235.255
203.192.237.0-203.192.255.255
203.194.96.0-203.194.110.255
IPv6:
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:4b:21:7d:06:f5:b9:f3:ab:e7:39:d2:32:86:a4:f9:3c:34:
e4:bb:c3:6c:53:96:3a:67:4c:92:ca:a3:c8:0e:b6:25:7c:a3:
8e:b2:b1:13:50:32:39:a3:0e:03:84:dd:22:9c:e6:f2:60:fd:
09:60:52:d1:df:14:a1:18:f1:21:29:8f:d7:64:60:41:10:91:
04:e0:00:2a:3f:30:66:40:ca:f0:5a:b9:17:36:2d:83:3d:49:
36:06:ab:de:50:94:4d:f3:63:bc:78:db:a9:20:ac:89:7e:e0:
f2:cd:0b:29:8c:7d:cc:f1:ec:8c:ff:f9:57:1d:5d:69:a5:08:
df:4b:77:73:23:c7:5d:85:59:8a:11:da:f2:8d:2d:ab:db:2c:
65:c2:f8:2b:62:fc:68:e2:be:b1:22:4a:b3:07:e2:cb:6e:30:
f0:c4:72:45:2d:6e:c4:70:29:08:5e:93:13:dd:f9:91:4d:b7:
72:ed:02:65:ed:5d:b4:64:86:8c:e9:30:04:eb:51:4d:4d:51:
45:c0:0e:e6:ab:23:90:3c:aa:fc:df:7a:af:fb:96:8b:b1:74:
29:3d:a5:25:76:07:1e:82:36:e0:70:c5:42:3d:4a:2e:6d:be:
a8:a4:7b:56:66:78:6c:25:b8:01:7f:91:21:aa:93:12:8b:91:
12:2f:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org