Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442026AAC09911ECB9687037C4F9AE02.roa
File: 442026AAC09911ECB9687037C4F9AE02.roa (raw, json)
Hash identifier: 6f311o4Uus0ywyXNgWKKYYXlv2IXd14qYxgWTk28vGc=
Subject key identifier: BE:AE:0B:79:9E:97:B2:27:07:1B:59:0C:24:E7:86:4E:A0:F0:79:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5B9D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442026AAC09911ECB9687037C4F9AE02.roa
Signing time: Thu 18 Aug 2022 09:51:38 +0000
ROA not before: Thu 18 Aug 2022 09:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137127
IP address blocks: 103.102.28.0/22 maxlen: 24
103.109.136.0/24 maxlen: 24
103.109.137.0/24 maxlen: 24
103.109.138.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
103.112.121.0/24 maxlen: 24
103.124.109.0/24 maxlen: 24
103.144.64.0/23 maxlen: 24
103.147.120.0/24 maxlen: 24
103.147.121.0/24 maxlen: 24
103.148.62.0/24 maxlen: 24
103.148.63.0/24 maxlen: 24
103.167.130.0/23 maxlen: 24
103.168.248.0/23 maxlen: 24
103.171.200.0/23 maxlen: 24
103.174.34.0/23 maxlen: 24
103.183.24.0/24 maxlen: 24
103.190.14.0/24 maxlen: 24
103.190.15.0/24 maxlen: 24
103.220.32.0/24 maxlen: 24
103.220.34.0/24 maxlen: 24
137.59.99.0/24 maxlen: 24
2001:df0:82c0::/48 maxlen: 48
2001:df0:e140::/48 maxlen: 48
2001:df1:25c0::/48 maxlen: 48
2400:9820::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23453 (0x5b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 18 09:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fe0ba9-9b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:e4:84:d9:b8:78:c1:b4:46:9a:0e:e3:12:
73:29:49:68:e3:08:16:12:dd:d8:cb:03:20:f3:30:
54:79:55:04:72:6b:9e:04:03:26:18:2a:cf:5b:3f:
58:d3:f6:d2:ad:e1:09:ac:33:59:f9:a2:0a:55:6c:
b5:ba:86:81:29:77:5a:bf:bb:97:60:4d:15:03:23:
c3:94:1b:80:44:db:4c:cf:bd:68:59:a3:a8:e8:a2:
70:2f:24:00:2c:23:55:3d:95:59:01:82:05:83:08:
8e:88:2a:2e:b9:7c:e8:c8:67:12:32:80:a8:39:eb:
0f:dc:69:87:06:94:03:da:01:aa:03:e8:8e:44:83:
1c:53:f6:48:55:c7:37:b6:02:31:65:c0:36:25:4b:
fb:fe:30:c6:e3:ee:9c:1a:f1:59:35:2c:f4:22:45:
35:2b:de:8b:12:d1:83:2e:fe:22:e3:51:7d:a3:93:
57:38:6f:17:f6:d0:78:45:76:5d:05:93:23:88:3d:
94:fe:6d:16:94:15:f9:62:39:36:f3:a3:03:02:fd:
39:2f:5b:64:9b:8f:9d:43:fa:65:1b:7b:34:f8:fc:
f7:4a:24:9f:80:e7:be:cc:d5:81:32:f2:59:8c:75:
77:19:12:ea:93:f1:34:29:a5:dd:f2:43:d9:2c:41:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:0B:79:9E:97:B2:27:07:1B:59:0C:24:E7:86:4E:A0:F0:79:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442026AAC09911ECB9687037C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.28.0/22
103.109.136.0/22
103.112.121.0/24
103.124.109.0/24
103.144.64.0/23
103.147.120.0/23
103.148.62.0/23
103.167.130.0/23
103.168.248.0/23
103.171.200.0/23
103.174.34.0/23
103.183.24.0/24
103.190.14.0/23
103.220.32.0/24
103.220.34.0/24
137.59.99.0/24
IPv6:
2001:df0:82c0::/48
2001:df0:e140::/48
2001:df1:25c0::/48
2400:9820::/32
Signature Algorithm: sha256WithRSAEncryption
70:a7:aa:a0:79:ec:95:48:7d:22:29:1f:16:36:50:61:1f:5d:
cb:c5:3b:78:ca:21:f5:a4:26:d7:ab:8c:98:00:27:02:b8:d6:
c4:4c:7f:8c:3c:94:88:5b:5c:d3:ee:06:ae:fc:22:e1:8b:f8:
28:ed:cc:89:36:63:a5:9e:31:94:42:82:d9:e8:5c:c9:12:28:
24:2d:9a:77:02:c3:d9:aa:3b:7b:a4:31:2c:dc:68:4b:95:e4:
6c:dc:de:40:39:4e:c9:99:d8:3f:46:0c:60:21:60:29:50:56:
6d:19:9c:81:46:41:56:f6:e3:35:72:ca:ab:ae:af:9b:75:cc:
f1:95:9e:1c:8d:2a:c2:53:1a:85:64:a8:e0:05:f1:c5:e0:c9:
9b:6e:ef:ec:1b:04:4c:9f:9d:e9:4e:db:db:9c:9e:45:c8:d0:
aa:8a:1c:3f:dc:40:1f:97:5e:c4:3c:84:e1:93:73:c9:90:34:
42:e9:f0:75:48:02:7b:57:c4:50:5b:ad:4e:fe:49:61:cb:61:
be:0a:89:af:13:9c:c4:3f:55:7d:ed:96:67:3c:f3:6f:9a:cc:
7f:13:76:ce:ac:c3:44:39:30:e1:4e:8d:20:58:20:05:5c:56:
6f:78:0a:63:78:3f:ce:0d:e8:3b:2b:f4:9b:4e:e7:dc:86:8c:
8d:e4:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org