Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F57601EEAF611ECAF83E75AC4F9AE02.roa
File: 0F57601EEAF611ECAF83E75AC4F9AE02.roa (raw, json)
Hash identifier: le3K1I9SsnggcO6b0jqqwnSNK/XamLh+3jVlSxWiPjI=
Subject key identifier: AE:1B:91:4B:D7:2C:CC:7B:77:C1:52:A5:E8:B4:E3:A1:BC:D3:AB:D8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 60C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F57601EEAF611ECAF83E75AC4F9AE02.roa
Signing time: Mon 28 Nov 2022 06:41:39 +0000
ROA not before: Mon 28 Nov 2022 06:41:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45954
IP address blocks: 43.254.176.0/24 maxlen: 24
103.7.80.0/22 maxlen: 24
103.235.68.0/24 maxlen: 24
103.235.69.0/24 maxlen: 24
103.235.70.0/24 maxlen: 24
103.235.71.0/24 maxlen: 24
150.107.100.0/22 maxlen: 22
150.107.100.0/22 maxlen: 23
150.107.101.0/24 maxlen: 24
150.107.102.0/23 maxlen: 24
180.150.240.0/22 maxlen: 24
223.255.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24769 (0x60c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 28 06:41:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63845822-92b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:5b:45:a3:66:b6:62:ba:5b:a1:2b:9f:58:
41:b9:21:ef:91:d3:7e:11:18:05:2b:c3:86:15:e2:
54:6b:79:32:0c:0f:d1:d4:87:b5:06:dc:45:28:a9:
55:bc:0a:5d:4c:29:5a:24:2b:1d:13:98:ec:46:d3:
9a:d9:8d:4c:d4:9b:67:16:f6:db:e4:af:08:29:0e:
4e:d9:c8:4b:5f:6b:f0:8f:5a:1b:8b:38:97:2a:83:
4a:6b:ce:73:fb:c8:8c:ab:2d:b7:83:e2:a0:df:b1:
4f:6f:1f:8a:49:4e:c0:50:40:c8:7f:45:be:b9:32:
2b:5c:ab:b1:09:37:48:76:c7:27:b3:5a:3e:cf:32:
e9:c5:6a:27:1c:60:ae:54:9b:5f:14:84:bb:cf:39:
f4:15:9a:5c:dc:b4:cd:c2:41:ad:9f:be:7e:82:c3:
f0:89:97:49:ae:2c:52:4b:ba:89:9f:27:e4:a5:b8:
3d:38:2e:3b:ee:b5:e8:7d:32:9c:ad:3e:d7:14:6e:
ae:04:33:ba:57:00:5e:4d:b4:1b:7a:82:e1:46:27:
23:90:5b:fa:c0:22:71:18:88:a9:e2:89:60:cf:a6:
5a:fd:ea:da:23:55:fb:06:71:a7:74:d3:81:12:4c:
a2:1a:f9:f9:37:93:5f:13:82:28:81:90:78:a9:78:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:91:4B:D7:2C:CC:7B:77:C1:52:A5:E8:B4:E3:A1:BC:D3:AB:D8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F57601EEAF611ECAF83E75AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.176.0/24
103.7.80.0/22
103.235.68.0/22
150.107.100.0/22
180.150.240.0/22
223.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:c0:49:dd:80:ba:1a:36:88:9f:99:09:20:17:c3:b3:d7:8f:
20:94:d4:3d:d8:90:68:61:94:66:5f:da:62:64:33:e4:37:b4:
6f:4e:ac:e4:bb:54:6e:87:6a:08:6f:c7:4b:df:88:de:36:1a:
0c:6a:69:82:8a:cb:d1:92:7f:f6:1f:8e:04:64:f0:8f:d0:ac:
13:6b:4f:35:b7:ac:37:fa:da:cd:2a:38:ca:49:86:7c:8b:42:
17:3f:16:61:d7:53:9e:d8:a5:c6:71:37:cd:e4:eb:60:ab:73:
e9:82:88:08:63:22:4b:78:7b:4b:9a:37:7a:87:9f:53:1f:4b:
a6:62:c7:22:b1:28:32:1b:bf:f1:e1:16:2b:3a:31:c7:fa:47:
b4:b7:f4:6e:7f:19:40:7a:e3:5d:46:b0:31:b9:2f:43:b1:ee:
d0:1c:4e:f7:e1:70:4b:88:a2:bc:81:21:e7:ab:16:c2:44:fb:
77:c5:bd:ab:46:f8:a0:3e:7c:3b:fd:ac:bf:44:d8:35:a0:73:
ea:ba:60:b2:8f:87:87:36:39:bb:b0:ba:eb:2b:eb:ba:a5:86:
3e:ab:0a:97:57:8f:dc:1e:75:33:1e:9b:91:43:9b:da:5a:43:
5c:b5:ab:1e:0d:a5:dd:5f:cb:2d:a5:2f:8b:53:eb:98:f1:a9:
4e:46:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org