Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8ECE0D8489C111ECA9865C1DC4F9AE02.roa
File: 8ECE0D8489C111ECA9865C1DC4F9AE02.roa (raw, json)
Hash identifier: FgyMn5ZJVMshi2k8H4q2aooiXDfEijdeG++9pp1tLSg=
Subject key identifier: 48:1F:5E:3B:1E:49:F0:03:A5:31:B8:6E:0F:C1:0E:4E:C6:39:E2:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4FE1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8ECE0D8489C111ECA9865C1DC4F9AE02.roa
Signing time: Mon 16 May 2022 04:08:17 +0000
ROA not before: Mon 16 May 2022 04:08:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134864
IP address blocks: 45.250.216.0/22 maxlen: 24
103.69.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20449 (0x4fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:08:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ce30-d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:a5:57:23:e9:cd:3e:5f:4f:38:f7:47:cb:
12:9d:64:6b:d8:4a:cd:cb:a5:95:07:51:8f:00:ec:
11:1c:fa:8c:71:8d:27:e5:58:1c:10:bb:4d:42:00:
0b:06:b7:cf:af:0e:ec:61:a5:2a:fe:ee:ed:69:88:
7f:82:ec:2b:5c:cc:50:ad:db:e0:00:56:a7:65:91:
41:9e:f7:1d:c0:09:83:ad:89:77:5c:97:a0:64:f5:
47:67:b2:5c:aa:12:01:90:70:e9:5d:87:16:ed:b4:
71:5a:0f:3f:9f:54:d7:10:12:f0:01:da:68:87:15:
0e:70:58:a3:a5:6a:6c:2e:20:8b:e7:bd:e9:a7:15:
64:5c:a5:97:fd:e4:bb:2c:07:70:dc:96:37:89:d9:
e8:4a:93:62:6c:ce:f7:61:09:94:fe:54:9f:50:26:
13:91:d7:ce:f9:4b:75:d5:f9:ba:63:df:a3:25:7f:
65:83:9b:32:2f:20:4f:b4:81:3e:db:10:be:c2:02:
cd:59:05:eb:ea:e0:ce:55:57:87:d3:b6:8c:c2:71:
f9:a6:82:68:91:20:96:21:12:4c:ad:eb:9c:17:64:
6c:be:c2:96:97:a5:de:3d:a9:99:61:05:04:d0:5d:
7e:19:b8:80:44:ea:4c:df:33:a7:b9:7d:16:81:5d:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:5E:3B:1E:49:F0:03:A5:31:B8:6E:0F:C1:0E:4E:C6:39:E2:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8ECE0D8489C111ECA9865C1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.216.0/22
103.69.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:c8:d3:8c:19:6c:66:76:00:b4:57:23:64:12:3b:a8:93:e5:
ab:f3:62:f5:04:49:13:9a:f8:65:60:ec:ee:e1:b6:16:b9:02:
6f:10:a2:b3:33:ca:8e:1f:1f:54:98:a9:15:12:9f:c9:f5:57:
93:fc:1f:43:0c:1e:d2:02:03:95:92:22:c8:5c:57:b2:ca:3a:
04:e6:ee:73:e1:50:4f:33:cb:84:d1:47:b8:e7:4a:64:47:b5:
0e:70:30:62:b3:be:93:13:43:94:f5:3a:16:e1:2c:e5:29:31:
65:75:81:98:05:c8:d7:60:81:c5:85:fe:de:53:af:51:ea:98:
19:f8:a6:dd:ac:e1:20:fd:dd:e8:47:56:5c:37:98:75:c6:89:
32:80:f4:97:42:30:89:d9:78:57:fa:88:e8:22:51:e0:a9:36:
68:d0:85:22:6c:0a:2c:4d:29:03:e0:ef:85:d5:73:45:17:18:
b6:25:3f:40:02:18:89:1f:8c:eb:15:1a:4b:48:5d:1f:4d:95:
66:9d:a5:d3:9a:80:57:59:73:8d:35:35:41:17:b4:9b:23:6e:
2b:7e:2d:b9:69:4b:cb:3d:6c:d6:14:c3:a6:26:51:20:c5:86:
50:4f:61:ea:c5:c9:38:e1:c4:2c:af:a9:33:e7:da:77:6d:fb:
b5:77:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org