Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BE502DE72CC11ECB5A95E52C4F9AE02.roa
File: 6BE502DE72CC11ECB5A95E52C4F9AE02.roa (raw, json)
Hash identifier: lcu0pvZMfmUzHJeovZeh5blOiMkbBBcqWtCrVVtxdcA=
Subject key identifier: 16:7B:9D:A1:15:22:93:89:15:F9:17:B9:ED:1D:C4:B6:FC:08:32:49
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4EBF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BE502DE72CC11ECB5A95E52C4F9AE02.roa
Signing time: Mon 16 May 2022 04:02:40 +0000
ROA not before: Mon 16 May 2022 04:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132559
IP address blocks: 36.255.84.0/22 maxlen: 24
103.16.68.0/22 maxlen: 24
103.146.217.0/24 maxlen: 24
103.180.45.0/24 maxlen: 24
103.186.40.0/23 maxlen: 24
103.186.68.0/23 maxlen: 24
2400:6ee0::/32 maxlen: 32
2405:a140::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20159 (0x4ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ccdf-fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:8d:ca:05:84:0f:92:09:17:a7:49:36:27:
5a:63:84:57:64:2d:dc:c5:29:bf:6b:4e:ef:cd:74:
4d:8b:39:54:c4:44:2a:b6:05:b4:c0:0b:14:08:e9:
41:27:89:e5:c5:dc:44:cd:85:a9:84:60:f9:b0:04:
12:38:5e:14:64:7a:ee:38:f7:ed:67:4c:c4:cd:29:
71:98:3a:53:2f:7c:fa:34:f1:ad:f4:81:2b:4d:0c:
ba:59:e0:01:71:09:4e:5c:97:f2:57:c0:9e:14:7f:
bf:a7:8c:79:60:d5:52:87:b5:8b:d4:97:7b:57:ae:
10:b5:35:fd:27:07:65:1c:78:5b:f8:ac:2c:6e:c1:
34:ab:b7:07:34:c6:7c:5c:58:9a:6a:49:d5:f9:0a:
6f:26:f1:aa:de:14:da:ea:11:53:ab:35:09:82:e8:
21:5b:03:8f:bd:f1:96:ae:f5:2b:a4:43:7e:86:59:
54:d3:ab:b8:2f:14:75:1b:e6:39:e6:45:51:66:c4:
89:79:17:2e:07:69:33:8e:1d:49:8a:9f:1f:34:46:
21:2e:09:69:fa:5f:68:fe:ed:11:57:6d:ec:67:14:
42:fa:5d:fb:84:38:a1:5a:a6:1e:a9:83:32:ac:57:
9b:74:1a:b7:77:7e:c1:dc:34:69:92:a9:28:aa:76:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:9D:A1:15:22:93:89:15:F9:17:B9:ED:1D:C4:B6:FC:08:32:49
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BE502DE72CC11ECB5A95E52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.84.0/22
103.16.68.0/22
103.146.217.0/24
103.180.45.0/24
103.186.40.0/23
103.186.68.0/23
IPv6:
2400:6ee0::/32
2405:a140::/32
Signature Algorithm: sha256WithRSAEncryption
4d:72:a7:ea:d3:0f:4a:45:ca:b1:23:3e:75:d7:ba:07:24:c8:
cb:28:ad:17:9f:f9:a9:0b:e9:77:15:01:f9:04:2a:db:df:c4:
f7:95:7e:00:7f:4b:1e:3e:46:a8:1b:1c:86:5a:19:ae:23:e8:
58:f0:f5:d7:a2:f3:a7:fa:93:95:a6:8d:e8:a0:50:de:d4:54:
a0:1d:0a:12:94:cb:b5:da:68:56:b1:70:ce:7a:99:c8:dd:98:
08:9f:62:1b:ff:f0:d8:c6:e0:0b:97:56:8b:54:b4:0e:e3:8b:
ac:04:0f:99:e3:3e:bc:2b:3b:0a:86:50:0e:e6:07:9a:41:64:
38:d2:98:8f:97:85:1b:7d:5b:3c:4f:b0:86:29:7f:ac:42:8b:
7c:76:b1:27:2c:af:eb:60:01:3b:0b:42:04:1c:59:7b:22:c6:
e2:c7:e9:e0:f8:a5:9e:5d:09:9b:fb:93:16:d5:87:65:bc:80:
ce:4b:f6:99:12:f9:2b:f8:f9:98:3a:51:2b:4b:e2:e1:4d:a4:
56:e1:9b:91:8e:16:47:23:48:c9:3f:42:0e:a4:d7:33:84:00:
33:5e:4b:9c:8e:4b:bb:c9:46:24:eb:60:f3:26:ce:9b:d2:56:
4b:6e:f1:a1:f8:df:e2:58:2c:07:fd:74:cb:4e:fd:44:9d:73:
a8:93:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org