Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CA859485AAE11ED83799241C4F9AE02.roa
File: 7CA859485AAE11ED83799241C4F9AE02.roa (raw, json)
Hash identifier: m1kN4dvlEF5BOPOA6HT1vr4vIMORuf+N4ofGrUUd5DM=
Subject key identifier: 82:82:7B:A5:AB:0F:96:31:A2:65:55:F3:26:93:4D:A1:10:75:BA:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CA859485AAE11ED83799241C4F9AE02.roa
Signing time: Wed 02 Nov 2022 13:01:38 +0000
ROA not before: Wed 02 Nov 2022 13:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.105.96.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.102.0/23 maxlen: 24
103.183.86.0/23 maxlen: 24
103.183.233.0/24 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2405:e100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24466 (0x5f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 2 13:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63626a32-2b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:c5:f8:3f:70:03:be:d9:54:75:f6:25:81:
fb:93:f3:0c:3b:4d:04:4e:d4:b8:f6:05:81:72:03:
f6:c8:09:64:97:57:3a:6c:7e:53:7c:a9:31:fb:e9:
3c:5f:af:af:35:a8:6d:17:c6:c0:cf:59:59:99:ef:
23:81:b2:cf:0d:41:9f:6a:fb:d4:49:de:57:d5:9e:
0d:b3:90:32:af:7c:c2:e8:44:79:6c:50:2f:1d:99:
37:8b:f7:1b:fd:70:1b:c6:b9:ba:f6:27:76:23:69:
0e:2f:af:65:29:e4:46:00:b4:c2:de:e1:d1:d7:27:
8d:fc:24:fe:bf:17:c2:b0:f5:6c:45:37:0e:c6:50:
d4:4a:de:04:99:7a:db:1b:3d:d7:46:43:32:94:9a:
0a:fe:15:37:bc:76:ad:d1:1e:aa:6b:20:14:c8:69:
fe:4a:ed:bf:66:ea:70:14:ee:96:99:d1:27:18:c0:
b4:b3:89:9e:76:2c:64:eb:cd:49:a3:84:fb:74:80:
b5:9a:23:c7:cb:36:54:7f:72:64:78:8c:8f:0e:d7:
e4:1e:ac:28:78:67:bd:83:e8:8f:30:c0:e5:d5:2e:
cb:52:c6:69:05:05:bf:ac:cf:4d:09:db:01:8f:73:
d0:95:fe:6f:b8:69:36:7f:11:6b:ba:0e:17:cf:3b:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:7B:A5:AB:0F:96:31:A2:65:55:F3:26:93:4D:A1:10:75:BA:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CA859485AAE11ED83799241C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.69.24.0/22
103.70.80.0/22
103.94.83.0/24
103.100.4.0/22
103.105.96.0/23
103.153.12.0/24
103.164.141.0/24
103.165.102.0/23
103.183.86.0/23
103.183.233.0/24
103.190.8.0/23
103.198.172.0/22
103.217.132.0/22
103.224.144.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
38:07:34:48:60:8f:ef:73:26:55:4a:42:43:5d:f7:2e:a4:0e:
00:45:29:d5:30:5d:63:29:40:2c:3a:1f:33:86:58:4e:b5:d5:
df:78:d5:18:e7:d7:ac:5a:9e:1a:ee:2d:dd:65:87:68:a6:8f:
b6:cf:fa:a1:99:80:bc:54:da:38:e3:61:40:30:e3:af:79:fa:
1d:35:72:a8:91:e7:09:44:e3:c2:cb:a9:d4:b0:d3:d6:68:8b:
59:07:1c:9d:32:38:e5:08:74:2e:e3:f0:dd:0a:1f:5f:01:cc:
51:aa:77:1a:11:4a:6d:47:3a:33:3e:79:ca:72:5b:f0:3d:3e:
d8:e9:7a:14:13:b8:5a:88:2c:ba:58:b1:50:34:d6:52:9d:a5:
24:ba:2c:e1:23:4c:fd:00:30:de:2c:e8:93:38:e8:86:cd:78:
52:1f:7f:14:12:8e:d7:1a:1c:5b:32:8b:31:c5:11:d7:e4:9b:
a2:c3:b6:14:27:32:88:17:81:fa:9c:cb:17:f8:29:59:0c:bd:
44:b2:f3:f6:45:ce:18:d5:c3:60:63:f6:0b:8d:85:b0:14:9a:
d6:9a:fc:f8:da:41:fa:49:ad:33:e2:aa:81:03:27:8c:b4:9c:
e6:d8:33:d5:ad:12:95:d7:2a:4d:84:85:c4:a7:fa:e2:94:ae:
eb:b4:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org