Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DDFC6E29EBB11ECB0565D11C4F9AE02.roa
File: 8DDFC6E29EBB11ECB0565D11C4F9AE02.roa (raw, json)
Hash identifier: SW12l107a+1AQW+qb9i+IGNc4BNouSyjmvQY7KH7K+U=
Subject key identifier: 77:9C:6D:9F:85:5E:25:8F:28:64:DA:64:91:BC:3D:F7:04:3D:4A:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5876
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DDFC6E29EBB11ECB0565D11C4F9AE02.roa
Signing time: Mon 04 Jul 2022 06:01:48 +0000
ROA not before: Mon 04 Jul 2022 06:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.38.128.0/22 maxlen: 24
103.46.192.0/22 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.163.148.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.174.159.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.177.174.0/23 maxlen: 24
103.181.140.0/24 maxlen: 24
103.181.141.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
2404:ba00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22646 (0x5876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 4 06:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c2824c-37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:c8:80:9f:15:e7:69:77:6a:af:f8:15:88:
20:9d:87:74:34:03:83:c4:0f:7b:4b:67:b0:f8:6d:
dd:a4:b0:82:b5:b5:eb:7b:3c:bc:49:e5:a1:96:86:
5c:0a:3b:aa:e0:42:c2:96:c8:99:8e:e6:3b:d8:fb:
72:c7:cd:9c:ff:ac:e6:46:b2:79:50:76:8e:8d:e0:
f2:7a:7c:04:95:4f:9e:96:f3:6a:1b:8d:cb:60:cc:
77:dd:68:da:24:de:da:a1:01:94:ed:c9:46:63:46:
69:2b:d5:44:c3:03:7d:95:da:a3:b1:33:5a:9a:8c:
59:d9:a1:d7:ee:c5:0b:f8:bd:62:39:41:2a:58:8f:
17:73:86:ce:12:0a:6d:0e:60:40:01:90:ac:fc:ae:
f4:aa:46:da:eb:c4:76:55:b5:11:50:93:c7:d5:bb:
c9:54:9b:84:00:f0:08:c6:49:b7:09:0e:39:8b:7e:
60:9e:19:d2:54:db:2b:c1:d1:38:60:b9:e7:2d:88:
67:47:b0:73:74:69:96:c1:59:69:ed:45:3a:3a:82:
e4:b3:00:f0:bf:99:44:43:91:c4:39:aa:1f:aa:05:
17:3f:22:2e:e5:99:52:dd:f1:94:31:a8:f9:f5:f8:
47:53:c1:e0:c0:da:ac:08:dc:ae:7b:84:70:58:3f:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:6D:9F:85:5E:25:8F:28:64:DA:64:91:BC:3D:F7:04:3D:4A:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DDFC6E29EBB11ECB0565D11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
59.152.120.0/22
103.10.224.0/22
103.38.128.0/22
103.46.192.0/22
103.88.56.0/22
103.99.196.0/22
103.147.1.0/24
103.159.212.0/24
103.163.148.0/23
103.164.46.0/23
103.165.28.0/23
103.169.156.0/23
103.174.159.0/24
103.175.31.0/24
103.177.174.0/23
103.181.140.0/23
103.183.54.0/23
103.189.146.0/24
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.251.52.0/22
IPv6:
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
a9:2b:c0:60:37:d0:72:bc:60:13:e9:34:03:a4:e5:e0:15:50:
44:c4:17:43:f0:a3:e1:6a:36:14:86:ff:4d:29:22:16:30:6a:
92:ba:21:e2:99:c1:0f:4e:b6:c2:84:d2:61:4c:3b:eb:2b:69:
e8:21:db:f9:fc:15:43:3d:90:c3:a9:2e:11:fa:02:ad:1e:d7:
86:9c:46:78:6c:da:98:f3:71:b5:f5:a7:55:0a:87:21:5e:a8:
65:60:c7:ea:a2:24:c4:eb:80:87:30:22:14:58:19:4d:cd:a8:
07:db:b1:f6:4d:a2:b2:2f:0c:41:f2:24:d7:69:1a:40:ba:75:
3e:f7:b9:04:98:bc:b1:69:af:6a:8d:ed:c7:a5:17:b3:b8:a0:
b2:49:c0:ec:41:48:08:d6:f5:fc:c6:46:d1:2c:cd:5e:89:bc:
b9:41:bd:8d:a6:82:f4:29:ae:f8:8f:c3:d1:f3:9a:03:e9:fc:
54:d3:e4:24:e0:01:69:e8:3f:12:8a:23:8f:28:e8:72:ff:0a:
f8:4e:4c:4d:28:90:0f:d3:a6:4e:f5:69:da:dd:72:31:bf:99:
f4:e4:08:05:17:5b:52:33:bf:02:86:08:ef:51:18:99:16:02:
66:eb:17:ee:de:b2:e6:3c:4f:f7:b4:53:d0:6b:d4:cc:c5:cd:
4a:40:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org