Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47C58232782811EC9431C336C4F9AE02.roa
File: 47C58232782811EC9431C336C4F9AE02.roa (raw, json)
Hash identifier: /wnoWKXlOUZhitxUth6Tx6y/bJyHlJM0z4C0Hif8xrQ=
Subject key identifier: B4:15:BC:A2:06:B4:38:20:78:44:D2:B2:51:F3:69:C1:37:82:C7:DA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4EEF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47C58232782811EC9431C336C4F9AE02.roa
Signing time: Mon 16 May 2022 04:03:37 +0000
ROA not before: Mon 16 May 2022 04:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132972
IP address blocks: 103.137.218.0/24 maxlen: 24
103.139.232.0/24 maxlen: 24
103.147.128.0/24 maxlen: 24
103.163.60.0/24 maxlen: 24
103.163.126.0/23 maxlen: 24
103.175.10.0/24 maxlen: 24
103.175.11.0/24 maxlen: 24
2001:df0:9980::/48 maxlen: 48
2001:df6:1780::/48 maxlen: 48
2001:df7:e280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20207 (0x4eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cd18-709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:43:98:79:ee:80:37:b6:6d:22:c6:b1:55:
b7:56:a6:97:d6:f9:67:15:c2:7d:51:58:36:08:9f:
ba:ae:4f:cb:89:1a:31:28:ff:6c:7e:7a:37:09:57:
7a:f6:bb:7f:d4:be:e1:1b:0d:5a:14:43:9e:09:e8:
0c:6e:d7:c6:be:ec:72:5e:f8:ae:dd:51:2f:0e:2f:
4f:93:0f:55:c0:19:a0:93:46:cd:cc:a4:70:13:07:
56:d5:e4:b0:26:3d:a0:b4:cc:e6:b3:6c:a2:b5:83:
8e:18:5b:ab:81:d8:1b:6f:d6:98:81:19:b2:fc:23:
3a:1c:35:ee:8a:43:ce:2e:83:cb:0a:da:42:2f:13:
d9:2f:a2:51:4a:01:de:5b:a1:e3:e9:c1:3e:b8:ba:
87:3e:a5:d0:34:83:e2:90:2c:56:54:be:5b:e9:35:
05:14:c8:31:d9:5f:e2:57:fa:57:65:3e:43:13:7e:
de:0c:5a:55:17:8f:62:dd:76:2b:4d:56:2e:57:e6:
e4:4a:d6:9b:64:84:a3:02:af:78:16:c0:63:12:c0:
d7:ef:bf:74:d3:5c:c9:9d:ba:b2:a6:bb:1d:2d:3f:
eb:73:6e:bc:37:87:81:9d:ba:b7:07:ca:c6:4e:3a:
a5:3f:70:0e:21:4f:00:1a:b7:cf:a0:0e:5b:0f:16:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:BC:A2:06:B4:38:20:78:44:D2:B2:51:F3:69:C1:37:82:C7:DA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47C58232782811EC9431C336C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.218.0/24
103.139.232.0/24
103.147.128.0/24
103.163.60.0/24
103.163.126.0/23
103.175.10.0/23
IPv6:
2001:df0:9980::/48
2001:df6:1780::/48
2001:df7:e280::/48
Signature Algorithm: sha256WithRSAEncryption
4a:68:2f:a7:32:ca:6c:a5:9e:46:9c:67:33:fd:ef:7d:33:15:
e4:db:37:40:ee:95:c1:a3:7d:bf:79:73:d5:10:72:71:41:1c:
dd:3a:e8:29:88:11:2b:ae:d8:97:eb:e3:c2:45:87:da:f6:ee:
27:da:7e:c0:6c:cd:8a:cd:a6:34:49:be:de:36:18:68:f9:c8:
8a:38:dc:a1:56:83:f5:0e:4e:7d:8f:51:ae:bf:da:fc:7f:1e:
c1:38:11:34:8d:bf:1f:9f:61:6e:1b:f4:37:c5:11:b4:89:53:
4c:42:b6:c4:e8:e1:ed:31:be:7e:b7:24:39:63:c9:fb:e5:5e:
29:2a:73:13:ed:72:ce:e5:72:a0:3e:ff:e8:9e:f2:16:6a:82:
54:8a:22:26:10:89:55:8b:e1:0a:5b:33:f2:31:d6:97:cb:79:
d1:b5:97:17:5e:e5:8d:a3:f6:52:32:52:d3:14:61:8f:1a:61:
5c:81:43:a1:32:e3:e1:a6:f8:38:2d:5c:21:98:2a:e3:65:aa:
77:a1:15:5c:2c:a9:db:b3:81:e0:8d:eb:e5:e4:87:8c:3a:b7:
08:a0:63:9c:79:26:b2:86:1f:7c:99:c4:4e:0a:27:6e:91:04:
11:f0:e8:95:60:7d:0d:84:cf:ea:75:88:8b:33:d7:16:6a:b3:
0e:76:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-ams.rpki-client.org