Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/594493E6BDCF11EA8755D90DC4F9AE02.roa
File: 594493E6BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: +It+XmFNRNbiLi6qggCJFdnyYKheMHKLopyfFWk03pE=
Subject key identifier: 54:27:86:7D:0E:61:17:B3:02:75:2C:59:BE:51:75:82:07:E4:D3:F6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 519C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/594493E6BDCF11EA8755D90DC4F9AE02.roa
Signing time: Mon 16 May 2022 04:16:40 +0000
ROA not before: Mon 16 May 2022 04:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137655
IP address blocks: 103.121.174.0/24 maxlen: 24
103.140.2.0/24 maxlen: 24
103.141.133.0/24 maxlen: 24
103.148.43.0/24 maxlen: 24
103.152.134.0/24 maxlen: 24
103.154.105.0/24 maxlen: 24
103.164.198.0/24 maxlen: 24
103.164.199.0/24 maxlen: 24
103.171.193.0/24 maxlen: 24
103.176.214.0/24 maxlen: 24
2001:df1:a180::/48 maxlen: 48
2001:df2:8c80::/48 maxlen: 48
2001:df6:5080::/48 maxlen: 48
2001:df6:d880::/48 maxlen: 48
2001:df7:5080::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20892 (0x519c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d028-059b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:6a:17:4b:bc:05:ae:42:06:37:8c:96:2e:
d2:6f:c3:8e:f1:68:99:85:e5:f2:a2:70:9f:2b:60:
6e:be:b8:f1:58:e5:9f:5d:bb:12:7b:23:f8:0f:5c:
46:ce:c4:b1:73:fc:03:fa:ea:11:03:28:84:1d:11:
7a:25:33:8b:39:70:9d:f5:34:74:f1:98:f9:4a:6c:
56:f5:4e:ee:85:b4:8b:01:8d:1e:4d:91:df:d5:63:
2b:f2:12:c2:80:e1:85:a2:24:d5:08:44:20:e3:bc:
6a:6c:be:60:88:23:22:9a:83:89:66:31:97:08:74:
93:d5:d1:55:e8:83:1d:0b:85:f8:44:fa:3d:2f:dd:
64:30:2e:78:6b:bd:20:98:0d:f5:72:35:7a:41:95:
cb:d8:ed:ea:dc:4f:52:df:8d:ec:b2:27:6d:8e:74:
f2:b6:a7:b4:6f:74:f1:43:a8:71:35:ef:bd:18:bb:
b2:37:08:8e:9b:75:da:1a:f9:59:2c:7c:67:46:e7:
b1:2e:f9:8a:44:84:a3:7e:da:3d:df:d8:77:58:a4:
dd:71:d6:07:1d:81:ea:0a:d7:2e:d8:bf:2e:df:8f:
d8:3b:0d:d2:be:bf:b1:33:ae:39:d2:a2:ff:8e:90:
ab:45:99:d0:ea:70:09:76:db:f5:f6:07:51:2b:31:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:86:7D:0E:61:17:B3:02:75:2C:59:BE:51:75:82:07:E4:D3:F6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/594493E6BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.174.0/24
103.140.2.0/24
103.141.133.0/24
103.148.43.0/24
103.152.134.0/24
103.154.105.0/24
103.164.198.0/23
103.171.193.0/24
103.176.214.0/24
IPv6:
2001:df1:a180::/48
2001:df2:8c80::/48
2001:df6:5080::/48
2001:df6:d880::/48
2001:df7:5080::/48
Signature Algorithm: sha256WithRSAEncryption
14:b6:69:84:bf:97:7e:fa:69:5c:56:65:97:39:11:ed:21:4c:
99:85:6e:b8:f2:0b:1e:32:2e:f3:4e:d0:82:d8:eb:98:5a:a6:
76:ad:01:d7:19:5d:54:d3:32:4d:95:71:38:e1:53:21:e0:92:
25:94:eb:54:18:c0:a8:8d:af:c9:07:34:18:79:19:20:a6:6d:
f6:e2:d0:0c:fc:56:18:f4:30:4d:3b:88:c6:a0:9e:88:69:6c:
9e:07:93:cf:e2:17:56:3c:fe:7a:bb:c4:46:9d:23:f4:ec:55:
2f:b0:17:f1:2f:f6:97:d3:71:f5:4f:d4:56:d3:dd:d1:6a:43:
33:f9:ea:f4:55:3e:19:fd:21:b5:08:de:2b:7d:bb:33:a3:3a:
77:37:5c:3e:6c:db:8a:46:19:dc:96:98:8f:e5:9a:c1:18:42:
da:1d:79:4d:70:cf:a9:37:24:25:f7:f9:87:b4:b4:05:13:4a:
72:cc:7e:da:48:65:d3:0c:49:37:b1:cc:1a:3c:a4:9c:4f:b4:
e1:7d:50:00:65:46:9d:c2:e6:68:69:52:63:5c:6d:44:46:ff:
60:3b:f2:d9:8a:bc:f9:cb:49:cc:2c:42:a9:f5:22:6d:91:75:
07:a2:a1:4d:7c:fa:f4:0f:84:46:e5:86:67:91:40:3f:60:84:
6e:ec:31:6a
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICUZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNTE2MDQxNjQwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjgxZDAyOC0wNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuN5qF0u8Ba5CBjeMli7Sb8OO8WiZheXyonCfK2BuvrjxWOWfXbsSeyP4D1xG
zsSxc/wD+uoRAyiEHRF6JTOLOXCd9TR08Zj5SmxW9U7uhbSLAY0eTZHf1WMr8hLC
gOGFoiTVCEQg47xqbL5giCMimoOJZjGXCHST1dFV6IMdC4X4RPo9L91kMC54a70g
mA31cjV6QZXL2O3q3E9S343ssidtjnTytqe0b3TxQ6hxNe+9GLuyNwiOm3XaGvlZ
LHxnRuexLvmKRISjfto939h3WKTdcdYHHYHqCtcu2L8u34/YOw3Svr+xM6450qL/
jpCrRZnQ6nAJdtv19gdRKzG5vwIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFFQnhn0O
YRezAnUsWb5RdYIH5NP2MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTk0NDkzRTZC
RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYQGCCsGAQUFBwEHAQH/
BHUwczA8BAIAATA2AwQAZ3muAwQAZ4wCAwQAZ42FAwQAZ5QrAwQAZ5iGAwQAZ5pp
AwQBZ6TGAwQAZ6vBAwQAZ7DWMDMEAgACMC0DBwAgAQ3xoYADBwAgAQ3yjIADBwAg
AQ32UIADBwAgAQ322IADBwAgAQ33UIAwDQYJKoZIhvcNAQELBQADggEBABS2aYS/
l376aVxWZZc5Ee0hTJmFbrjyCx4yLvNO0ILY65hapnatAdcZXVTTMk2VcTjhUyHg
kiWU61QYwKiNr8kHNBh5GSCmbfbi0Az8Vhj0ME07iMagnohpbJ4Hk8/iF1Y8/nq7
xEadI/TsVS+wF/Ev9pfTcfVP1FbT3dFqQzP56vRVPhn9IbUI3it9uzOjOnc3XD5s
24pGGdyWmI/lmsEYQtodeU1wz6k3JCX3+Ye0tAUTSnLMftpIZdMMSTexzBo8pJxP
tOF9UABlRp3C5mhpUmNcbURG/2A78tmKvPnLScwsQqn1Im2RdQeioU18+vQPhEbl
hmeRQD9ghG7sMWo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org