Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65D7A708511911ED9308A55CC4F9AE02.roa
File: 65D7A708511911ED9308A55CC4F9AE02.roa (raw, json)
Hash identifier: s6A4xRFMtNwwkTzmynxqg4EfyEH2eYVKVt9JfxSB0+Q=
Subject key identifier: C4:9A:FC:D8:A6:7E:43:EC:13:04:2C:19:8D:CA:79:AD:2A:7D:B4:B3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F12
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65D7A708511911ED9308A55CC4F9AE02.roa
Signing time: Fri 21 Oct 2022 08:21:45 +0000
ROA not before: Fri 21 Oct 2022 08:21:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24338 (0x5f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 21 08:21:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63525698-8cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:89:e6:0b:27:bc:b4:cc:ad:83:ce:a3:01:
eb:18:0f:31:d1:ea:49:c6:28:05:d0:b7:fe:6c:1d:
de:c0:78:21:b5:52:0f:cf:b2:1d:16:29:b9:8e:82:
54:4a:b2:66:9e:78:31:97:25:9b:1e:75:a4:c1:cc:
32:df:36:f1:3f:9f:2f:63:31:b0:e8:33:7b:dc:46:
c2:53:ce:b2:47:00:a9:9d:25:ec:db:50:37:c1:cf:
ee:8b:9d:9f:bd:6f:e6:5a:e7:40:6c:83:3d:e0:b1:
6d:b0:59:8f:11:4b:8d:5c:41:c0:f4:7f:a0:7d:6c:
b8:c6:0a:89:22:f7:4b:86:bb:2d:29:c7:7c:76:e3:
b9:45:f4:87:99:5a:5f:b5:f9:6f:0f:ce:4e:01:b1:
f0:9c:5d:f9:04:7b:50:fd:29:c5:e6:03:b2:af:d2:
9c:4e:1e:da:b9:81:90:11:4f:d3:2a:26:e1:a0:6d:
c6:44:e2:07:5e:59:bb:49:2c:bf:57:e1:c4:fa:09:
eb:03:ce:48:2a:91:fd:eb:5f:ab:13:92:19:39:a5:
0c:5f:18:5a:1c:09:5e:12:4f:fe:03:20:6e:7c:51:
e2:3d:2a:9b:30:d2:4c:7f:bf:1c:e8:d9:b3:4e:4b:
12:ca:7f:8b:62:26:41:10:8c:cb:5b:e4:1d:8f:93:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:FC:D8:A6:7E:43:EC:13:04:2C:19:8D:CA:79:AD:2A:7D:B4:B3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65D7A708511911ED9308A55CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.179.118.0-103.179.121.255
103.179.226.0/23
103.180.176.0/23
103.180.212.0/23
103.181.64.0/23
103.181.110.0/23
103.181.114.0/23
103.181.152.0/23
103.181.174.0/23
103.181.198.0/23
103.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
04:0d:16:56:d5:3c:97:c8:ad:c9:49:70:37:ab:65:d1:a1:eb:
4c:0a:81:54:0d:c9:87:1d:3d:3a:31:97:fd:19:b7:64:6a:a9:
9a:04:41:a8:63:bc:98:a0:71:60:2e:ae:2c:48:b4:91:ca:c7:
ac:fb:03:50:e5:11:23:81:c3:cf:ee:95:ea:60:c3:a8:af:f1:
40:51:3e:36:58:49:1f:09:90:17:b8:d3:da:f7:0b:75:b3:5b:
74:08:39:26:4b:0b:8f:dc:55:dd:5f:d9:3b:7f:68:0a:41:29:
7e:52:82:ee:c6:cc:52:72:27:e3:9b:cb:6a:c1:ce:b5:27:aa:
b9:64:73:9b:8b:ad:8b:59:b5:e5:4b:df:de:42:98:4f:1f:6a:
07:3f:27:cc:7c:cc:d4:5b:a2:f2:74:ee:03:29:60:7f:e1:92:
a0:55:d9:9c:14:cb:10:4b:38:ec:37:fd:39:0f:16:64:15:46:
a6:61:d2:b6:3b:e8:de:5d:36:0b:d8:41:84:c4:4c:ba:23:21:
2d:47:79:c1:9b:87:58:49:e2:4a:97:82:35:6a:f1:9c:7b:17:
fd:88:b1:a1:ba:20:09:8a:d3:c5:bc:a1:d1:ec:a2:ec:ff:0b:
2a:64:5f:81:8a:2e:3c:b3:14:95:33:0e:b8:22:c8:00:6a:75:
a8:4b:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org