Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06589116929111ED82840B2EC4F9AE02.roa
File: 06589116929111ED82840B2EC4F9AE02.roa (raw, json)
Hash identifier: OC3k6AIZoCQrwB4PbfnS7WKR4KRvko5IyOpgaUHVKWQ=
Subject key identifier: 64:8F:E9:B2:36:A6:B8:21:94:61:5F:3C:B8:47:60:F6:F3:37:E0:84
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6777
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06589116929111ED82840B2EC4F9AE02.roa
Signing time: Wed 29 Mar 2023 17:41:40 +0000
ROA not before: Wed 29 Mar 2023 17:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59162
IP address blocks: 43.225.68.0/22 maxlen: 24
43.225.212.0/22 maxlen: 24
45.114.152.0/24 maxlen: 24
45.114.153.0/24 maxlen: 24
45.114.154.0/24 maxlen: 24
45.114.155.0/24 maxlen: 24
45.115.168.0/22 maxlen: 24
45.117.112.0/24 maxlen: 24
45.117.113.0/24 maxlen: 24
45.117.114.0/24 maxlen: 24
45.117.115.0/24 maxlen: 24
45.119.236.0/24 maxlen: 24
45.119.237.0/24 maxlen: 24
45.119.238.0/24 maxlen: 24
45.119.239.0/24 maxlen: 24
45.123.8.0/22 maxlen: 22
45.123.8.0/24 maxlen: 24
45.123.9.0/24 maxlen: 24
45.123.10.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
45.248.12.0/22 maxlen: 24
45.251.40.0/22 maxlen: 24
103.17.48.0/22 maxlen: 24
103.38.200.0/22 maxlen: 22
103.38.200.0/24 maxlen: 24
103.38.201.0/24 maxlen: 24
103.38.202.0/24 maxlen: 24
103.38.203.0/24 maxlen: 24
103.40.64.0/24 maxlen: 24
103.40.65.0/24 maxlen: 24
103.40.66.0/24 maxlen: 24
103.40.67.0/24 maxlen: 24
103.57.176.0/24 maxlen: 24
103.57.177.0/24 maxlen: 24
103.57.178.0/24 maxlen: 24
103.57.179.0/24 maxlen: 24
103.106.152.0/24 maxlen: 24
103.106.153.0/24 maxlen: 24
103.106.154.0/24 maxlen: 24
103.106.155.0/24 maxlen: 24
103.117.152.0/22 maxlen: 24
103.146.233.0/24 maxlen: 24
103.193.200.0/22 maxlen: 24
103.211.56.0/22 maxlen: 24
103.219.216.0/22 maxlen: 24
103.239.140.0/24 maxlen: 24
103.239.141.0/24 maxlen: 24
103.239.142.0/24 maxlen: 24
103.239.143.0/24 maxlen: 24
103.253.208.0/22 maxlen: 24
103.254.206.0/24 maxlen: 24
103.254.207.0/24 maxlen: 24
103.255.72.0/22 maxlen: 24
114.134.20.0/24 maxlen: 24
114.134.21.0/24 maxlen: 24
114.134.22.0/24 maxlen: 24
114.134.23.0/24 maxlen: 24
2001:df7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26487 (0x6777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 29 17:41:40 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64247854-9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:35:f4:5f:8b:60:10:f7:f5:c1:0a:f3:2c:
c8:01:f1:40:ac:59:c8:16:49:be:ca:a2:17:15:74:
c0:38:fc:b5:2e:77:fa:91:70:76:38:58:54:c1:cb:
ac:8f:7e:0c:76:19:31:2f:9b:a3:42:4e:7b:75:8d:
36:cd:0b:26:6f:d7:a1:39:57:02:48:58:71:6c:3b:
ea:64:11:38:2e:93:ea:fe:08:f1:90:b1:72:fb:6c:
9b:cc:c5:36:92:8e:8f:6a:c5:ce:47:34:bf:f0:84:
a9:06:33:aa:66:8e:f4:8a:71:25:b1:69:7c:3f:51:
a9:50:eb:aa:73:16:f5:d0:d4:6f:77:1d:90:03:76:
3b:e7:51:ef:8b:ec:d2:a9:b0:b5:7c:d4:68:70:bc:
d0:c0:d9:2b:60:43:92:b7:9e:a0:b3:4c:9a:89:b8:
c8:53:dc:82:cb:74:ee:9d:d8:ef:b3:13:e4:08:02:
5c:ec:7c:bf:dd:5e:fa:15:9c:c8:0e:bd:e8:e4:6d:
8d:ff:1e:23:6b:43:35:59:61:70:47:5e:bc:74:99:
ae:a1:a0:ff:0e:64:0d:f2:54:d1:c6:d9:c8:2a:96:
48:21:29:1a:83:bc:27:d4:22:e3:4c:55:33:13:7a:
f6:90:cc:e8:8f:49:6e:3e:ff:c8:66:e1:9a:57:26:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:E9:B2:36:A6:B8:21:94:61:5F:3C:B8:47:60:F6:F3:37:E0:84
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06589116929111ED82840B2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.68.0/22
43.225.212.0/22
45.114.152.0/22
45.115.168.0/22
45.117.112.0/22
45.119.236.0/22
45.123.8.0/22
45.248.12.0/22
45.251.40.0/22
103.17.48.0/22
103.38.200.0/22
103.40.64.0/22
103.57.176.0/22
103.106.152.0/22
103.117.152.0/22
103.146.233.0/24
103.193.200.0/22
103.211.56.0/22
103.219.216.0/22
103.239.140.0/22
103.253.208.0/22
103.254.206.0/23
103.255.72.0/22
114.134.20.0/22
IPv6:
2001:df7::/48
Signature Algorithm: sha256WithRSAEncryption
1a:01:a0:b6:0c:e4:2e:9f:66:ac:63:1b:7c:15:a3:d0:5a:fe:
c3:dd:4d:ba:78:6f:36:6b:33:56:0d:d1:02:65:47:54:c1:63:
89:61:39:3f:e4:70:c1:28:f1:28:c4:8e:25:42:dd:44:3c:58:
5c:17:b3:cf:58:ed:a0:b1:5e:eb:6d:43:82:37:ca:cb:d3:3e:
8e:c3:6e:ec:ad:68:ee:c0:a5:35:55:06:3a:84:d4:33:8c:73:
cf:52:b2:a2:99:7c:c1:fa:02:d7:1c:f2:94:08:a2:e3:cb:f4:
72:3f:43:f1:61:77:34:8f:b5:06:47:03:ac:a6:b5:ce:fb:7c:
f0:e6:03:b6:b9:98:a2:bf:fe:62:59:4a:76:6b:60:2c:00:33:
49:1b:68:d6:b2:40:3c:b8:14:dc:51:8e:6e:40:d1:e5:c7:ef:
c4:e6:3c:22:af:c9:4f:05:1c:6f:36:3f:00:4b:9b:52:c3:b4:
db:9b:0c:5a:f8:5c:21:05:3a:9b:8a:b1:83:4c:8e:09:1d:c1:
8f:04:51:02:55:b6:db:24:a9:e1:b9:ac:64:a8:cc:13:33:ad:
e7:ec:9e:3e:ee:bc:b4:fa:52:80:52:bc:04:fd:63:0a:cd:8e:
39:90:fa:89:82:7f:44:af:88:07:90:54:4b:c6:80:3d:b5:5b:
f0:a5:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:50 2023 by rpki-client on console-fra.rpki-client.org