Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26F0DA6EAAAC11EC9866B423C4F9AE02.roa
File: 26F0DA6EAAAC11EC9866B423C4F9AE02.roa (raw, json)
Hash identifier: 7Rbe7ysjnjZVL4bREzlCoE2rfjNrIkYWcZKViVpzBhM=
Subject key identifier: 9C:AD:00:A7:42:F3:35:38:CD:F9:43:99:21:60:1D:30:87:E2:E2:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4B90
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26F0DA6EAAAC11EC9866B423C4F9AE02.roa
Signing time: Wed 06 Apr 2022 05:21:32 +0000
ROA not before: Wed 06 Apr 2022 05:21:32 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.164.141.0/24 maxlen: 24
103.183.233.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2405:e100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19344 (0x4b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 6 05:21:32 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=624d235c-6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:06:14:19:93:ad:ab:7a:fe:61:6b:8a:75:
d3:12:cd:55:b3:82:3d:23:10:e4:8f:c2:d0:c8:c0:
d8:a4:3e:ba:fa:3c:91:7c:b9:fa:5e:0c:e9:59:5f:
4f:fa:4d:c8:37:c1:f5:ba:b5:42:57:f5:f7:af:7b:
ca:1d:cf:7a:e1:70:52:6b:57:2b:34:ec:95:cd:9d:
c9:72:86:b1:f0:f9:00:23:7f:37:1d:ea:fe:8d:5f:
9d:5c:4f:65:03:b6:56:a1:59:5a:d8:70:3f:31:1f:
d2:4a:69:25:ef:8e:7d:b6:1e:2a:02:ff:78:aa:48:
ce:81:08:13:b5:90:19:e1:7f:af:c7:45:02:27:9f:
55:cc:6c:86:81:4d:05:d0:70:9a:9c:7a:9e:bc:99:
52:c8:0e:24:9d:f9:1e:9b:fb:b2:2e:07:eb:7f:c5:
40:8a:34:7e:ff:a4:6f:2a:fe:82:52:94:bd:b8:42:
70:c2:08:b1:8d:9b:d7:c2:f6:ee:85:27:bb:18:9f:
9c:ff:d6:fa:ce:6b:8c:49:87:29:30:be:27:26:5c:
3a:aa:cf:38:02:90:23:e2:3a:9b:33:16:1b:65:e3:
91:c4:39:14:4d:4c:32:cd:44:09:47:3e:80:6c:23:
3a:d8:8b:50:8f:cf:a4:c1:57:a2:13:09:ff:09:b0:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:00:A7:42:F3:35:38:CD:F9:43:99:21:60:1D:30:87:E2:E2:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26F0DA6EAAAC11EC9866B423C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.69.24.0/22
103.70.80.0/22
103.94.83.0/24
103.100.4.0/22
103.164.141.0/24
103.183.233.0/24
103.198.172.0/22
103.217.132.0/22
103.224.144.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
75:db:af:fd:76:52:3f:03:ce:65:80:a4:7f:57:93:f0:0f:fc:
0e:c5:64:9c:6e:ab:62:cf:dd:d5:ea:e2:a5:9c:5c:2b:23:e9:
ee:24:1b:2d:1a:c1:e5:a8:44:0e:de:a4:42:7e:f3:49:2d:18:
bf:2f:76:0e:f9:93:0b:da:26:c8:e8:a2:69:3b:f1:cc:3b:3b:
0b:8c:de:16:c6:95:9c:c6:2e:12:8f:b5:42:c2:d4:a5:87:b8:
d5:8d:b1:a2:f8:df:e9:30:0e:3a:e8:e4:ba:00:f4:69:79:13:
35:5c:c9:0b:ad:df:95:cb:cf:ad:66:dc:16:c5:48:7f:3d:d3:
a2:20:e2:e8:ce:51:ca:67:d0:59:a0:33:6e:31:84:69:47:91:
4b:68:23:bc:d1:10:9b:7b:1a:96:c8:cc:d6:b4:f2:85:e9:2b:
02:73:e0:0c:e1:b6:35:c2:1c:6d:b6:22:fb:ea:a0:69:7b:20:
88:31:ea:d4:a8:19:cb:d1:fe:ff:cd:05:45:0f:4a:1e:00:91:
05:b4:66:e5:1b:44:76:51:dc:04:ca:6c:1a:2e:ce:f3:98:7a:
88:ee:1d:37:e1:c3:5e:b9:13:7c:3d:2f:23:0a:21:a2:b4:15:
d3:a5:4a:83:79:a8:73:22:da:6d:bb:22:65:9d:96:fd:3a:7d:
f0:54:10:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org