Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDC3BA8282111ECB26B2E4DC4F9AE02.roa
File: 7BDC3BA8282111ECB26B2E4DC4F9AE02.roa (raw, json)
Hash identifier: 2Bc2985aNrXEfvILFK230q7DXAZ4pWuXaeRQwRVNRBQ=
Subject key identifier: B2:93:D9:A9:9C:E5:5D:3A:9A:B4:B1:7E:F5:11:43:62:55:67:C8:FE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5A8D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDC3BA8282111ECB26B2E4DC4F9AE02.roa
Signing time: Mon 01 Aug 2022 13:01:38 +0000
ROA not before: Mon 01 Aug 2022 13:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9498
IP address blocks: 45.121.44.0/22 maxlen: 24
103.61.132.0/22 maxlen: 24
103.68.220.0/23 maxlen: 24
103.191.156.0/24 maxlen: 24
103.209.96.0/23 maxlen: 24
192.12.109.0/24 maxlen: 24
202.53.87.0/24 maxlen: 24
202.58.102.0/23 maxlen: 24
202.65.141.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.140.63.0/24 maxlen: 24
2405:a700::/32 maxlen: 32
2405:a700:14::/48 maxlen: 48
2405:a700:15::/48 maxlen: 48
2405:a700:1b::/48 maxlen: 48
2405:a700:1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23181 (0x5a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 1 13:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e7ceb2-b5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:44:e2:f6:49:ad:28:c7:dd:93:6a:13:ab:
6c:c5:4c:e2:4f:0a:66:bd:aa:1b:82:66:9b:b0:72:
d0:72:0f:b6:e4:46:f1:40:10:59:a5:e0:7f:9c:b7:
a1:54:c7:c3:e2:f1:dc:40:2f:fb:aa:7f:3f:52:8a:
f2:9e:9d:1f:0a:16:03:3e:0b:db:1f:1f:db:3a:13:
31:71:0a:2d:34:a1:e8:47:31:80:59:b7:db:c8:2a:
23:f2:15:22:40:14:3c:f1:ae:18:e4:26:a6:d1:90:
8d:9a:55:a6:29:25:9e:46:12:04:06:02:0c:92:80:
63:5d:b2:dc:0e:ad:c5:4c:10:e0:32:1a:09:bf:75:
45:01:e6:92:20:9c:42:41:e8:9f:f2:2c:f0:7c:1d:
35:62:9c:9f:5b:92:86:55:2a:f1:37:38:89:ca:50:
d7:6a:55:64:96:a5:d2:5b:c6:5a:a7:9b:dc:c9:cc:
69:7c:d8:1f:9d:6d:6b:e6:d2:7f:48:01:07:da:10:
4e:70:96:9c:d2:2f:56:cb:5e:d2:ab:b8:da:da:3c:
3e:e5:96:52:13:c4:c3:1f:c3:cb:30:96:bd:14:8b:
43:fc:0f:6f:c9:bf:80:89:d0:ca:14:97:aa:8a:3e:
5e:ed:83:6f:86:61:4a:9b:19:48:fd:83:0e:60:3a:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:D9:A9:9C:E5:5D:3A:9A:B4:B1:7E:F5:11:43:62:55:67:C8:FE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDC3BA8282111ECB26B2E4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.44.0/22
103.61.132.0/22
103.68.220.0/23
103.191.156.0/24
103.209.96.0/23
192.12.109.0/24
202.53.87.0/24
202.58.102.0/23
202.65.141.0-202.65.142.255
202.140.63.0/24
IPv6:
2405:a700::/32
Signature Algorithm: sha256WithRSAEncryption
b4:fa:fa:56:0a:02:f8:18:c7:78:4e:c1:59:83:59:10:e6:67:
ba:ca:52:42:9c:e9:b8:95:90:8f:ae:18:6e:81:7d:16:f4:b9:
c8:ee:96:84:7a:e2:d2:bf:96:25:86:30:58:cf:56:d8:82:13:
02:3d:de:ec:58:8b:b9:98:2f:7d:45:c0:dd:ce:6c:1f:38:6c:
b9:43:0c:6b:07:d0:de:0f:b3:34:a0:00:68:7f:36:19:aa:04:
bd:82:c6:40:0b:5b:8c:a0:f9:04:f6:78:10:1a:53:cb:fa:c2:
7f:ca:32:1e:6e:8c:88:6c:84:d3:e1:04:8e:33:c0:a5:c7:1c:
61:e1:13:f6:0e:85:ac:59:66:5b:29:dd:98:ba:b6:cc:b9:79:
1d:10:dc:26:85:54:a5:7f:4a:e3:47:01:6b:d0:7c:04:b5:7d:
d6:5e:9b:62:19:97:06:8a:cc:d3:29:c0:25:bd:5c:f7:40:2c:
3b:86:52:aa:9b:3d:5a:55:05:3c:df:ae:f5:65:c5:19:ab:31:
5b:c6:df:4f:1a:56:56:b4:81:e6:5e:de:c2:94:42:47:82:ec:
10:d6:6b:5f:8c:48:8f:64:da:bb:b1:ec:f5:ec:24:47:db:af:
3e:41:63:61:42:27:09:37:aa:49:28:cb:5a:cd:ae:34:95:44:
b8:55:7a:65
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgICWo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwODAxMTMwMTM4WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU3Y2ViMi1iNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAneZE4vZJrSjH3ZNqE6tsxUziTwpmvaobgmabsHLQcg+25EbxQBBZpeB/nLeh
VMfD4vHcQC/7qn8/Uorynp0fChYDPgvbHx/bOhMxcQotNKHoRzGAWbfbyCoj8hUi
QBQ88a4Y5Cam0ZCNmlWmKSWeRhIEBgIMkoBjXbLcDq3FTBDgMhoJv3VFAeaSIJxC
Qeif8izwfB01YpyfW5KGVSrxNziJylDXalVklqXSW8Zap5vcycxpfNgfnW1r5tJ/
SAEH2hBOcJac0i9Wy17Sq7ja2jw+5ZZSE8TDH8PLMJa9FItD/A9vyb+AidDKFJeq
ij5e7YNvhmFKmxlI/YMOYDrkGQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFLKT2amc
5V06mrSxfvURQ2JVZ8j+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0JEQzNCQTgy
ODIxMTFFQ0IyNkIyRTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E
XTBbMEoEAgABMEQDBAIteSwDBAJnPYQDBAFnRNwDBABnv5wDBAFn0WADBADADG0D
BADKNVcDBAHKOmYwDAMEAMpBjQMEAMpBjgMEAMqMPzANBAIAAjAHAwUAJAWnADAN
BgkqhkiG9w0BAQsFAAOCAQEAtPr6VgoC+BjHeE7BWYNZEOZnuspSQpzpuJWQj64Y
boF9FvS5yO6WhHri0r+WJYYwWM9W2IITAj3e7FiLuZgvfUXA3c5sHzhsuUMMawfQ
3g+zNKAAaH82GaoEvYLGQAtbjKD5BPZ4EBpTy/rCf8oyHm6MiGyE0+EEjjPApccc
YeET9g6FrFlmWyndmLq2zLl5HRDcJoVUpX9K40cBa9B8BLV91l6bYhmXBorM0ynA
Jb1c90AsO4ZSqps9WlUFPN+u9WXFGasxW8bfTxpWVrSB5l7ewpRCR4LsENZrX4xI
j2Tau7Hs9ewkR9uvPkFjYUInCTeqSSjLWs2uNJVEuFV6ZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org