Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53CEFB50AD1D11EDB59BCC0BC4F9AE02.roa
File: 53CEFB50AD1D11EDB59BCC0BC4F9AE02.roa (raw, json)
Hash identifier: Mx4E2HgmuCaFDHiC2+EbFiHUjZAftK/7PE1N3a8B/OQ=
Subject key identifier: 0B:2C:D6:55:CA:CC:C0:51:09:2D:33:E8:3F:DC:D0:09:92:07:54:AD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 64F5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53CEFB50AD1D11EDB59BCC0BC4F9AE02.roa
Signing time: Wed 15 Feb 2023 10:41:39 +0000
ROA not before: Wed 15 Feb 2023 10:41:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17754
IP address blocks: 103.48.68.0/23 maxlen: 24
103.48.71.0/24 maxlen: 24
103.55.213.0/24 maxlen: 24
103.105.102.0/24 maxlen: 24
113.11.224.0/22 maxlen: 24
113.11.228.0/22 maxlen: 24
175.101.0.0/16 maxlen: 24
202.133.48.0/24 maxlen: 24
202.133.49.0/24 maxlen: 24
202.133.50.0/24 maxlen: 24
202.133.51.0/24 maxlen: 24
202.133.52.0/24 maxlen: 24
202.133.53.0/24 maxlen: 24
202.133.54.0/24 maxlen: 24
202.133.55.0/24 maxlen: 24
202.133.56.0/24 maxlen: 24
202.133.57.0/24 maxlen: 24
202.133.58.0/24 maxlen: 24
202.133.59.0/24 maxlen: 24
202.133.60.0/24 maxlen: 24
202.133.61.0/24 maxlen: 24
202.133.62.0/24 maxlen: 24
202.133.63.0/24 maxlen: 24
202.153.33.0/24 maxlen: 24
202.153.34.0/24 maxlen: 24
202.153.35.0/24 maxlen: 24
202.153.36.0/24 maxlen: 24
202.153.37.0/24 maxlen: 24
202.153.38.0/24 maxlen: 24
202.153.39.0/24 maxlen: 24
202.153.40.0/24 maxlen: 24
202.153.41.0/24 maxlen: 24
202.153.42.0/24 maxlen: 24
202.153.43.0/24 maxlen: 24
202.153.44.0/24 maxlen: 24
202.153.45.0/24 maxlen: 24
202.153.46.0/24 maxlen: 24
202.153.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25845 (0x64f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 15 10:41:39 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ecb6e3-3994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:74:63:54:fd:86:8d:bb:62:ef:85:9b:9b:
db:d0:5b:f6:4f:6d:c9:e1:d9:a2:d7:94:fd:60:8b:
94:cf:92:0a:13:86:6b:03:35:39:ab:c5:92:ce:ff:
af:90:d0:73:32:a0:a9:ae:b4:5a:dc:ad:cd:8a:d3:
f8:78:6a:06:f5:d5:5d:55:bd:dc:6f:9b:2c:8e:6b:
a8:ed:64:65:07:d1:d4:65:20:ff:56:10:d1:c5:f2:
f4:ca:7f:a4:55:45:9d:31:0c:f4:5e:36:fd:d9:5c:
8b:38:e4:9c:fd:ed:24:78:50:4b:f5:6b:19:88:26:
6f:1f:8a:a2:e3:a4:4f:88:6b:1c:8a:55:d5:e2:f3:
ae:4b:a2:ab:7a:a5:b1:e4:e9:91:37:5d:96:b9:e7:
25:b2:b7:ab:81:3e:a4:64:ba:ae:4d:28:0c:78:bf:
2d:a9:f7:ae:87:4b:12:61:54:8a:8b:82:de:26:0f:
9b:4d:af:76:34:8c:0f:98:92:3d:a8:6c:53:11:3e:
dc:0b:58:04:20:14:dd:54:9c:d1:b4:b7:90:f0:8f:
92:b5:c5:65:48:3e:23:e3:e2:50:b6:1b:b6:4b:5d:
d9:0d:a0:d6:ad:1c:35:71:b4:d1:d4:02:de:a0:d7:
5f:69:1e:12:1c:c4:6a:d4:ee:68:6a:e7:57:69:0f:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:D6:55:CA:CC:C0:51:09:2D:33:E8:3F:DC:D0:09:92:07:54:AD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53CEFB50AD1D11EDB59BCC0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.68.0/23
103.48.71.0/24
103.55.213.0/24
103.105.102.0/24
113.11.224.0/21
175.101.0.0/16
202.133.48.0/20
202.153.33.0-202.153.47.255
Signature Algorithm: sha256WithRSAEncryption
02:fd:34:a8:e1:fb:b6:93:7e:b3:54:fa:93:a6:1d:06:98:c1:
f4:c0:5a:11:6f:76:43:89:b3:4d:78:0c:7f:36:74:69:2e:2b:
f6:8c:f0:37:32:e9:be:04:f5:93:32:a7:51:6e:23:1d:e7:5f:
4b:5e:46:53:0d:a9:41:76:80:f5:41:b7:7a:bf:91:25:a6:89:
5e:99:74:3f:5e:6e:7e:36:10:2c:d5:35:11:1b:90:e6:dd:d8:
d5:75:45:e3:01:30:e5:5c:ff:f5:0a:9e:43:f0:49:19:66:f8:
77:a2:ab:9e:37:cf:5d:31:a8:44:d5:80:af:21:03:a9:22:8f:
6a:48:b8:33:29:98:c3:3e:b0:fe:81:55:7d:57:51:40:86:1c:
a1:e8:a2:60:fa:e2:63:ca:82:90:ec:56:e1:21:95:ea:cd:fe:
cb:5b:17:01:b3:5f:89:4f:b3:78:c5:07:90:b3:23:6d:9e:24:
3b:9b:55:34:31:b0:eb:8c:4b:ff:59:ec:81:10:3d:d4:73:e5:
de:30:74:e6:7f:24:c0:aa:94:40:d7:04:77:04:09:b6:c7:b9:
ee:ad:e6:40:35:c8:25:64:3b:a4:b3:be:ec:05:60:53:29:e4:
41:2a:f0:58:85:f4:4d:f4:75:02:f7:36:e6:1f:58:ea:de:31:
ff:61:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org