Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6486A318511911ED9308A55CC4F9AE02.roa
File: 6486A318511911ED9308A55CC4F9AE02.roa (raw, json)
Hash identifier: EHuHZA9TXWP4BDLLSzd5RQcw76RdQyJSR1mk4vIoR3w=
Subject key identifier: 39:18:3F:AD:56:95:72:11:06:3F:14:F0:FD:67:BA:5E:61:1F:3C:92
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 61CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6486A318511911ED9308A55CC4F9AE02.roa
Signing time: Thu 22 Dec 2022 12:31:40 +0000
ROA not before: Thu 22 Dec 2022 12:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.60.0/23 maxlen: 24
103.181.102.0/24 maxlen: 24
103.181.103.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25034 (0x61ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 22 12:31:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a44e2c-c862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:d7:ed:19:f3:fa:66:d0:a8:60:a4:0b:6d:
d8:ac:b6:d9:97:23:a7:26:2f:30:34:85:38:5c:55:
48:10:84:88:7b:14:4b:fd:11:7d:2e:4e:e7:96:8c:
16:41:42:e8:2f:96:c4:67:2a:a4:9f:83:c4:13:4d:
31:d3:d8:b8:fc:5b:06:f3:80:82:bd:22:07:8c:08:
79:e9:2e:71:72:3e:a8:23:76:a1:7b:2a:f2:51:28:
1e:f7:57:a9:cb:51:fe:ef:16:ab:e9:54:be:d2:c4:
dc:a5:cf:fc:b5:f5:3d:fa:5b:25:be:69:a1:3a:a3:
60:4f:eb:3e:4f:cb:50:30:9c:53:df:2e:7a:61:c0:
1f:0f:0d:57:03:f9:b0:53:8c:48:68:e2:b2:6f:84:
08:a0:91:0c:df:1d:ad:51:46:42:67:ab:c3:0f:d8:
d0:70:e4:73:01:e2:07:ea:82:01:32:24:79:4b:d1:
29:00:f9:5d:d2:67:2b:96:07:b1:70:f4:dc:c4:70:
19:f7:05:1a:74:d4:2e:d9:3e:b3:b8:13:a2:27:c5:
9b:ab:3a:92:f6:04:bd:39:c6:4f:1f:90:59:28:a9:
65:a4:f3:1c:43:a6:20:03:4c:04:44:ce:b4:22:42:
74:5a:64:e2:77:c3:0b:b2:d1:b4:83:ba:d2:5d:0d:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:3F:AD:56:95:72:11:06:3F:14:F0:FD:67:BA:5E:61:1F:3C:92
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6486A318511911ED9308A55CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.147.174.0/23
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.181.60.0/23
103.181.102.0/23
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
09:01:8d:a4:f4:9b:88:87:7d:88:4e:c7:56:04:81:be:6d:e5:
c1:5a:52:b3:06:bd:af:1e:39:d8:da:e1:3e:00:60:c1:94:f6:
a3:0a:72:28:cb:b2:26:12:11:c9:25:3a:b6:24:5a:67:c0:8a:
ac:98:20:4a:21:c9:0d:4f:60:da:d2:e2:97:ba:d6:9f:39:d7:
a8:f3:9d:c4:02:7e:b2:c5:31:06:0e:5a:b2:c5:0c:d4:5d:49:
4d:a5:e7:af:4c:dd:0c:00:2d:89:d3:fa:90:eb:e4:dc:bc:81:
fe:66:bb:3b:06:cd:f4:2f:b0:c0:26:0b:b6:c8:07:56:1e:a9:
25:10:3a:4b:c3:f3:e2:f7:f8:0e:19:26:ce:92:cd:7e:83:fb:
30:2d:22:16:7f:6f:30:df:4f:b2:08:a5:e0:d1:89:25:22:6d:
0c:96:55:eb:b2:9c:6d:60:2d:73:4e:b7:7f:85:75:23:77:b0:
e2:b5:8e:b5:d8:31:85:e0:b4:d4:86:5a:f4:6e:74:5b:0c:2d:
ac:5e:22:67:93:0d:f4:e5:4f:7a:a6:f6:82:03:10:e8:7b:ff:
e0:f1:02:9e:a8:90:1e:fd:9b:3f:75:21:cf:ff:53:70:07:24:
17:eb:d2:3a:ee:e4:86:d0:ee:a2:d2:43:e2:7f:50:0e:57:bf:
15:6b:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org