Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/360C8E788F2011ECACEDAE84C4F9AE02.roa
File: 360C8E788F2011ECACEDAE84C4F9AE02.roa (raw, json)
Hash identifier: ndNL8A5b5lBoqLRd6BbWMJpyIiMSEJDIkbJfeiP0Tpg=
Subject key identifier: 57:9B:8E:8F:BC:F8:57:73:E2:9D:61:58:A8:A9:53:EE:F4:2E:D5:90
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 48C4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/360C8E788F2011ECACEDAE84C4F9AE02.roa
Signing time: Mon 21 Feb 2022 07:01:39 +0000
ROA not before: Mon 21 Feb 2022 07:01:39 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 58762
IP address blocks: 45.117.180.0/24 maxlen: 24
45.117.181.0/24 maxlen: 24
45.117.182.0/24 maxlen: 24
45.117.183.0/24 maxlen: 24
103.18.72.0/24 maxlen: 24
103.18.73.0/24 maxlen: 24
103.18.74.0/24 maxlen: 24
103.18.75.0/24 maxlen: 24
103.69.12.0/22 maxlen: 24
103.84.184.0/22 maxlen: 24
103.85.16.0/22 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.105.96.0/23 maxlen: 24
103.138.8.0/23 maxlen: 24
103.147.0.0/24 maxlen: 24
103.147.1.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.157.4.0/23 maxlen: 24
103.157.10.0/23 maxlen: 24
103.158.239.0/24 maxlen: 24
103.163.148.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.28.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.170.158.0/23 maxlen: 24
103.225.56.0/22 maxlen: 22
103.225.56.0/24 maxlen: 24
103.225.57.0/24 maxlen: 24
103.225.58.0/24 maxlen: 24
103.225.59.0/24 maxlen: 24
150.129.44.0/24 maxlen: 24
150.129.45.0/24 maxlen: 24
150.129.46.0/24 maxlen: 24
150.129.47.0/24 maxlen: 24
2001:df0:8000::/48 maxlen: 56
2407:c140::/32 maxlen: 38
2407:c140::/36 maxlen: 40
2407:c140:1000::/37 maxlen: 40
2407:c140:1800::/38 maxlen: 40
2407:c140:1c00::/39 maxlen: 40
2407:c140:1e00::/40 maxlen: 40
2407:c140:1f00::/40 maxlen: 40
2407:c140:2000::/35 maxlen: 40
2407:c140:4000::/34 maxlen: 40
2407:c140:8000::/33 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18628 (0x48c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 21 07:01:39 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621338d3-db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:bf:df:57:31:7c:e9:76:a1:0f:68:45:20:
09:16:58:2f:3b:5e:52:9e:d9:20:07:a0:12:9d:6c:
80:e4:eb:80:71:5b:f3:bf:dc:1d:ed:fb:65:c0:ca:
7c:8c:c7:2f:82:12:37:14:69:79:08:12:51:6d:d8:
e3:47:bc:dd:4c:50:a8:30:25:3c:dc:d6:ae:71:b9:
f2:96:74:68:96:58:ee:77:c8:43:d0:75:c1:94:b7:
23:f4:d1:24:55:9f:9c:aa:e7:66:f8:cf:c8:d6:f2:
fa:42:aa:27:b8:78:77:b1:31:cb:f6:24:c7:55:e6:
54:1a:fb:44:9f:98:37:db:38:59:32:53:55:f6:c3:
5f:10:95:0d:44:fb:d8:93:7a:e2:e9:eb:2b:8f:6d:
55:a9:77:02:b6:46:f5:a8:8f:6b:9a:e9:bd:3e:04:
13:c7:28:cc:c5:3a:55:dd:e4:44:27:8a:22:70:ab:
3f:a4:66:c2:68:53:52:9c:4d:ab:06:e9:dc:95:74:
7f:50:df:e3:df:c2:9e:7b:6b:68:82:e5:cb:08:17:
44:0f:a6:ba:eb:5f:27:87:c7:61:73:23:b4:ba:b7:
d4:4f:8a:e8:5b:c9:9f:df:ea:55:e2:f7:36:73:a1:
cf:05:28:9a:fc:3f:35:e4:88:cf:0d:50:d3:a9:f9:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:8E:8F:BC:F8:57:73:E2:9D:61:58:A8:A9:53:EE:F4:2E:D5:90
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/360C8E788F2011ECACEDAE84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.180.0/22
103.18.72.0/22
103.69.12.0/22
103.84.184.0/22
103.85.16.0/22
103.88.56.0/22
103.105.96.0/23
103.138.8.0/23
103.147.0.0/23
103.153.12.0/24
103.157.4.0/23
103.157.10.0/23
103.158.239.0/24
103.163.148.0/23
103.164.46.0/23
103.164.140.0/24
103.165.28.0/23
103.165.102.0/23
103.170.158.0/23
103.225.56.0/22
150.129.44.0/22
IPv6:
2001:df0:8000::/48
2407:c140::/32
Signature Algorithm: sha256WithRSAEncryption
84:cf:16:eb:c1:a9:2f:c8:2b:45:73:0b:2f:88:41:89:9c:15:
91:28:8f:df:4d:10:7f:6f:26:a8:c0:09:12:0e:c5:f2:31:c1:
60:7a:12:e3:5b:47:af:37:87:2e:fd:21:86:7e:d3:1b:fb:3f:
30:8b:b0:3d:eb:12:0a:fe:fc:14:ed:17:85:6a:3d:fb:29:68:
3d:3b:9b:fd:7c:ca:25:ca:74:a5:8e:20:f1:b7:4c:6e:bc:5e:
cf:db:b9:44:39:40:89:4e:16:5b:43:81:79:2e:30:d3:22:ea:
08:2e:55:cb:cc:f2:7d:91:92:4d:79:7d:46:78:d9:66:08:bb:
85:72:e0:8c:5e:6b:69:2c:17:48:b3:65:ae:5f:5d:34:d7:df:
37:5d:d1:a3:a2:ad:fa:2b:f3:fb:f5:8d:5d:9d:f6:ad:fc:26:
e8:ac:dd:52:64:38:f4:3e:46:51:25:ef:9c:20:a8:a3:68:14:
4c:29:25:33:c2:d4:2b:a4:12:c5:62:fb:f1:82:3a:0f:ff:1d:
69:ab:9c:a8:81:49:cd:00:87:8d:78:27:40:ec:d0:d2:3a:44:
22:6d:e1:60:0c:41:82:ee:75:24:04:f3:4a:b9:29:99:81:ab:
92:00:e1:21:a4:01:c6:f7:3c:9f:ab:ff:20:f4:aa:a6:0f:4f:
94:b4:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org