Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E8E2FDE90A811EDA8F5FF52C4F9AE02.roa
File: 0E8E2FDE90A811EDA8F5FF52C4F9AE02.roa (raw, json)
Hash identifier: Ye6yZcmuZ7XAbRl9xznG51Iq1A8DPslq49d8TAaf+l8=
Subject key identifier: 3E:10:04:02:32:EB:07:59:6E:F5:7D:C6:07:89:F8:08:47:6B:AA:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 62D5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E8E2FDE90A811EDA8F5FF52C4F9AE02.roa
Signing time: Tue 10 Jan 2023 05:31:40 +0000
ROA not before: Tue 10 Jan 2023 05:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134877
IP address blocks: 103.110.236.0/22 maxlen: 24
103.124.152.0/23 maxlen: 24
103.143.108.0/24 maxlen: 24
103.148.33.0/24 maxlen: 24
103.153.10.0/23 maxlen: 24
103.154.35.0/24 maxlen: 24
103.154.204.0/23 maxlen: 24
103.154.238.0/23 maxlen: 24
103.155.32.0/23 maxlen: 24
103.156.170.0/23 maxlen: 24
103.163.232.0/23 maxlen: 24
103.180.223.0/24 maxlen: 24
103.207.0.0/22 maxlen: 24
103.213.1.0/24 maxlen: 24
103.213.2.0/23 maxlen: 24
103.231.116.0/22 maxlen: 24
113.30.168.0/22 maxlen: 24
210.16.84.0/22 maxlen: 24
2404:d940::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25301 (0x62d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 10 05:31:40 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bcf83b-b420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:42:7c:2b:e3:44:2f:53:92:b1:9e:79:1e:
94:bc:e2:bf:50:dc:19:06:fd:c7:2f:01:7d:4e:2f:
eb:96:70:67:24:d1:a8:82:1e:23:a6:8b:46:83:5d:
c2:12:05:eb:ee:b5:78:b2:20:a5:21:f6:30:e8:1c:
fd:9e:8a:f7:ad:19:0d:e6:f7:ca:88:ea:a2:33:84:
dd:ee:1a:b6:62:c9:9d:d9:1e:db:86:1c:a2:07:ad:
d4:1e:d9:82:cb:8d:ea:54:fb:27:4a:e2:4a:68:44:
25:1a:cb:f5:61:c2:01:80:a8:a7:6a:72:8a:fa:a3:
a9:ad:a0:a2:b6:99:6f:89:a3:47:d6:02:88:6e:5b:
f0:31:a2:58:6d:52:df:41:fd:80:dd:a9:8d:ed:53:
63:f0:03:d4:c6:db:19:df:f3:86:3e:c3:4a:a2:c7:
8e:10:bb:90:a5:c8:99:55:e2:c2:1f:b3:5b:51:82:
ff:f9:4e:e8:aa:db:7e:65:f9:6b:f5:85:93:63:19:
5f:5c:3a:9c:49:b0:3c:ba:57:e5:46:b1:29:1e:84:
6d:0b:41:09:eb:bb:e5:a6:c8:53:5b:91:5e:e3:1f:
95:94:b7:a5:7b:ab:30:f6:7b:93:10:c7:09:a1:3d:
eb:da:8b:48:55:de:a5:c2:a3:c9:d3:5a:4f:74:56:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:04:02:32:EB:07:59:6E:F5:7D:C6:07:89:F8:08:47:6B:AA:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E8E2FDE90A811EDA8F5FF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.236.0/22
103.124.152.0/23
103.143.108.0/24
103.148.33.0/24
103.153.10.0/23
103.154.35.0/24
103.154.204.0/23
103.154.238.0/23
103.155.32.0/23
103.156.170.0/23
103.163.232.0/23
103.180.223.0/24
103.207.0.0/22
103.213.1.0-103.213.3.255
103.231.116.0/22
113.30.168.0/22
210.16.84.0/22
IPv6:
2404:d940::/32
Signature Algorithm: sha256WithRSAEncryption
5c:47:61:72:0d:ce:75:ff:a9:ee:87:cd:25:71:37:88:23:0d:
b4:10:6a:d9:c5:4e:b1:78:a7:52:0d:5e:f7:d7:fe:23:c8:c6:
2c:89:c4:52:5c:58:13:3a:27:d8:1e:45:82:55:21:4f:ef:3d:
26:61:80:4b:5b:7b:9b:f6:1a:39:d8:79:76:43:da:bc:69:0b:
1a:4d:eb:cf:65:61:e2:3c:63:b4:6e:6f:5f:bf:86:7e:c4:db:
d3:2e:90:39:f0:c7:b8:55:d5:96:14:ec:8c:73:8f:dc:49:63:
bc:33:71:58:87:85:d1:65:3d:43:75:b4:fb:3a:16:f1:1f:08:
08:ef:a6:93:45:23:b0:f7:a1:46:30:cf:8d:f3:74:4d:8f:c7:
2c:f2:04:d6:d2:65:1f:56:3b:ad:55:bd:0e:37:3a:86:a7:d3:
b2:16:3a:33:f5:08:9d:f2:c5:24:c6:1e:c5:f7:7f:93:99:24:
4a:3a:2c:74:b0:73:d1:5c:5e:cf:f7:68:0e:f3:75:ba:e3:89:
f4:76:01:2b:13:91:59:a3:8b:b8:88:54:dd:62:fe:3f:b5:c0:
2c:e8:f1:05:0a:c3:a9:7b:28:9f:14:a6:11:68:fc:0f:69:ec:
0f:40:9a:09:ba:1b:75:1b:ff:09:25:31:b8:f0:24:ef:93:cd:
11:ba:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org