Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6BCA42AF2E11EC8FBD733FC4F9AE02.roa
File: 1B6BCA42AF2E11EC8FBD733FC4F9AE02.roa (raw, json)
Hash identifier: YoKAc7XRXVKlG7cGBeuj2wS120SNPQln4Jq+PaQarOQ=
Subject key identifier: 60:AF:95:CA:6D:CE:0F:9B:31:2B:76:0A:DE:55:29:94:80:DF:CD:DA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4DA0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6BCA42AF2E11EC8FBD733FC4F9AE02.roa
Signing time: Thu 05 May 2022 09:41:30 +0000
ROA not before: Thu 05 May 2022 09:41:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 140125
IP address blocks: 103.82.48.0/22 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.163.14.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.194.118.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.229.208.0/22 maxlen: 24
103.252.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19872 (0x4da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 5 09:41:30 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=62739bca-46b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:d5:1d:04:89:61:f6:5c:d3:87:2d:dc:f2:
67:18:a6:8b:fe:88:b6:a4:e1:5f:31:6d:bc:d1:92:
34:ab:79:06:54:c9:eb:49:33:57:8a:e7:3d:28:e3:
dd:80:b5:eb:7b:76:9c:d1:64:98:e9:01:da:58:a2:
f9:62:ee:72:3b:6a:db:c7:7f:34:7a:8f:33:55:be:
56:06:31:d4:60:a3:c7:2c:eb:0f:1a:88:c0:24:b8:
eb:7c:e8:21:64:c5:b1:5d:41:a7:ff:db:cf:cb:35:
1e:8d:97:3d:20:b2:5c:ea:31:e6:53:8a:65:4b:b7:
e9:a4:cb:1a:d6:f2:e7:73:1c:46:46:9b:0d:73:23:
33:f3:ea:69:ca:d5:1b:5e:b8:ef:57:0a:ec:b2:e9:
86:ac:93:dc:dc:d6:e3:20:ca:ef:9e:4b:68:4d:c0:
9a:80:1f:a3:8e:b5:3a:d4:e7:a9:67:bd:90:b1:cb:
50:b9:dc:70:84:09:d8:88:04:d4:85:7f:a5:db:ff:
5b:d4:ae:ab:06:9d:1a:24:e6:d7:ef:04:71:df:cd:
9a:25:75:e1:47:fe:0e:90:81:78:ff:c4:36:ea:a2:
9d:82:47:bb:24:4d:11:ef:d8:83:34:5a:69:c0:25:
3a:c3:3b:dc:48:48:c4:0f:ad:ab:8d:a4:54:bb:e9:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:95:CA:6D:CE:0F:9B:31:2B:76:0A:DE:55:29:94:80:DF:CD:DA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6BCA42AF2E11EC8FBD733FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.48.0/22
103.114.64.0/22
103.163.14.0/23
103.167.212.0/23
103.167.224.0/23
103.168.0.0/23
103.168.32.0/23
103.168.60.0/23
103.170.36.0/22
103.170.148.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.178.166.0/23
103.178.202.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.194.118.0/24
103.212.134.0/24
103.229.208.0/22
103.252.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:60:5f:ea:c5:5c:aa:f3:13:54:93:55:68:0e:9e:a0:f2:eb:
39:d1:fb:60:44:5f:6c:f8:b6:b9:fa:d4:bc:79:85:96:2a:8b:
da:f2:29:6f:83:8d:30:69:39:24:9b:e7:c1:bb:2f:4a:a2:f2:
4d:16:e4:3c:60:de:ca:2b:43:3d:a2:b0:2a:d9:57:43:ae:11:
20:50:45:71:5a:d1:d1:24:ed:a9:5f:52:fa:c5:7e:96:3a:db:
49:e7:03:c3:e7:4a:09:50:18:bd:0e:41:06:51:c0:cc:16:72:
be:90:a2:99:29:4f:81:dc:bb:52:cf:15:56:50:da:8c:6b:db:
83:a3:47:82:3e:66:4e:2f:3f:6a:f1:b1:10:ab:bc:ab:80:05:
de:cd:b4:9a:a6:21:83:38:73:a1:b7:d6:87:dd:b8:9b:07:17:
f1:74:f6:75:cf:06:c0:89:0c:59:c9:d4:46:57:1e:7b:b7:e8:
fc:7a:19:9e:49:ad:a0:40:9c:80:48:95:cb:97:2c:a9:60:9d:
14:54:59:0b:08:0b:8b:f4:0b:95:e8:30:12:28:fe:c5:de:f3:
a8:b3:00:5d:bb:8b:d4:52:a3:55:b6:47:de:40:6a:54:57:9d:
f5:ae:1b:81:b1:40:fe:e5:4a:b5:a6:f3:75:74:71:0c:0c:b2:
63:a3:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org