Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25446C10B1C911ED82F6711FC4F9AE02.roa
File: 25446C10B1C911ED82F6711FC4F9AE02.roa (raw, json)
Hash identifier: BKtodf3wLJd1Qi6Eo7AwAGbM5gY3khXs+Jn/6ExN8AA=
Subject key identifier: EE:D2:30:AB:98:5C:E6:78:4A:42:A0:E8:43:11:0B:DC:58:C8:5F:A0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 655F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25446C10B1C911ED82F6711FC4F9AE02.roa
Signing time: Tue 21 Feb 2023 09:21:39 +0000
ROA not before: Tue 21 Feb 2023 09:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134033
IP address blocks: 43.241.64.0/24 maxlen: 24
43.241.65.0/24 maxlen: 24
43.241.66.0/24 maxlen: 24
43.241.120.0/24 maxlen: 24
43.241.121.0/24 maxlen: 24
43.241.122.0/24 maxlen: 24
43.241.123.0/24 maxlen: 24
45.117.64.0/22 maxlen: 24
103.57.132.0/24 maxlen: 24
103.57.133.0/24 maxlen: 24
103.57.134.0/24 maxlen: 24
103.172.210.0/24 maxlen: 24
103.172.211.0/24 maxlen: 24
103.224.155.0/24 maxlen: 24
103.224.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25951 (0x655f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 21 09:21:39 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63f48d23-80d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:9f:f7:34:f0:3e:b4:c5:d5:23:08:e7:67:
c4:42:99:c9:5e:d4:a4:89:5d:67:32:fe:86:7b:55:
83:42:d4:2a:38:8d:22:84:3b:5a:63:4a:5b:72:34:
43:2f:e5:69:9f:0b:51:90:5e:1c:24:20:8a:92:16:
9b:a2:e8:05:60:62:b7:1e:f9:ff:fa:5b:9f:38:de:
d8:62:f0:32:05:a0:b7:b2:a5:5a:ee:ef:df:a8:33:
62:cc:06:f1:a5:78:00:0d:c1:f2:83:95:eb:8b:55:
a7:35:99:e8:a0:6f:5c:34:a8:20:3c:6b:fc:5a:74:
12:53:c3:3f:f0:f5:bb:9c:7e:ca:3e:e5:72:06:4c:
63:a1:e2:96:5e:ce:59:25:26:01:b6:4d:fb:a8:19:
71:c3:9f:0a:60:b7:1b:93:ea:a7:f6:40:ff:9b:a0:
cf:5b:be:13:88:8c:e6:b5:84:34:11:3f:88:66:40:
c6:90:83:61:23:45:5b:15:7e:ac:5c:0f:30:0b:70:
79:40:14:b5:d2:99:15:51:f9:bf:45:39:33:8f:12:
7e:57:35:79:c7:92:b3:a9:24:89:85:fd:b7:20:c6:
8c:29:9d:8f:df:ab:43:91:c6:0a:dd:a4:1f:91:94:
b1:b8:ea:7c:9a:67:ff:d1:1b:15:55:a5:b8:a2:78:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:30:AB:98:5C:E6:78:4A:42:A0:E8:43:11:0B:DC:58:C8:5F:A0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25446C10B1C911ED82F6711FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.64.0-43.241.66.255
43.241.120.0/22
45.117.64.0/22
103.57.132.0-103.57.134.255
103.172.210.0/23
103.224.155.0-103.224.159.255
Signature Algorithm: sha256WithRSAEncryption
b5:2e:08:3b:44:e6:c6:1d:6e:1c:67:2c:df:99:fb:f5:97:89:
25:54:8d:35:dd:b9:bd:66:1c:70:17:ad:af:ca:87:e5:a4:f9:
13:22:6c:eb:10:a7:1f:42:3a:ed:20:1b:f2:27:83:73:4e:4c:
e6:22:0c:1f:66:ff:26:f3:32:d6:5f:3c:a1:a8:78:7a:d9:5b:
81:4e:cd:32:2a:65:58:a7:eb:a7:ae:dc:a6:90:e5:1c:1a:2c:
3a:8b:6d:ef:f0:fa:df:9f:0f:9c:c5:cf:57:ae:2b:13:bf:d0:
86:a7:f6:3d:d8:e1:55:60:6d:99:4f:df:ba:66:bc:d6:df:9b:
1b:c0:83:6c:8e:f7:ae:30:ea:a0:d8:ca:da:57:0d:17:ff:0a:
1e:4d:89:5b:50:56:41:22:00:26:ca:72:1b:54:4d:8c:5d:44:
63:65:b2:17:9d:4a:9d:b6:48:9b:56:68:a2:3c:ba:b0:c2:eb:
c4:f0:1f:a2:31:c7:85:87:4b:25:84:c9:16:59:0a:47:93:e6:
31:f8:ed:dc:00:83:1d:1a:13:06:b2:14:16:01:9b:16:03:fc:
1b:00:95:c1:10:c5:53:a2:c0:db:bc:08:82:95:d1:86:78:9b:
56:b8:40:87:81:8a:41:40:61:44:63:65:cc:18:1a:49:3c:73:
6f:37:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org