Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F32134A5DE11EDA5224061C4F9AE02.roa
File: 20F32134A5DE11EDA5224061C4F9AE02.roa (raw, json)
Hash identifier: +aWK5K6Fdau49WuhhGq32fYGcQoQA37oTH2DU1ilgkk=
Subject key identifier: 0D:31:F5:9A:01:2C:E9:47:04:A5:D3:74:70:D6:D6:74:11:04:59:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6461
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F32134A5DE11EDA5224061C4F9AE02.roa
Signing time: Mon 06 Feb 2023 05:21:37 +0000
ROA not before: Mon 06 Feb 2023 05:21:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132770
IP address blocks: 43.227.20.0/22 maxlen: 24
43.228.72.0/22 maxlen: 24
43.241.24.0/22 maxlen: 24
45.119.57.0/24 maxlen: 24
45.119.58.0/24 maxlen: 24
45.119.59.0/24 maxlen: 24
45.252.72.0/22 maxlen: 24
103.59.104.0/24 maxlen: 24
103.81.36.0/22 maxlen: 24
103.93.240.0/24 maxlen: 24
103.93.241.0/24 maxlen: 24
103.93.242.0/24 maxlen: 24
103.93.243.0/24 maxlen: 24
103.94.56.0/22 maxlen: 23
103.94.57.0/24 maxlen: 24
103.94.58.0/23 maxlen: 24
103.178.206.0/24 maxlen: 24
103.178.207.0/24 maxlen: 24
103.184.86.0/24 maxlen: 24
103.184.87.0/24 maxlen: 24
103.204.36.0/22 maxlen: 24
103.211.60.0/24 maxlen: 24
103.211.61.0/24 maxlen: 24
103.211.62.0/24 maxlen: 24
103.211.63.0/24 maxlen: 24
103.221.72.0/22 maxlen: 24
103.239.84.0/22 maxlen: 24
103.241.80.0/22 maxlen: 24
103.243.112.0/22 maxlen: 24
103.249.240.0/22 maxlen: 24
103.251.208.0/22 maxlen: 24
103.254.52.0/22 maxlen: 24
150.129.128.0/22 maxlen: 24
150.129.156.0/22 maxlen: 24
163.53.200.0/22 maxlen: 24
202.136.68.0/22 maxlen: 24
2404:4980::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25697 (0x6461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 6 05:21:37 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e08e61-cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:80:8b:7f:c8:0b:49:dd:be:fb:f8:ff:c6:
17:c4:3a:65:37:fc:10:59:f7:de:3e:53:2f:fd:b3:
69:26:ac:3f:ab:b4:37:70:d3:a9:93:24:d0:31:a8:
1f:86:fe:f9:91:f3:aa:f0:fc:a4:9f:34:2c:14:11:
b1:18:33:89:82:87:5b:b4:0c:0a:1d:29:10:6b:c8:
d0:e0:9b:7d:6e:67:ad:a3:7f:e5:f7:e9:df:1a:a5:
52:42:44:43:d4:f8:2e:36:c1:94:bc:25:ac:f9:fc:
48:f0:b3:4d:fd:9d:31:eb:0a:43:e2:51:8a:ec:05:
fa:31:d1:0d:98:23:f5:96:bd:8e:8d:ae:38:da:82:
6a:d6:72:ad:6f:f6:10:5b:0f:d0:48:cb:a7:17:81:
49:1d:00:1a:03:2b:ed:96:d0:03:d9:43:14:32:55:
d6:51:0b:4a:68:b7:89:44:0a:b3:2a:7c:07:74:03:
d0:9e:0b:94:03:d2:92:02:36:61:ae:b5:b3:47:b7:
66:80:6d:69:f9:bb:de:3b:15:de:2f:15:95:fd:08:
bb:b6:51:ad:82:0f:ca:59:50:8f:8e:6f:b5:f1:c6:
12:91:9e:32:a2:c5:95:37:ea:c8:c9:7f:a5:63:4d:
3a:f6:f6:37:1d:0f:7f:50:64:c1:29:8e:6a:b6:b2:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:F5:9A:01:2C:E9:47:04:A5:D3:74:70:D6:D6:74:11:04:59:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F32134A5DE11EDA5224061C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.20.0/22
43.228.72.0/22
43.241.24.0/22
45.119.57.0-45.119.59.255
45.252.72.0/22
103.59.104.0/24
103.81.36.0/22
103.93.240.0/22
103.94.56.0/22
103.178.206.0/23
103.184.86.0/23
103.204.36.0/22
103.211.60.0/22
103.221.72.0/22
103.239.84.0/22
103.241.80.0/22
103.243.112.0/22
103.249.240.0/22
103.251.208.0/22
103.254.52.0/22
150.129.128.0/22
150.129.156.0/22
163.53.200.0/22
202.136.68.0/22
IPv6:
2404:4980::/32
Signature Algorithm: sha256WithRSAEncryption
10:5a:56:68:79:f6:30:88:35:4b:12:c3:b6:b6:2a:90:4a:e8:
a5:34:d0:ca:1e:67:a0:7a:e8:eb:62:da:1d:4f:06:e8:e6:54:
22:bd:22:5d:3c:04:0b:89:27:e0:7b:65:63:55:13:52:f7:65:
0c:7a:34:8c:95:62:01:91:2b:28:a0:b9:3e:a5:a9:de:b0:db:
41:7f:40:f9:33:18:02:73:17:ba:0f:51:1c:3c:6e:16:12:f3:
64:97:11:e2:fb:67:8f:38:16:8f:2e:88:da:7a:79:b6:37:48:
cf:6f:63:53:e1:86:b9:69:15:1e:cd:4e:f9:5e:91:9f:a8:b2:
5d:d9:30:af:0e:97:3f:28:c7:bf:0b:d3:6b:47:54:76:03:e0:
8e:a3:f3:5c:f0:4b:5b:5b:39:e5:f0:f4:a7:51:a6:5d:36:7c:
35:ac:17:e2:21:65:f0:66:12:b6:fb:72:70:f5:11:de:c3:80:
52:71:6e:07:77:4a:2b:42:67:27:fc:1d:66:a1:ba:14:65:b9:
12:53:f8:0c:00:f3:21:ec:80:94:8e:9c:c6:07:20:41:4c:1d:
1a:06:92:f4:07:88:f6:e8:2f:40:4e:12:93:ca:b2:20:2a:1c:
b2:5d:8f:15:22:82:d9:d1:29:84:fe:ea:72:d8:2a:ee:42:df:
82:55:35:d4
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgICZGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwMjA2MDUyMTM3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2UwOGU2MS1jZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzd+Ai3/IC0ndvvv4/8YXxDplN/wQWffePlMv/bNpJqw/q7Q3cNOpkyTQMagf
hv75kfOq8PyknzQsFBGxGDOJgodbtAwKHSkQa8jQ4Jt9bmeto3/l9+nfGqVSQkRD
1PguNsGUvCWs+fxI8LNN/Z0x6wpD4lGK7AX6MdENmCP1lr2Oja442oJq1nKtb/YQ
Ww/QSMunF4FJHQAaAyvtltAD2UMUMlXWUQtKaLeJRAqzKnwHdAPQnguUA9KSAjZh
rrWzR7dmgG1p+bveOxXeLxWV/Qi7tlGtgg/KWVCPjm+18cYSkZ4yosWVN+rIyX+l
Y0069vY3HQ9/UGTBKY5qtrLyiQIDAQABo4IDOzCCAzcwHQYDVR0OBBYEFA0x9ZoB
LOlHBKXTdHDW1nQRBFlHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjBGMzIxMzRB
NURFMTFFREE1MjI0MDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcQGCCsGAQUFBwEHAQH/
BIG0MIGxMIGfBAIAATCBmAMEAivjFAMEAivkSAMEAivxGDAMAwQALXc5AwQCLXc4
AwQCLfxIAwQAZztoAwQCZ1EkAwQCZ13wAwQCZ144AwQBZ7LOAwQBZ7hWAwQCZ8wk
AwQCZ9M8AwQCZ91IAwQCZ+9UAwQCZ/FQAwQCZ/NwAwQCZ/nwAwQCZ/vQAwQCZ/40
AwQCloGAAwQCloGcAwQCozXIAwQCyohEMA0EAgACMAcDBQAkBEmAMA0GCSqGSIb3
DQEBCwUAA4IBAQAQWlZoefYwiDVLEsO2tiqQSuilNNDKHmegeujrYtodTwbo5lQi
vSJdPAQLiSfge2VjVRNS92UMejSMlWIBkSsooLk+panesNtBf0D5MxgCcxe6D1Ec
PG4WEvNklxHi+2ePOBaPLojaenm2N0jPb2NT4Ya5aRUezU75XpGfqLJd2TCvDpc/
KMe/C9NrR1R2A+COo/Nc8EtbWznl8PSnUaZdNnw1rBfiIWXwZhK2+3Jw9RHew4BS
cW4Hd0orQmcn/B1moboUZbkSU/gMAPMh7ICUjpzGByBBTB0aBpL0B4j26C9AThKT
yrIgKhyyXY8VIoLZ0SmE/upy2CruQt+CVTXU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org