Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04BB64E824B911EB9C08215BC4F9AE02.roa
File: 04BB64E824B911EB9C08215BC4F9AE02.roa (raw, json)
Hash identifier: n8QQImT7FXHzY0ttaHDN3CcpK12cpDfczSDp2HCEYZU=
Subject key identifier: C9:07:8E:08:6A:FC:D4:23:13:70:9C:DE:1D:87:71:0D:C8:44:00:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F7A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04BB64E824B911EB9C08215BC4F9AE02.roa
Signing time: Tue 01 Nov 2022 06:01:41 +0000
ROA not before: Tue 01 Nov 2022 06:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132976
IP address blocks: 103.72.176.0/24 maxlen: 24
103.72.177.0/24 maxlen: 24
103.72.178.0/24 maxlen: 24
103.72.179.0/24 maxlen: 24
103.99.216.0/22 maxlen: 24
103.162.206.0/24 maxlen: 24
103.164.161.0/24 maxlen: 24
103.167.29.0/24 maxlen: 24
103.173.41.0/24 maxlen: 24
103.180.72.0/24 maxlen: 24
103.210.40.0/22 maxlen: 24
103.243.44.0/22 maxlen: 24
150.242.20.0/24 maxlen: 24
150.242.21.0/24 maxlen: 24
150.242.22.0/24 maxlen: 24
150.242.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24442 (0x5f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 1 06:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6360b645-f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:f3:e0:51:17:31:10:df:84:13:38:15:b4:
af:f7:c0:ac:09:58:9a:7b:04:16:8b:4d:8c:a8:22:
53:6e:69:f6:f2:17:6e:a4:0b:a0:3c:a6:9f:24:20:
d9:9f:66:3c:0d:9e:7f:f7:40:11:bd:fc:f1:51:9f:
69:36:20:96:62:2a:b5:97:ff:90:de:a9:cd:41:2b:
76:c4:d0:af:e6:09:4d:df:03:78:a6:57:1f:46:92:
a0:a4:a8:91:47:8b:42:b1:49:85:52:8a:a3:1e:61:
ff:7c:95:f7:8e:70:40:a6:21:2f:9a:37:f8:fa:1b:
0d:fd:79:dd:41:e8:37:1b:bd:f1:3e:5c:dd:bb:1c:
f3:71:c7:9d:75:e7:9c:75:6c:a2:11:4e:f2:93:78:
c2:19:c7:14:5e:f4:ea:ae:c9:b1:2f:a2:12:8d:95:
91:f1:a1:f7:54:97:90:8c:81:90:69:ce:a0:92:b8:
be:33:64:91:76:6d:7b:3c:37:d2:c2:d9:f6:5d:62:
85:ae:36:37:35:b5:7e:9f:3a:57:f5:b9:35:1c:8b:
b8:71:e6:9a:2c:9f:1a:cd:eb:a1:21:50:84:0a:8d:
c1:f4:12:78:5d:5e:4d:d2:fb:06:0f:9b:21:38:84:
b2:0e:0b:d8:55:ce:25:4a:08:73:2c:97:41:21:e1:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:8E:08:6A:FC:D4:23:13:70:9C:DE:1D:87:71:0D:C8:44:00:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04BB64E824B911EB9C08215BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.176.0/22
103.99.216.0/22
103.162.206.0/24
103.164.161.0/24
103.167.29.0/24
103.173.41.0/24
103.180.72.0/24
103.210.40.0/22
103.243.44.0/22
150.242.20.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f8:78:5d:cf:97:5d:fc:98:52:12:04:ba:a0:1a:d3:b7:23:
68:73:d7:23:cb:9d:b6:a1:01:60:6d:1f:78:9b:11:bf:b9:d1:
54:94:8d:fc:d8:0d:58:ef:58:b5:5a:b7:4f:44:a1:40:6c:e5:
07:39:e9:50:a9:45:a7:d6:4c:21:ec:e6:86:19:3c:e0:70:17:
b7:17:66:57:7f:e9:58:7d:be:27:10:2f:cd:45:97:3c:cf:02:
6a:ab:43:06:85:20:86:8e:48:6f:84:c1:d9:52:1d:b5:cc:05:
77:71:b6:04:60:ee:84:bf:19:08:bd:9b:3a:4d:cc:a8:ff:b3:
39:5b:26:6e:36:eb:6d:f2:80:76:89:a9:6f:73:99:86:b8:2f:
96:27:aa:b5:88:31:40:28:6b:d0:b8:29:81:cd:c9:bd:75:1f:
ba:81:cf:23:c5:3f:aa:af:d1:b5:2c:bc:f3:4b:1a:eb:0e:d5:
f8:7b:81:5a:f6:ee:49:68:12:ba:45:77:47:3d:d2:eb:04:d3:
06:0b:da:28:9d:a9:1c:1b:60:6f:70:7f:76:4b:a8:7e:87:05:
f8:2b:b3:3b:53:ef:f9:5d:b4:29:5d:82:41:bd:17:47:98:bb:
a6:a8:06:3d:c2:f7:dc:16:23:f3:b6:b3:c7:1c:ff:a4:8a:ff:
4b:de:47:a1
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgICX3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMTAxMDYwMTQxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzYwYjY0NS1mOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jTz4FEXMRDfhBM4FbSv98CsCViaewQWi02MqCJTbmn28hdupAugPKafJCDZ
n2Y8DZ5/90ARvfzxUZ9pNiCWYiq1l/+Q3qnNQSt2xNCv5glN3wN4plcfRpKgpKiR
R4tCsUmFUoqjHmH/fJX3jnBApiEvmjf4+hsN/XndQeg3G73xPlzduxzzcceddeec
dWyiEU7yk3jCGccUXvTqrsmxL6ISjZWR8aH3VJeQjIGQac6gkri+M2SRdm17PDfS
wtn2XWKFrjY3NbV+nzpX9bk1HIu4ceaaLJ8azeuhIVCECo3B9BJ4XV5N0vsGD5sh
OISyDgvYVc4lSghzLJdBIeGOnQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFMkHjghq
/NQjE3Cc3h2HcQ3IRACNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDRCQjY0RTgy
NEI5MTFFQjlDMDgyMTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E
RjBEMEIEAgABMDwDBAJnSLADBAJnY9gDBABnos4DBABnpKEDBABnpx0DBABnrSkD
BABntEgDBAJn0igDBAJn8ywDBAKW8hQwDQYJKoZIhvcNAQELBQADggEBABX4eF3P
l138mFISBLqgGtO3I2hz1yPLnbahAWBtH3ibEb+50VSUjfzYDVjvWLVat09EoUBs
5Qc56VCpRafWTCHs5oYZPOBwF7cXZld/6Vh9vicQL81FlzzPAmqrQwaFIIaOSG+E
wdlSHbXMBXdxtgRg7oS/GQi9mzpNzKj/szlbJm42623ygHaJqW9zmYa4L5YnqrWI
MUAoa9C4KYHNyb11H7qBzyPFP6qv0bUsvPNLGusO1fh7gVr27kloErpFd0c90usE
0wYL2iidqRwbYG9wf3ZLqH6HBfgrsztT7/ldtCldgkG9F0eYu6aoBj3C99wWI/O2
s8cc/6SK/0veR6E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:50 2023 by rpki-client on console-fra.rpki-client.org