Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806923F260D311EDA6465F0CC4F9AE02.roa
File: 806923F260D311EDA6465F0CC4F9AE02.roa (raw, json)
Hash identifier: y87MEDMQL9Vt0dywEV6jW5+c81/KD2OU/pHhR9izup8=
Subject key identifier: 6E:A8:8D:89:ED:B0:E1:C3:5D:90:37:37:73:FE:D9:5F:76:04:B2:48
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6141
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806923F260D311EDA6465F0CC4F9AE02.roa
Signing time: Thu 08 Dec 2022 08:41:43 +0000
ROA not before: Thu 08 Dec 2022 08:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141853
IP address blocks: 103.165.76.0/23 maxlen: 24
103.166.214.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.171.109.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24897 (0x6141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 8 08:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6391a346-ce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:c7:7d:6e:87:d2:b9:d0:9c:3b:3d:12:5c:
95:e9:4a:f0:f2:cf:69:72:cc:02:e6:3d:e2:5d:8a:
e7:c7:b8:f7:88:b3:f0:cb:46:6c:16:95:15:cf:64:
8b:33:e0:d2:86:b3:4d:61:5f:6e:80:74:57:92:d6:
19:20:34:50:1d:31:62:3b:16:cd:75:d4:ad:aa:97:
a1:a6:54:db:26:c5:a5:b8:0b:90:10:47:44:8a:41:
6d:f6:fc:9e:44:99:ba:b5:45:10:98:7b:e6:e7:23:
c1:c5:c7:3d:a7:34:04:e2:c0:c0:72:9e:7e:27:50:
75:97:3f:35:d2:8f:c3:0b:cf:90:7d:2c:de:20:88:
6e:35:2b:ad:1a:fd:a3:60:77:14:e1:b3:55:dc:a9:
9a:60:f4:bc:09:c9:4e:06:8a:ca:ec:67:86:4d:66:
c7:01:65:3b:49:94:01:69:3f:57:3c:a2:4d:07:c7:
43:c5:4d:f1:3d:11:02:0c:69:54:96:1d:77:8b:17:
1e:bb:eb:71:92:27:f2:88:74:be:0d:10:fd:8c:92:
d8:e7:22:c9:a9:30:ef:5b:12:49:4c:81:75:98:0b:
7a:ca:ad:e8:d9:b9:b2:0e:3a:19:2b:89:e2:dc:57:
d6:c5:53:a7:5f:e2:ac:d4:b6:2b:c5:fe:da:08:3c:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A8:8D:89:ED:B0:E1:C3:5D:90:37:37:73:FE:D9:5F:76:04:B2:48
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806923F260D311EDA6465F0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.76.0/23
103.166.214.0/23
103.170.36.0/23
103.171.108.0/23
103.177.226.0/23
Signature Algorithm: sha256WithRSAEncryption
72:0f:d6:5a:b0:bd:bc:ac:c7:60:35:64:66:f3:11:db:e7:78:
fa:f4:e8:b7:88:ab:e8:77:12:e4:b3:0b:35:d2:a0:0d:d9:d0:
28:05:c1:db:d6:3a:3c:06:b7:13:c7:11:a9:52:c8:20:bb:b7:
23:d9:de:2c:19:49:bd:21:36:9f:16:c1:69:48:8f:3d:78:a9:
d4:e9:83:d8:e0:b3:66:6f:be:21:3b:e8:71:f1:1e:73:e3:cd:
46:71:c1:40:8a:38:1b:ae:4d:48:fa:65:c4:bb:23:e3:cb:b9:
e3:58:cc:36:38:cd:62:52:fc:e6:93:df:5b:f1:54:9d:fc:f0:
d4:83:a4:d6:89:05:e5:89:e6:2f:bc:68:5d:fd:71:c1:e5:c4:
67:93:dc:e7:6c:eb:de:a9:86:e3:c4:6c:06:e7:c0:9c:43:a9:
de:f8:fc:0b:3f:e7:91:08:16:0f:e0:70:b2:50:5d:9e:bc:71:
2e:1b:d7:f8:0b:b7:9e:c4:0c:d2:55:e4:a8:2b:fd:df:d1:2b:
90:19:5c:bf:cb:27:e9:65:0a:d7:8d:88:a1:8c:62:a8:88:63:
a3:fa:cd:77:bd:f0:d9:1b:d9:c6:c3:43:90:d3:c8:14:03:ea:
6e:41:9e:ff:72:ca:00:07:a9:c4:4e:3e:85:5e:13:b3:02:b6:
8a:f0:63:43
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICYUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMjA4MDg0MTQzWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzkxYTM0Ni1jZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuvHfW6H0rnQnDs9ElyV6Urw8s9pcswC5j3iXYrnx7j3iLPwy0ZsFpUVz2SL
M+DShrNNYV9ugHRXktYZIDRQHTFiOxbNddStqpehplTbJsWluAuQEEdEikFt9vye
RJm6tUUQmHvm5yPBxcc9pzQE4sDAcp5+J1B1lz810o/DC8+QfSzeIIhuNSutGv2j
YHcU4bNV3KmaYPS8CclOBorK7GeGTWbHAWU7SZQBaT9XPKJNB8dDxU3xPRECDGlU
lh13ixceu+txkifyiHS+DRD9jJLY5yLJqTDvWxJJTIF1mAt6yq3o2bmyDjoZK4ni
3FfWxVOnX+Ks1LYrxf7aCDwXsQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFG6ojYnt
sOHDXZA3N3P+2V92BLJIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODA2OTIzRjI2
MEQzMTFFREE2NDY1RjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAFnpUwDBAFnptYDBAFnqiQDBAFnq2wDBAFnseIwDQYJKoZI
hvcNAQELBQADggEBAHIP1lqwvbysx2A1ZGbzEdvnePr06LeIq+h3EuSzCzXSoA3Z
0CgFwdvWOjwGtxPHEalSyCC7tyPZ3iwZSb0hNp8WwWlIjz14qdTpg9jgs2ZvviE7
6HHxHnPjzUZxwUCKOBuuTUj6ZcS7I+PLueNYzDY4zWJS/OaT31vxVJ388NSDpNaJ
BeWJ5i+8aF39ccHlxGeT3Ods696phuPEbAbnwJxDqd74/As/55EIFg/gcLJQXZ68
cS4b1/gLt57EDNJV5Kgr/d/RK5AZXL/LJ+llCteNiKGMYqiIY6P6zXe98Nkb2cbD
Q5DTyBQD6m5Bnv9yygAHqcROPoVeE7MCtorwY0M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org