Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732ED6121C5211EC92171235C4F9AE02.roa
File: 732ED6121C5211EC92171235C4F9AE02.roa (raw, json)
Hash identifier: hrnC0P61R6kzI+E5y7W/sfyec+d7MxWM3O9xxSEQiM4=
Subject key identifier: 62:6F:22:9C:24:5F:11:15:01:4D:75:28:7F:62:83:D9:C2:F5:F1:B7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3F31
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732ED6121C5211EC92171235C4F9AE02.roa
Signing time: Thu 14 Oct 2021 06:11:30 +0000
ROA not before: Thu 14 Oct 2021 06:11:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 7018
IP address blocks: 45.115.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.127.253.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.168.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
202.51.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16177 (0x3f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 14 06:11:30 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6167ca11-98a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:71:e0:03:89:45:6c:20:01:a6:a3:e6:69:
25:d2:1c:1e:00:02:9d:09:79:16:f9:bb:a5:7b:06:
b9:9f:7f:c7:b4:95:01:87:d9:df:69:8e:68:3a:18:
15:f8:12:c4:77:5c:73:fa:6c:48:04:1a:87:02:f2:
b9:5f:89:59:64:72:7f:bd:17:9a:e6:54:e1:19:b8:
25:bd:da:b0:67:2c:77:d1:ed:65:92:30:2f:b2:df:
45:94:da:31:56:3d:c1:b7:37:d6:89:bf:41:78:41:
b8:44:a6:1d:06:4c:4b:90:13:a8:d0:f9:50:5e:d3:
d4:eb:41:65:b4:83:a3:30:30:3d:62:a0:3c:2c:45:
60:d9:04:c4:b2:ee:c7:8e:5f:bf:be:02:19:01:64:
72:66:10:fe:99:93:ae:fe:d7:ba:73:b0:69:aa:0c:
13:cf:7e:f1:71:ef:81:9c:99:f1:3a:14:56:71:c1:
da:9a:76:8a:fb:d8:cc:9b:9e:94:d8:8e:8e:66:51:
3e:90:27:11:46:b8:aa:9d:7a:92:0e:f3:77:7a:9a:
ae:35:c3:61:02:13:17:fa:00:d1:6b:27:32:d5:69:
ec:b7:05:f1:46:3b:86:3c:51:29:64:03:89:88:c4:
10:29:f5:49:0d:1c:a5:a4:f7:64:e4:2e:ea:f4:41:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:22:9C:24:5F:11:15:01:4D:75:28:7F:62:83:D9:C2:F5:F1:B7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732ED6121C5211EC92171235C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.92.0/22
103.52.48.0/22
103.55.84.0/22
103.127.253.0/24
103.171.236.0/23
103.172.168.0/23
103.174.92.0/23
202.51.248.0/22
Signature Algorithm: sha256WithRSAEncryption
02:66:0d:57:3e:b3:18:e6:d9:e4:e7:cb:44:11:67:ca:60:fa:
a0:9a:19:92:17:8c:92:ce:b2:52:77:92:3c:58:74:a4:28:6b:
62:21:54:68:50:3c:59:e4:f4:1c:64:6a:e2:76:27:cc:0d:a2:
17:34:6c:42:79:a4:97:28:45:7b:f6:d0:b3:9b:33:e5:12:cf:
1a:bb:bc:4d:5d:4e:4f:73:7a:f6:6b:93:47:c0:95:58:38:cf:
a2:81:32:97:09:76:c6:f3:76:d5:53:8d:7d:86:6b:65:94:67:
43:b8:61:83:ab:bb:ca:b8:0d:8e:0a:ee:9d:ad:3b:25:93:31:
4a:a4:78:a5:d0:28:04:43:44:de:6d:4e:39:c0:ff:e7:cd:18:
be:07:2c:cc:94:dd:87:b6:fd:e8:35:fd:68:c5:28:a4:96:de:
34:30:f1:de:96:ec:91:86:5e:ec:70:cb:7e:85:39:64:66:80:
13:1f:7a:72:55:ac:92:3c:08:ed:d6:1d:04:6a:f8:6f:01:2d:
85:32:0e:0d:44:eb:c6:d3:ae:43:e9:bc:1d:bd:76:88:1b:ef:
b2:a2:0f:97:f0:be:7c:cd:65:49:6a:47:f1:3b:e8:e7:a8:50:
c9:5f:b4:ae:b8:0b:52:d4:fd:2d:98:6f:71:77:c2:fa:b1:72:
99:70:d9:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org