Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F6759208A8B11ED942E6F74C4F9AE02.roa
File: 6F6759208A8B11ED942E6F74C4F9AE02.roa (raw, json)
Hash identifier: Rxee5FFKvciKJmcKUHMCwAfcZWZp5WwWsVhI9gDez6U=
Subject key identifier: 12:63:28:02:3A:68:A6:D0:4D:B5:1F:E5:9A:1F:A2:68:B1:BD:10:56
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6295
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F6759208A8B11ED942E6F74C4F9AE02.roa
Signing time: Thu 05 Jan 2023 06:11:37 +0000
ROA not before: Thu 05 Jan 2023 06:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.102.0/24 maxlen: 24
103.181.103.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2001:df6:f180::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25237 (0x6295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 5 06:11:37 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b66a19-84a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ea:78:21:5e:a9:76:00:c4:a6:47:6f:f6:16:
bc:33:ae:74:dd:10:21:07:5b:d5:2b:b1:34:4a:53:
42:f1:12:f5:a5:72:6f:24:e5:f1:91:11:a2:1e:4e:
10:50:0a:d0:34:ab:d5:16:fb:a6:43:9d:22:71:b7:
e9:78:c0:6c:fc:c1:54:4e:93:2d:e4:d1:ab:1a:d6:
62:21:75:32:bc:a7:8c:fe:8f:9f:24:74:32:ee:1f:
20:5b:be:02:a4:12:16:e7:0f:72:41:9a:11:9d:07:
d3:1e:34:da:da:6b:22:4e:26:0d:d6:db:3c:65:c1:
22:60:96:3a:28:93:65:82:37:ad:01:16:5e:14:17:
fe:b8:7a:bb:45:94:83:76:94:2a:b3:f2:ce:98:9b:
de:58:5b:5f:82:bb:77:c0:b2:ff:18:e1:54:6d:79:
02:cd:33:f9:fd:7a:9c:79:d5:6c:1b:e6:a7:92:84:
ce:02:c0:bb:01:57:c8:6f:de:3d:8b:1d:2a:82:e3:
d7:e7:4e:cb:61:15:71:1c:8d:79:00:de:08:ff:90:
73:88:72:51:1f:08:90:c1:b9:3c:c2:18:dd:86:61:
7a:1e:76:21:d5:55:79:80:03:45:ae:f4:b7:33:df:
a5:99:37:fe:8d:48:94:f9:b0:89:a9:bd:d5:85:ac:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:28:02:3A:68:A6:D0:4D:B5:1F:E5:9A:1F:A2:68:B1:BD:10:56
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F6759208A8B11ED942E6F74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.147.174.0/23
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.181.102.0/23
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2001:df6:f180::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
26:ac:36:5d:72:6d:3e:0c:0b:76:80:07:c0:cf:bd:37:df:6f:
24:9c:4b:82:86:bf:dd:fd:79:e4:e8:22:81:f4:e5:40:42:57:
fd:84:78:8e:6b:21:76:18:76:46:9f:af:d1:92:9c:ce:24:f7:
6a:53:eb:33:fc:98:0d:48:f1:7f:4a:34:0c:2f:2a:83:99:84:
d2:0c:87:f1:81:90:93:e8:7a:53:99:ab:0f:7b:65:f8:95:72:
be:69:f2:c2:b6:ec:39:58:c4:5b:3f:29:8c:8d:42:aa:9c:db:
57:d1:67:1b:45:c8:05:c4:51:77:b0:bc:00:93:8e:56:9d:82:
76:bb:ac:e7:2a:07:a7:87:c2:0c:d7:77:ea:3f:8a:3a:fd:ee:
12:90:a3:cd:30:3b:23:ce:b1:62:ca:32:01:0d:f3:7d:87:4e:
c5:83:86:8e:3d:3c:0e:96:d4:e3:d9:a7:8e:17:8b:8b:ed:50:
e8:75:fe:65:90:46:aa:80:72:bc:e7:dc:94:d0:e8:bf:74:04:
5e:0f:5d:d0:2c:44:68:3d:71:68:25:a0:42:b8:e9:7e:d1:20:
b3:af:bf:ff:cf:cf:ba:65:f8:fd:db:a7:e8:55:34:c6:5d:ec:
10:0a:f9:a5:a9:a5:34:f9:fa:f8:9f:c3:f3:8e:fa:6c:55:b7:
b0:fc:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org